last executing test programs: 1m42.337026353s ago: executing program 32 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, r1, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 1m20.834772239s ago: executing program 33 (id=526): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa018100}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000340)="01505a", 0x3}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r1, 0x2}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f00000066c0)={&(0x7f0000006500)=[0x0, 0x0, &(0x7f0000000240)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c8c5a5caa4d79aab8b68f677b50070078ec184795aa99ebf8f9"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 58.570123223s ago: executing program 6 (id=792): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1218e58, &(0x7f0000000780)={[{@i_version}, {@resgid}], [{@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '}}+'}}, {@dont_measure}]}, 0x4, 0x61f, &(0x7f0000001140)="$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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x82) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) lsm_list_modules(&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=0x38, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000640)={0x1, r2, 'id0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'syzkaller1\x00'}, {0x20, '}}+'}, {0x20, 'taprio\x00'}, {0x20, '^#'}], 0xa, "fab25c4953b1f53d26710cc409474cb1af62b5534bac73206b79a2b35e7c7fc810c53e716f7f4f89c3553013ff6ed3fce33e21895d1b682a0cf6f81e039d1f54316d28c1a4affcbe0a782d7c8a04c860b89e1aee589c884949ab33bea1cde3bf7c5229e0575139c3d801db7e07815b6f8a9681ab489a6cd35780f5a746dfa6c7ee273427759c15fa2403fcbf74df3e97a9dc680abc154b9d1c79ef846eaf21ac12e66da6269520384f3ae427938acb5c9b4d87b1ed3df88a1de03b7f158f080689449b717b10ed6288aa46620d66c7ce54c39f089a63bcea"}, 0xfe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0xe, 0x1}}}, 0x24}}, 0x20) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x6000003, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = semget$private(0x0, 0x4000000009, 0x668) semctl$IPC_RMID(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4008840) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a80) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f0000000340)={{0x66, 0x40}, 'port1\x00', 0x0, 0x40, 0x1, 0x0, 0xfffffffa, 0x1, 0x9, 0x0, 0x4, 0x5}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x480, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340)={0x3, 0x3, 0xf, 0x0, 0xe, 0x7fff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r10, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x18, 0x40000}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="b0acc6", 0x3}], 0x1, &(0x7f0000000840)=ANY=[@ANYRESOCT=r5, @ANYRES32=r9, @ANYRES32], 0x18, 0x841}}], 0x2, 0x11) ioctl$BLKPG(r8, 0x1269, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newqdisc={0x120, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x8, 0xd}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xf0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x88, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}]}]}}]}, 0x120}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000140), &(0x7f0000000480)='%pS \x00'}, 0x20) 58.507950199s ago: executing program 6 (id=794): socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8a010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={0x0, 0x4}, 0x201, 0xe7e, 0x0, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000002c0)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@private}, {@remote}, {@multicast2}]}]}}}}}}}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r6, 0x1, 0x45, 0x0, &(0x7f0000001dc0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0xffff, 0xfff2}, {0x10, 0x6}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0xc000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaa694888a811003a00000000000047fb"], 0x1d) 58.347938521s ago: executing program 6 (id=796): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(0x0, 0x4000, 0xd7) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe, 0x0) 58.222979523s ago: executing program 6 (id=798): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) readv(r0, &(0x7f0000001200)=[{0x0}, {&(0x7f0000001080)=""/93, 0x5d}], 0x2) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x167, 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000280)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @addr={0xe, 0x2}}, {0x4, 0xcf, 0xb9, 0x3, @tick=0x9, {0x7, 0x7}, {0x1, 0x2}, @ext={0x0, 0x0}}], 0x70) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x4008032, r3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f00000000c0), 0x0, 0x80084) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="cd73a8b6", @ANYRES16=r8, @ANYBLOB="050326bd7000000000000700000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x24044080) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0xe, 0x7f, 0x2, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r11 = syz_open_pts(r10, 0x40080) ioctl$TCGETS(r11, 0x5401, &(0x7f0000000000)) 57.413111002s ago: executing program 3 (id=808): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(0x0, 0x4000, 0xd7) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe, 0x0) 57.298931772s ago: executing program 6 (id=809): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r0, &(0x7f0000000e40)={0x8, {"ace0e6aa42f37706cd5797c96b9364b32a1a7cee34790852c1ad2e4d7cc38bea207cdbfd834f2d3eb9be7c18e7b8a73ad84142bea6df04b7927204ceba2b4b92686b639923868b0d527655fdeb4e2f5dd25231db979a6ead8a29424f9dab295fb76e14a4deb2d66d918ea82f63d9673e6ed7d1b77e1fe501b5717c645785dd4d10f018f354ad9a04840ab7e4019a118a493fd0e5e5a26f3bf6f4f5991007a07dfe5db78c41dcb7509e0a9b907b19890acc0c9e626cadec492382c2020e51ae4be2c941238af607d80c4693ec6d43753c6bf1f95981d89ec7366623e136b18de179d9a25b885e7697647b14939c224a955e39f0d063202d1dcb7d0f664d096bcc8d011fee4d2cad0f6c8a6f94ab72c9ea820c1ef9f50e4d76b7938cc924f392bedb79ef3409bbfe0615be1b6e7ee3ecfa2ebd31e5254b2c7a4d4a39eb7723f2819414765cfacc20cfb79d1fa09a4b9b3571c7a7b00c123093302789b3518e16ff8419dca882edcbbc656bab8184a64509b9c735fdbb63e7330a7b2a577db115f577f68ced730f0f871adaf6e56ea25b020ffc3d8f0103177745ce9c65614a93ad3a2ac26097c0b6077fc472513b476f4a62dd76d1d93f556ac09572ef137ea6c29c93a2b1e5f4fb44af211b49d54cd632463918c19021689a8db27aadff957287c72c011ee7a8144cb80b6e623e6737dd73e962387609fd7ba8949f865e4bfaad09ef5086e5f1443ca058f9beb3b938c9dfe5cdf0cdafa8eb3da0b7d09b986992c2ea0244348602ae2642bef15d820bcbd0cdb7d8a254357d1623d0d73416ee9396ca5dc775b2426e7b29a00d6677db10d3e18e504542560e0bf432699edea748165872e9a48418feebc7f0f446b6414019000711218a408d6994b927450f91668695c5b84ce8a2a1f28793120f24eced36bab433cc77c6a1fa1fa8b010ba34c46e739560158c106aed9acc87b391a865006b0659fb066d4131c11410fc64a627b876815583b0ace7f868c5d5c87abc14996d4b20d0caf5b1b62c8572cfb29ae6235f2d6c6f2b25eca444977b481120bcc69712e7c057e30b41aea57e69dee4353a2a76a3142d5a9b8644251ba0e756c7baa752bd34d23a67be635a080f62051b92200857e7d488b531d08c251311d4d583bb43831dd24d39144923f5a2ea6385a47228403719ec99f82ab76cfa7eab4ccc869ac0e7a3cf0eeb8b8fee16d2436911f2cfdb7df352c2997b88dedb67c82954345268f8f1fbcf92779014e8d8751db9083511cc2091554c8402380b310abf24b87aeb037863f0eb2b720b3601a58001ac17afffed467d3f1abf43fcacefa68b1623a27246204091774d1d16c9912c7edc148946c7c2d3addc4298b7426e60efed743cb86be4b76223c04287de6f340a255bbe30df52108bac11f4142ab5a9e260ee2e7087a26bba40a9f9c6dbbe5ae789f8aaa7775e62d0b3ffe1c6d9294612b1fb4fe36a981a31f833389946aaf25a5d5837b12f17e989d9ad3054e5954b54abe299794f6f1567ac7e8cba86989b0184da2b2b311e064483ac625cdac8d66e07aa9e493495942e98b116b8f42cb53c1d0d80b12cdf7066e54943a74f9b224edfe39c8b25de8f63514b247645f98b14567986eefaa021125069ee97f4a445ea71e1d766029da7781c5c364ef9c5a18a817fef9d46e7de198c39d8821112786190fd5cf255fb527171835d21a4f406fefe00c7268a440b08826c94d4570aaa2d86ee351486542b68660487a748a8f4f5b4a5c0255b0dd63ef636d06673cba5eebf582736f6814d2f345d22af49ef231c78c104bb80f1900587c85d8a6e40bfc6eee2f3b015b98f23e4c4fc466d00e1bd94067f008f519182f6cefcb3565b4360a67d2901a7e0cd160f4c7ce3eeccb8ab821851c49f3b135aff27c69ddb435f33146b9a820f3c60b4ea02154140100201e4abbfcca3cf1bd953b351fd0fbbe65c8fda4153ec949ed3c1ed58a5ac6a2e435636ca7114db1060f0765f364a1a7d4757da96583c33b56a36460cd8fa7949b812b118f1529c96d1308957b5fa469227254267926d54d269a97b50aac57b246b316c7a4f441795cdfa505ec5eacd493a5066f8b9215ad6839997546d4975c3b36297ba56a5dca0b06a9e10b8b207cdad709fa939884bf902b0016cd20cf3cd52056e57147d74c067ef7759ce9fef7a393f1a334adbc0820853a5de261c9abf9bda7729bb72e9666c667c7b3eb4cef0cf31d0bfebe447b3b4433855da238a6669bb65ae0854b76c7a270461a79998af189ab188d9670af65403f8eea25c362ae82bbe1312e0720c13b3cbc8ef6a8723b4fd348e2964bd00140c8c4d98a7011643b5c68c716ad51d7880f2423e3bf8bfd926f0b019e02943bcde7c31e6cfe61b02218206c8774278381698a2e6a1d1e85063b1fa4c86e7cb2e8346424be2af83af35a5f49372ddbbb8b2ec229f46e8c9034ecdf7a02dd37be6191fc6a3bf76e2a0b3d755f259426d27ec872e48118f5f34953afebdf34c55bd0da1ed097d53914e2c5f3df0206764853b89837ee485555d506260ad10cfe532ea4d98fdc3a5ee79390741be8fe7c90474e8793630c6c7458a108bb00f9e51cc71ed24c3e7a9c4a475f2f61bf8ba85aaea139fc8a6c87925c2e29ba48aa1e7a0d74ab3aa96bcb427d99f6d08caf8107d1c60835ce31bfc18cb1f6e29cb6f96f0d8af1135f04b45b7bb7c351d7af540f7e2093fa4f4eb62bcc1dec8335137ec2dc4fcd5310bf3a442f178b54f55f38442e4a51a0c292e192f6ebc051505d7f6633a2cd9e2f7a4d3cdfb227d9e1ca1c01fe2d4445107c90c128a77f8e02710b07ca50b92cf0a742b203a183e0b7b3d336b5c795511be3cbd3a7a4a2f91260fada36df96028c25a4872e6ae2b505a8a1e85476457e750107bb69193f2aa45f3d00d008b3449f909f086c9cbb1a4c5a59de082491383cb0cdf3fe031c06219656b629bc955c3abf47a2add4466308cb04fbc6b81a6d6cbb55634441f2b7f66f1bd36ab56e6abbc731b7f941af718194a08d6173018529a11f6f4410de949c94c006322fb879ff7a2b7d790f5dae01231dbfc6d53eec604e01b76887b6719652eaa842f38e3622e5a551d226fe71cebbdb1133126a36ec9ba0b3ef379511c5a4c48873bd2477742541745ed81cee58711ebaa2f031b436a1a58d001894ce25b1db6ccab2f6dec531e0cc1d916e862b64588316ee84acdc8c94e5110eb321e35bff912e88e6024f8d93edebd8013a7d39f47c33c0fdf01faaaaaab23e1fab13725b8a1cb89b03997d3bfb05c8627658700ab83fa232b7a31c20c3f53c16bdf78408cb6ff49edd2f9adac931635241aa5868d57e9c91266530b291065db025a7de16e5c5d588a24295d038394810f4be6cb77f9bf2fd4cb3012d06ce1f4c708e8ff7df324b02edcf7888a30fc83cc78309251754b9c32b866bfe841e81ca5ea7e64fe4ce99117d66fc88590687e965fd4ead99598ce01892ba8801800bd1471bed25d895de4d13a2b7ee2e5dd61821b156ac965e8be2e2a923f6ce3645cab99551d02c35940390c8fafd2144c36a7c7d89c1499d6ead461d7b5dbce9fa24a3a9aa2734d2d441955c06c0c40c9c53a8712ba01deb7029a89531109ad9bc296187eca0382ef16f2d7a5cd77a6cea17f1753f7449b760fdab702a3e64a2854664f75387d518e8cf335ef5ce2475892cde71dababe930555bab0fb6e727dd46c74b295229fb5149f2d4c19b7d0fbe902c5ce49c67b5c1b440db34a4149516862b543fb7d97884f478ced421989a3793998cae85df003c3733fae8d6c76a62bce5e6de9cf4ed3fa15fdeace1e9c5864f4d329acd2069cd9068e28bc6fcc9af93fefd50912185ec7e7abefd47271432f7d62ebcc6a875ba76376b4b227224f3c7aa4c6816ceec616f5e26cd4a17fdd83e3cbecb301a701648073dedab265a8fb4500cf6832044d1b94c02bc2dd2fd3e86bf35f84cb6a473d1b3e20fccabffba1be294d35b413db0fe79dddd6b57f72e69a71d2a697432850b5a5df2fd9d79301b84db3409c4efcbe3fc2dd50f64c06010b71d94fe69ec39d95abcff3eaef3328ab103a716bd9477907a53854e95a5a8f1ed9beb7116660b304bed7e6b47a1f0b94264819d3d333e71eed8aff455701b3decb354ea3bd49bb06eaa90e161ec5ba37211cd3a3cdf492a0a2da8956adea087d78b6c6cf4deb75107b2e9d5f14fa188a9ca14092a7ec258b4923f8f49904abedfe4c9c78ae1b4c149aad0ceb30909fa00be2d3ab9cd25e8522ef4d6526ea7c040dbdeb98b19899327c5e5b58bff197e28bb22c97d04022d1f7705723b8ed9261324f7cf18b912d34378ab3d45d2ba53f87d0756d51389440bde60f1b289613c36f7ff9dc029fcdf290c1d4a4ebb53da03fc3b2d2dce73bf18e90dc412eab0d7e25d7749a29bda9f45d3e2b1dd0462aa4b52c0084b9730522e1b290b7e78b96d12c4bda8f57596121ace658ffb30673e096c65eef3057cfe08f0bbf51216426fd0955cc639b4431929f07c953e7ec5828c61ecd13bca618fe65e077328ba7f298a8fbc79236c34a5d519e48fbd482468d300de96674527aa26c94e67e5afdfcde58e667cbeeb330333e8375325601776131e9ca33f0fd52d8f1dcc6868ea9ca287ae430d3af60459e23b05bb40b52b8da61f77d3a7cabae872d4a6cf7b124e66b0c38943334b946a0fab3d023beb22d82464b6195404378c9140bfd25278ca9081b544b0cb8f8ac1b05700d315a6510b889e0dcd8a21995a05f756344726f99098cf2d559d43177afc0594331fa19e00e4d9e0988d745526a20201b5ae1c8b22e0439e76adbf69e3343de8d40b38939b02e61ffee6a57310f0f739bc872a9a0f5b33d5d9207911d65bfaee586e4232c64a059f21b504983f47ffffe0559f8e7da0215f55bd74a3bb4be59cb5675a45302c32a67a0d9bfdaff85b68793465391203be71f4fc72767297a4359608d5682231672ca4affd5d21dce2dd8cc3409e03296809d777dbbf44d71fff2e55c48d0eb354e880ec84200e868ad16f99e13c0218128b6bb15e1bc29b5ca9971e1d9bf831c5ccb4c1f6a348fc4f3a879285aa02bded2c40fa09c68137620e72db5b72ca4faeeffe7df178dcefa42d5341bc6691e7675899e713b5c11febace23461a5224cbb98aa599f7136f10277d0c2f9c8b124dca8f851a048989f4d404787696f839fe799738a360375c2952f9a5e6c75ca930183df28e2859d1d0d428877db049d0b976102a8933829c068bf00431e1a1423c24f42bc8fa3de132ab0dde5b84ad9cf6029abedeec7d1d774f11a2e20c857f5e9da9befa3ad177d5dea63aa9ca3427e69ac65fa78707e63529a47ac4a4539b88e2d6559f217861258781b0a89c32b65153a45a1d86ba6a2df9327e8d4ed189e70cd0cec2129f6286a1a8eb8be490f03f6a9f3b0d908418beac38e47feea808798418b9ff5f9d73133a25fe7aafbbd2159916c50d036559f03cb775d77fefa7893bb29f4814a5a18f5606e096d490db05e3a0063a2fc2795c6bb28f582c756e5d5feccf5ee0981e12e04b2bbe4d1ec16daf6fdfd892cdad95e2092bf52f9f138e498650314f7b4ccc3684441af78fe68a1ce0d01c23c8b9474428aaf716b9d6c39edfe46bf0d342e559cdea2e11fffee045bdcb611b646e014df5ef970da2a1d6dd7d76a56d1fc0fbf49fd53c1bbca3d14e8c04163b49d0fb619718e44abff765442cdde0b4fcc7851ab0989de11903e57afe26af1315e851139ceba", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) 57.214928423s ago: executing program 3 (id=810): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0xc0000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x97e5ad60, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000000000000000001060003400002000008000740000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 57.195592339s ago: executing program 6 (id=813): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000f00)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0x4a8e) (async) r5 = openat(r4, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='0', 0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r1, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) syz_usb_connect(0x4, 0x24, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) r9 = socket(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r10}, 0x50) dup2(r11, r10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) fsetxattr$trusted_overlay_upper(r10, &(0x7f0000000300), &(0x7f0000000540)={0x0, 0xfb, 0xb3, 0x5, 0x4, "6fcdee91cb971b981ae669067c101ae0", "58b056164d772a3c292a0a2ecc106feceddcf5ea5953bbeac08f05df853baec17268af50747c08d8511997b1b60f8aee3c161949c5ccf280aa0bcfcd4a457b612997dcb5effc21e932bff0e97ba1b07681f6099aeef4f65c1719db4fd361d4e77faedfac60e9f79ac7639afbdf4f9c61605cb605fb666c1c8df1041082fb6a18affb014b75333f17e6e19bffd50dd2cc5e370dc4c33efdeb1bbe45573ba6"}, 0xb3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x1000000, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 56.927369568s ago: executing program 34 (id=816): bpf$MAP_CREATE(0x0, 0x0, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0xf) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000180)=0xb0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) recvfrom$inet6(r2, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20020056ff00000000004000", @ANYRES32=r6, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) 56.346407868s ago: executing program 3 (id=822): socket(0x10, 0x3, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x201, 0x41, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x4}, 0x74b7c02b851c54d4, 0x0, 0x204, 0x0, 0x1, 0x10000, 0xffff, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x1e00000000000000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x3}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x41015500, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a300000000014000000090a01040000000000000000070000003c000000180a0300000000000000000002000002080007400000000008000740000000010c00054000000000000000010900020073797a31000000140000001000010000000000000000000084000a"], 0x98}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000104010400000000000000000a00000606000640000200000a0002000000000c01000000"], 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4c000) 55.863751603s ago: executing program 3 (id=828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000380)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) file_setattr(r0, 0x0, &(0x7f0000000100)={0x6a61, 0x0, 0x6, 0xff, 0x5}, 0x18, 0x1000) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008"], 0x2c}}, 0x0) syz_clone(0xa0300100, 0x0, 0x0, &(0x7f000000aec0), 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) 55.162993074s ago: executing program 3 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000005640), 0x1ff, 0x80840) ioctl$MON_IOCX_GET(r1, 0x40189206, 0x0) 53.972102721s ago: executing program 3 (id=843): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) syz_clone3(&(0x7f0000000140)={0x104901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="52aaaaaaaaaaaaaaaaaaaaaa2c8863"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/24, 0x18}, {&(0x7f0000001f80)=""/132, 0x84}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0000780000000000119078000000000000000000004e200064907802000000030000000100000056805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e071cde687aa341afb3db3"], 0x0) r9 = open(0x0, 0x14b142, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, r9}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES64=r6, @ANYRESOCT=r4, @ANYRESOCT=r0], &(0x7f0000006200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.971949352s ago: executing program 35 (id=843): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) syz_clone3(&(0x7f0000000140)={0x104901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="52aaaaaaaaaaaaaaaaaaaaaa2c8863"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/24, 0x18}, {&(0x7f0000001f80)=""/132, 0x84}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0000780000000000119078000000000000000000004e200064907802000000030000000100000056805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e071cde687aa341afb3db3"], 0x0) r9 = open(0x0, 0x14b142, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, r9}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES64=r6, @ANYRESOCT=r4, @ANYRESOCT=r0], &(0x7f0000006200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 49.664268894s ago: executing program 4 (id=911): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f0000000d80)=[{&(0x7f0000000300)="be15", 0x2}], 0x1, 0xd, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 49.580971936s ago: executing program 4 (id=912): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x8000) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6000000000080000fe80cc0900000000000000000000000000000000000000aa320001010000000000000000000000005d5a27120fe395fed7bb556995c0d4d5fb97b44ea47e2e0b6ca96606be20028cb87ab600de2e93eebe2a0295ba7210262173d9d77db161bda44cf65521703f5104eb2a8f5d38a2b114b2071848c6ccac286d077677b6000000002ae3e01e70f2884737aad80f5f2990a0c725abb7cf315d39e871"], 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000980)=""/183, 0xb7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) 47.94060367s ago: executing program 8 (id=938): r0 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4ed9, 0xc000, 0x408, 0x100002bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)={0x20000017}) close_range(r0, r2, 0x0) 47.833092938s ago: executing program 8 (id=939): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) shutdown(r3, 0x1) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x80) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x4008014) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0xfffffffffffffffe}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8, 0x2, 0x7, 0x454c6caa, 0x2, 0x9, 0x100}, 0x1c) ustat(0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x4000055) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 47.696591703s ago: executing program 8 (id=941): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_read_part_table(0x636, &(0x7f0000000640)="$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") 47.565722637s ago: executing program 8 (id=948): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000400)={&(0x7f0000000380)=[{0x9, 0xd5e94afb106a037e, 0x0, {0x10, 0x2}}, {0x4, 0x0, 0x0, {0x7, 0x1, 0x2}}], 0x2, 0x20, 0x82, 0xffffffffffffff6f}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x7, 0x5a6, &(0x7f0000003200)="$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") chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000040)='./bus\x00', 0x100, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/42, 0x2a}], 0x1, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/18, 0x12}], 0x1, 0x0) 47.391013822s ago: executing program 8 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x100000000000000, 0x0, 0x2400d044}, 0x20000050) 47.165881871s ago: executing program 8 (id=954): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x1, 0x3, 0x2635}}, {0x4}}]}]}, 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) write$cgroup_type(r4, &(0x7f0000000180), 0x9) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r5, 0x9, 0x3, 0x8ffff) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x534e, '\x00', r2, r5, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) accept4$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f0000000140)=0x10, 0x80000) mount(0x0, 0x0, 0x0, 0x24, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) sendfile(r0, r0, 0x0, 0x7a680000) 47.143872556s ago: executing program 36 (id=954): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x1, 0x3, 0x2635}}, {0x4}}]}]}, 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) write$cgroup_type(r4, &(0x7f0000000180), 0x9) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r5, 0x9, 0x3, 0x8ffff) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x534e, '\x00', r2, r5, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) accept4$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f0000000140)=0x10, 0x80000) mount(0x0, 0x0, 0x0, 0x24, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) sendfile(r0, r0, 0x0, 0x7a680000) 46.568292975s ago: executing program 4 (id=957): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 46.553650219s ago: executing program 4 (id=958): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) chdir(&(0x7f0000000080)='./sys\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r3, 0xfffffffffffffffd, 0x58) write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) 46.458814853s ago: executing program 4 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0, 0x1}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="20ba0100180a04004800128009000100766c616e0000000038000280060001000400000004000480280003800c00090001000000018000000c00010000020000010400000c", @ANYRES32=r2], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe1005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r7, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) close(r7) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 46.051063899s ago: executing program 4 (id=963): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_sctp(0x2, 0x4974f08dceb55ab9, 0x84) socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/55, &(0x7f0000000080)=0x37) 42.077012766s ago: executing program 37 (id=813): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000f00)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0x4a8e) (async) r5 = openat(r4, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='0', 0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r1, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) syz_usb_connect(0x4, 0x24, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) r9 = socket(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r10}, 0x50) dup2(r11, r10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) fsetxattr$trusted_overlay_upper(r10, &(0x7f0000000300), &(0x7f0000000540)={0x0, 0xfb, 0xb3, 0x5, 0x4, "6fcdee91cb971b981ae669067c101ae0", "58b056164d772a3c292a0a2ecc106feceddcf5ea5953bbeac08f05df853baec17268af50747c08d8511997b1b60f8aee3c161949c5ccf280aa0bcfcd4a457b612997dcb5effc21e932bff0e97ba1b07681f6099aeef4f65c1719db4fd361d4e77faedfac60e9f79ac7639afbdf4f9c61605cb605fb666c1c8df1041082fb6a18affb014b75333f17e6e19bffd50dd2cc5e370dc4c33efdeb1bbe45573ba6"}, 0xb3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x1000000, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 36.050069133s ago: executing program 1 (id=1041): dup(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x29, 0x1, &(0x7f0000000000)=0xab7, 0x4) 35.891001414s ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0x29}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 35.774477024s ago: executing program 1 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a000100f400000000080007008000000000004a4d419384000000bb14000100000000000000000000000045000011fb29a2e25d2e6c42e9b773be889409b138fd25c335212cba6c1379663cb889a46ea04d8a2e000000000000"], 0x44}}, 0x0) setuid(0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f000000000000000000000073116f00000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.658982344s ago: executing program 1 (id=1045): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@oldalloc}]}, 0x3, 0x4ee, &(0x7f0000002080)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x6b) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) splice(r1, 0x0, r2, 0x0, 0x8000, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x12) unshare(0x2c040480) r5 = semget$private(0x0, 0x5, 0x203) semtimedop(r5, &(0x7f0000000040)=[{0x3, 0x4, 0x1800}, {0x3, 0x5, 0x800}], 0x2, 0x0) unshare(0x8000000) tkill(r4, 0x16) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000080)={0xc9, 0x5, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0x0, 0xb6, 0x0}) 35.36691659s ago: executing program 1 (id=1048): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2c, 0x4, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffe3}, {0xa, 0xd}, {0xd, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8800) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) 35.107100367s ago: executing program 1 (id=1051): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000026c0)='\\', 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 35.086433172s ago: executing program 38 (id=1051): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000026c0)='\\', 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 30.91635651s ago: executing program 39 (id=963): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_sctp(0x2, 0x4974f08dceb55ab9, 0x84) socket$netlink(0x10, 0x3, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/threaded\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/55, &(0x7f0000000080)=0x37) 1.649631083s ago: executing program 5 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001500050000000000000000000a", @ANYRES32=0x1, @ANYBLOB="14000713"], 0x34}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote}, 0xffffffffffffff43) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd2b}, 0x94) 1.571030043s ago: executing program 0 (id=1455): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) (fail_nth: 2) 1.570592754s ago: executing program 0 (id=1456): modify_ldt$write2(0x11, &(0x7f0000000040)={0x1006, 0x100000, 0x2000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, &(0x7f00000003c0), &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4, r3}, 0xc) write$tun(r1, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}}}}, 0x26) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.558803657s ago: executing program 5 (id=1457): r0 = socket$inet(0x2, 0x9605b3b97825a2ed, 0xc72) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$phonet_pipe(0x23, 0x805, 0x2) listen(r3, 0x401) connect$phonet_pipe(r3, &(0x7f0000000700)={0x23, 0x0, 0x6}, 0x10) keyctl$restrict_keyring(0xa, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000340)='id\x0f\x00\x00\x00\x00\xdbf\xf7\xad\"\xb6c}\x81\xcfG\x8f\x8aHI\xcc%\xe5\x9a\xea~y\xdf\xce\xe0*\xc1\x95J\x7frZ\xf9|\xba=,\x04\xe69\xb8\x058\xace\xb9\xd2V\xf6$\xef\xa8\xcf\xbf\x87h\v\x04\xf1\xc8\xc2\xd9*\x05\xcb\x9b\xa7\x03S\xe4\xa90\xb6U\x94%\xfaF\xbbC\xf5\xb3g\x8c\x1a\ac\x94\xcb\x18P\xc8\x1cO\xc3?tu\xe9\x82\xf3\xbf\x16\x15\x95R\x93:U\xbd\x19E\xb6\x97|94}\xf7w<)') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40294, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x1, 0x0, 0x4, 0x1, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xa, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20048884}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x3}}, './proc\x00'}) fsetxattr$security_selinux(r7, &(0x7f0000000180), &(0x7f0000000480)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x1) 1.496316093s ago: executing program 0 (id=1459): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x73a, &(0x7f0000000f40)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) 1.496104553s ago: executing program 7 (id=1460): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x43}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) keyctl$assume_authority(0x10, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) 1.484686285s ago: executing program 9 (id=1461): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x54d1, 0x43, 0x4c7, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) socket(0x840000000002, 0x3, 0xff) socket$packet(0x11, 0x3, 0x300) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlockall(0x7) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x20000008, 0xa2600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010703000100f1ffdfff26000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) r5 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040)={0x80002019}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r8], 0x1c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r9, 0x3}}, 0x18) 1.450042245s ago: executing program 5 (id=1462): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x6}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000060000008500000002b82f30ce14391c00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.35373176s ago: executing program 5 (id=1463): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.35337416s ago: executing program 0 (id=1464): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000140)={@multicast1, @multicast2, @local}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f00000003c0)='au', 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97802000008000500"/28, @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10f) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000008050000010b"], 0x9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}, 0x9}, 0x0) 1.3531764s ago: executing program 5 (id=1465): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x43}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) keyctl$assume_authority(0x10, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) 1.208809437s ago: executing program 9 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001500050000000000000000000a", @ANYRES32=0x1, @ANYBLOB="14000713"], 0x34}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote}, 0xffffffffffffff43) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd2b}, 0x94) 1.141865394s ago: executing program 9 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r1], 0x4c}}, 0x200040cc) r2 = dup3(r0, r0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x313, 0xffffffff, {0x77359400}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "0c1ac1639f1d6af5"}}, 0x48}, 0x1, 0x0, 0x0, 0x845}, 0x4041895) 1.04193102s ago: executing program 9 (id=1469): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}) 1.027978094s ago: executing program 9 (id=1470): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/95, 0x5f}], 0x1}, 0x40000021) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x43}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x21, @private=0xa010100, 0x4e24, 0x0, 'none\x00', 0x5, 0xf, 0x3b}, {@empty, 0x4e20, 0x1, 0x100, 0xd51, 0xf3}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x200}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010101}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9eb7, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x77, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000300)=0x9, 0x4) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 569.573372ms ago: executing program 9 (id=1471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r4, @ANYBLOB="280012800900010076657468"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r6, @ANYRESDEC=r2, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES16=r4, @ANYRES8=r3, @ANYRES64=r6, @ANYRES32=r0], 0x1c}}, 0x8050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100072baa203a0007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x600000000000000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$SEG6(0x0, r10) sendmsg$IPSET_CMD_SWAP(r10, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x6, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048055) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="86", 0x1}, {&(0x7f0000000400)="58ae4515fb66096f54782443f7313326108fbceadec55fa9b76ea9eb0496bc05ea844294339a4849cb45bf82bdbd89855455708ed72d9528124faecbdd453dc28a397cfb80308fc71b90d2d44b41d85884a075828abaa0ea9db7222f0edde42bfdae756cff6d9742b2962d3b504a956d1b26507b53810411955818bb3d5c9f550cf11b38962cc0f93f07c1789d6ee57f397ffa06beafb0d6b4d1", 0x9a}, {&(0x7f00000004c0)="fb11502367dfa492c30d1eceb306d6499ca7173c0f9729425af87679097e115436b9ffeb7df48f3f4645828561c6010da367a7f21d9c6f1d78cf789b5e893110b5945135b9b629921bf1439006b93f540c6ae9476af21aca6a6488cf5bee214a44290d5084f2ddab1286e373df9a5ca7e6418234bbe6cebcd76c91c782ca806fd628e6b5559b154e7649677786de902738cb52f62d380b44152b31a8ca2463d54e1ef8cf4c28e91767fef32034ab67a9959aa97c129c1f3e2fbcb037cc0ec248ad69fde4569240e5e0dd54d9c19c5e4a1a932a5651", 0xd5}], 0x3}, 0x0) recvmsg(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) 542.476849ms ago: executing program 7 (id=1472): socket(0x10, 0xa, 0x7) r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcc7) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r3) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000500)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit={'commit', 0x3d, 0x400}}, {@noquota}, {@data_err_abort}]}, 0xfe, 0x26b, &(0x7f0000000ec0)="$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") perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x102002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x896, &(0x7f0000000040)={0x0, 0x3cad, 0x1c080, 0x7, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7321, 0x54, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) 462.79772ms ago: executing program 5 (id=1473): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000001b00)="a6", 0xffb8, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000200)="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", 0xe01}], 0x1}}], 0x1, 0x4001c00) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r7, 0x3}, 0x8) 451.930413ms ago: executing program 2 (id=1474): socket$inet(0x2, 0x9605b3b97825a2ed, 0xc72) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x805, 0x2) listen(r2, 0x401) connect$phonet_pipe(r2, &(0x7f0000000700)={0x23, 0x0, 0x6}, 0x10) keyctl$restrict_keyring(0xa, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000340)='id\x0f\x00\x00\x00\x00\xdbf\xf7\xad\"\xb6c}\x81\xcfG\x8f\x8aHI\xcc%\xe5\x9a\xea~y\xdf\xce\xe0*\xc1\x95J\x7frZ\xf9|\xba=,\x04\xe69\xb8\x058\xace\xb9\xd2V\xf6$\xef\xa8\xcf\xbf\x87h\v\x04\xf1\xc8\xc2\xd9*\x05\xcb\x9b\xa7\x03S\xe4\xa90\xb6U\x94%\xfaF\xbbC\xf5\xb3g\x8c\x1a\ac\x94\xcb\x18P\xc8\x1cO\xc3?tu\xe9\x82\xf3\xbf\x16\x15\x95R\x93:U\xbd\x19E\xb6\x97|94}\xf7w<)') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000840)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40294, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x1, 0x0, 0x4, 0x1, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xa, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20048884}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10ru\x00t\xe3c*sgrVdd:\xc4e', 0xfffffffffffffffe) 369.595904ms ago: executing program 0 (id=1475): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xa) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendto$packet(r2, &(0x7f0000000040)="99c9137c0740efb04eab19d42b20", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x19, 0x0, 0x1, 0xd4, 0x6, @random="0000ee773968"}, 0x14) (async) fallocate(r0, 0x2, 0x1, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000040900010073797a300000000020000000030a01010000000000000000010000000900030073797a300000000054000000060a01040000000000000000010000002c0004802800018007000100637400001c000280050003000100000008000240000062000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) (async) sendmsg$nl_route(r3, 0x0, 0x40080) (async, rerun: 64) personality(0x87bf5ac905ea0f7f) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000018) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setns(0xc9, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0x118, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@algo_crypt={0x60, 0x2, {{'cts-cbc-aes-ce\x00'}, 0xc0, "4133447b8a86fc95af1f7d937c05fd79e69e377999e0aea8"}}]}, 0x118}}, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x810) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r8, 0x4) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 347.61464ms ago: executing program 2 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x9}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x5, [@func={0xe, 0x0, 0x0, 0xc, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @enum64={0xa, 0x5, 0x0, 0x13, 0x1, 0x4, [{0x10, 0xdc3, 0x2}, {0xb, 0x9, 0x1}, {0xe, 0x6, 0x4}, {0x8, 0x8, 0x8}, {0x2, 0x5, 0x3}]}, @union={0xc, 0x9, 0x0, 0x5, 0x1, 0xfffffffb, [{0xf, 0x0, 0x20000000}, {0x8, 0x5, 0x9}, {0xd, 0x0, 0x5}, {0x7, 0x4}, {0x9, 0x2, 0x6}, {0x5, 0x4000, 0x9}, {0xb, 0x2}, {0xb, 0x4, 0x200}, {0x9, 0x3, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f00000001c0)=""/246, 0xf5, 0xf6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x10000, 0x5, r0, 0x0, '\x00', 0x0, r1, 0x800000, 0x4}, 0x50) 288.539015ms ago: executing program 2 (id=1477): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x111001, 0x103}, 0x18) syz_io_uring_setup(0x36b5, &(0x7f0000000000)={0x0, 0x8b3a, 0x40000, 0x1, 0x25f}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 223.657251ms ago: executing program 7 (id=1478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001500050000000000000000000a", @ANYRES32=0x1, @ANYBLOB="14000713"], 0x34}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote}, 0xffffffffffffff43) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd2b}, 0x94) 220.440972ms ago: executing program 7 (id=1479): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x111001, 0x103}, 0x18) syz_io_uring_setup(0x36b5, &(0x7f0000000000)={0x0, 0x8b3a, 0x40000, 0x1, 0x25f}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.'], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 148.571321ms ago: executing program 0 (id=1480): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2022) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_config_ext={0xfc, 0x3}, 0x122e9, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x40011) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000014) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1a, 0x20c080) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) timer_getoverrun(0x0) 130.040046ms ago: executing program 2 (id=1481): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r5, 0xffffffffffffffff, 0x0) 95.488455ms ago: executing program 2 (id=1482): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x800) ioctl$BLKROGET(r0, 0x125e, 0x0) 48.668707ms ago: executing program 2 (id=1483): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x43}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) keyctl$assume_authority(0x10, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) 3.029909ms ago: executing program 7 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb52}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x8, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) setns(0xffffffffffffffff, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0) 0s ago: executing program 7 (id=1494): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xff, 0x0, 0x5, 0x82, 0x0, 0x7fffffff, 0x4d988, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x1, @perf_config_ext={0x9, 0x8000000000468}, 0x10f48, 0xfffffffffffffff7, 0x40, 0x7, 0x7ffffffd, 0x5, 0x8, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xc, r0, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x8850, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0xa001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(&(0x7f0000000040)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) fsetxattr$security_ima(r2, &(0x7f0000000000), 0x0, 0x0, 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2d7, 0x0, 0x5}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x7f}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sched_setscheduler(0x0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socket(0x6, 0x1, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) kernel console output (not intermixed with test programs): ized netlink message: protocol=4 nlmsg_type=5135 sclass=netlink_tcpdiag_socket pid=7613 comm=syz.0.1000 [ 111.579365][ T29] audit: type=1400 audit(1790500421.572:3517): avc: denied { write } for pid=7618 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.661088][ T7594] gretap0: entered promiscuous mode [ 111.705779][ T7594] erspan0: entered promiscuous mode [ 111.781486][ T7594] ip_vti0: entered promiscuous mode [ 111.806448][ T7594] ip6_vti0: entered promiscuous mode [ 111.867168][ T7594] sit0: entered promiscuous mode [ 111.947941][ T7594] ip6tnl0: entered promiscuous mode [ 111.994034][ T7594] ip6gre0: entered promiscuous mode [ 112.046716][ T7594] syz_tun: entered promiscuous mode [ 112.072257][ T7594] ip6gretap0: entered promiscuous mode [ 112.074206][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.074362][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.074537][ T7594] bridge0: entered promiscuous mode [ 112.076205][ T7594] vcan0: entered promiscuous mode [ 112.078249][ T7594] bond0: entered promiscuous mode [ 112.078281][ T7594] bond_slave_0: entered promiscuous mode [ 112.078348][ T7594] bond_slave_1: entered promiscuous mode [ 112.080201][ T7594] team0: entered promiscuous mode [ 112.080218][ T7594] team_slave_0: entered promiscuous mode [ 112.080365][ T7594] team_slave_1: entered promiscuous mode [ 112.147281][ T7594] dummy0: entered promiscuous mode [ 112.164129][ T7594] nlmon0: entered promiscuous mode [ 112.166963][ T7594] batadv0: entered promiscuous mode [ 112.183071][ T7594] vxcan0: entered promiscuous mode [ 112.194938][ T7594] vxcan1: entered promiscuous mode [ 112.195667][ T7594] veth0: entered promiscuous mode [ 112.198746][ T7594] veth1: entered promiscuous mode [ 112.212473][ T7594] wg0: entered promiscuous mode [ 112.223370][ T7594] wg1: entered promiscuous mode [ 112.226036][ T7594] wg2: entered promiscuous mode [ 112.226804][ T7594] veth0_to_bridge: entered promiscuous mode [ 112.245334][ T7594] veth1_to_bridge: entered promiscuous mode [ 112.266035][ T7594] veth0_to_bond: entered promiscuous mode [ 112.278544][ T7594] veth1_to_bond: entered promiscuous mode [ 112.287172][ T7594] veth0_to_team: entered promiscuous mode [ 112.298697][ T7594] veth1_to_team: entered promiscuous mode [ 112.317631][ T7594] veth0_to_batadv: entered promiscuous mode [ 112.323832][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.323862][ T7594] batadv_slave_0: entered promiscuous mode [ 112.329319][ T7594] veth1_to_batadv: entered promiscuous mode [ 112.330305][ T7594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.330329][ T7594] batadv_slave_1: entered promiscuous mode [ 112.353357][ T7594] xfrm0: entered promiscuous mode [ 112.355854][ T7594] veth0_to_hsr: entered promiscuous mode [ 112.358919][ T7594] veth1_to_hsr: entered promiscuous mode [ 112.366160][ T7594] hsr0: entered promiscuous mode [ 112.369946][ T7594] veth1_virt_wifi: entered promiscuous mode [ 112.372395][ T7594] veth0_virt_wifi: entered promiscuous mode [ 112.383661][ T7594] vlan1: entered promiscuous mode [ 112.389534][ T7594] macvlan0: entered promiscuous mode [ 112.394243][ T7594] macvlan1: entered promiscuous mode [ 112.394989][ T7594] ipvlan0: entered promiscuous mode [ 112.395073][ T7594] ipvlan1: entered promiscuous mode [ 112.408031][ T7594] macvtap0: entered promiscuous mode [ 112.409075][ T7594] macsec0: entered promiscuous mode [ 112.411405][ T7594] geneve0: entered promiscuous mode [ 112.412195][ T7594] geneve1: entered promiscuous mode [ 112.423995][ T7594] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 112.434846][ T7594] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 112.450383][ T7594] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 112.465165][ T7594] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 112.465723][ T7594] gre1: entered promiscuous mode [ 112.472579][ T228] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.474753][ T176] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.474829][ T176] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.474863][ T176] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.612746][ T7570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.617754][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.618375][ T7570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.620435][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.650357][ T7570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.662805][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.663389][ T7570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.667966][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.673603][ T7642] 9p: Bad value for 'rfdno' [ 112.747690][ T29] audit: type=1400 audit(1790500422.742:3518): avc: denied { write } for pid=7634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.780981][ T29] audit: type=1400 audit(1790500422.782:3519): avc: denied { write } for pid=7657 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.832461][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.856808][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.872530][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.872562][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.880885][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.880921][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.928245][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1005'. [ 112.928470][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1005'. [ 112.928484][ T7670] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 113.019351][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.019563][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.037005][ T29] audit: type=1400 audit(1790500423.022:3520): avc: denied { write } for pid=7659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.095542][ T29] audit: type=1400 audit(1790500423.092:3521): avc: denied { write } for pid=7683 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.097747][ T7679] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1007'. [ 113.262334][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.373762][ T29] audit: type=1400 audit(1790500423.372:3522): avc: denied { write } for pid=7690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.430516][ T29] audit: type=1400 audit(1790500423.422:3523): avc: denied { write } for pid=7711 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.446427][ T7570] veth0_vlan: entered promiscuous mode [ 113.452792][ T7570] veth1_vlan: entered promiscuous mode [ 113.479976][ T7570] veth0_macvtap: entered promiscuous mode [ 113.496423][ T7570] veth1_macvtap: entered promiscuous mode [ 113.516877][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.525553][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.550974][ T228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.551103][ T228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.551151][ T228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.551187][ T228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.653452][ T29] audit: type=1400 audit(1790500423.652:3524): avc: denied { write } for pid=7714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.695976][ T29] audit: type=1400 audit(1790500423.692:3525): avc: denied { write } for pid=7731 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.744030][ T7735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.787028][ T7732] loop1: detected capacity change from 0 to 1024 [ 113.836530][ T7732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.836588][ T7732] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.838081][ T7730] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.992: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.838223][ T7730] EXT4-fs (loop1): Remounting filesystem read-only [ 114.226438][ T7788] FAULT_INJECTION: forcing a failure. [ 114.226438][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.226470][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.9.1016 Not tainted syzkaller #0 PREEMPT(lazy) [ 114.226493][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.226504][ T7788] Call Trace: [ 114.226511][ T7788] [ 114.226529][ T7788] __dump_stack+0x1d/0x30 [ 114.226556][ T7788] dump_stack_lvl+0x95/0xd0 [ 114.226581][ T7788] dump_stack+0x15/0x1b [ 114.226664][ T7788] should_fail_ex+0x262/0x280 [ 114.226692][ T7788] should_fail+0xb/0x20 [ 114.226715][ T7788] should_fail_usercopy+0x1a/0x20 [ 114.226797][ T7788] _copy_from_user+0x1c/0xb0 [ 114.226822][ T7788] sctp_getsockopt_reconfig_supported+0x6e/0x350 [ 114.226859][ T7788] sctp_getsockopt+0x52b/0xaa0 [ 114.226933][ T7788] sock_common_getsockopt+0x60/0x70 [ 114.226965][ T7788] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 114.227013][ T7788] do_sock_getsockopt+0x2f5/0x570 [ 114.227137][ T7788] ? vfs_write+0x850/0x9a0 [ 114.227198][ T7788] __x64_sys_getsockopt+0x11d/0x1a0 [ 114.227227][ T7788] x64_sys_call+0x1032/0x2550 [ 114.227354][ T7788] do_syscall_64+0x112/0x360 [ 114.227376][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.227395][ T7788] RIP: 0033:0x7f44c04de159 [ 114.227410][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.227427][ T7788] RSP: 002b:00007f44bef37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 114.227474][ T7788] RAX: ffffffffffffffda RBX: 00007f44c0765fa0 RCX: 00007f44c04de159 [ 114.227489][ T7788] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003 [ 114.227501][ T7788] RBP: 00007f44bef37090 R08: 0000200000000400 R09: 0000000000000000 [ 114.227513][ T7788] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 114.227528][ T7788] R13: 00007f44c0766038 R14: 00007f44c0765fa0 R15: 00007ffdda548518 [ 114.227552][ T7788] [ 114.474688][ T7805] loop7: detected capacity change from 0 to 512 [ 114.587340][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1018'. [ 114.643028][ T7570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.802982][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.803062][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.876554][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1021'. [ 114.995259][ T7840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.045282][ T7839] loop7: detected capacity change from 0 to 512 [ 115.639905][ T7631] kernel read not supported for file /vcsa (pid: 7631 comm: kworker/0:11) [ 115.677127][ T3404] kernel read not supported for file /vcsa (pid: 3404 comm: kworker/1:5) [ 116.093304][ T7925] __nla_validate_parse: 2 callbacks suppressed [ 116.093402][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 116.096843][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 116.096864][ T7925] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 116.098782][ T7927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.279770][ T7938] FAULT_INJECTION: forcing a failure. [ 116.279770][ T7938] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.279802][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.0.1036 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.279883][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.279895][ T7938] Call Trace: [ 116.279901][ T7938] [ 116.279908][ T7938] __dump_stack+0x1d/0x30 [ 116.279932][ T7938] dump_stack_lvl+0x95/0xd0 [ 116.280023][ T7938] dump_stack+0x15/0x1b [ 116.280044][ T7938] should_fail_ex+0x262/0x280 [ 116.280073][ T7938] should_fail_alloc_page+0xf2/0x100 [ 116.280144][ T7938] __alloc_frozen_pages_noprof+0x157/0x400 [ 116.280188][ T7938] alloc_pages_mpol+0xaf/0x1d0 [ 116.280216][ T7938] alloc_pages_noprof+0x94/0x140 [ 116.280306][ T7938] anon_pipe_write+0x10a/0x1030 [ 116.280330][ T7938] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 116.280368][ T7938] ? __pfx_anon_pipe_write+0x10/0x10 [ 116.280441][ T7938] ? __pfx_anon_pipe_write+0x10/0x10 [ 116.280474][ T7938] vfs_write+0x57f/0x9a0 [ 116.280509][ T7938] ksys_write+0xdc/0x1a0 [ 116.280570][ T7938] __x64_sys_write+0x40/0x50 [ 116.280601][ T7938] x64_sys_call+0x154e/0x2550 [ 116.280627][ T7938] do_syscall_64+0x112/0x360 [ 116.280708][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.280734][ T7938] RIP: 0033:0x7fc12d71e159 [ 116.280805][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.280825][ T7938] RSP: 002b:00007fc12c177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.280848][ T7938] RAX: ffffffffffffffda RBX: 00007fc12d9a5fa0 RCX: 00007fc12d71e159 [ 116.280865][ T7938] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 116.280882][ T7938] RBP: 00007fc12d7b506b R08: 0000000000000000 R09: 0000000000000000 [ 116.280897][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.280947][ T7938] R13: 00007fc12d9a6038 R14: 00007fc12d9a5fa0 R15: 00007ffe42aa4908 [ 116.281050][ T7938] [ 116.495370][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 116.495384][ T29] audit: type=1400 audit(1790500426.492:3548): avc: denied { write } for pid=7956 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.545628][ T7959] loop9: detected capacity change from 0 to 512 [ 116.560407][ T7959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.571419][ T7959] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.1040: iget: bad i_size value: 38620345925642 [ 116.571534][ T7959] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.573009][ T7959] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1040: couldn't read orphan inode 15 (err -117) [ 116.573035][ T7959] fserror_report: 1 callbacks suppressed [ 116.573046][ T7959] loop9: lost filesystem error report for type 5 error -117 [ 116.574855][ T7959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.590944][ T29] audit: type=1400 audit(1790500426.582:3549): avc: denied { write } for pid=7958 comm="syz.9.1040" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.614939][ T29] audit: type=1400 audit(1790500426.612:3550): avc: denied { create } for pid=7958 comm="syz.9.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 116.643789][ T7960] ip6t_hbh: too many supported opts specified [ 116.761662][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 116.774952][ T29] audit: type=1400 audit(1790500426.772:3551): avc: denied { write } for pid=7964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.777945][ T7959] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1040: bg 0: block 5: invalid block bitmap [ 116.778149][ T7959] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 116.778175][ T7959] EXT4-fs (loop9): This should not happen!! Data will be lost [ 116.778175][ T7959] [ 116.778198][ T7959] EXT4-fs (loop9): Total free blocks count 0 [ 116.778211][ T7959] EXT4-fs (loop9): Free/Dirty block details [ 116.778224][ T7959] EXT4-fs (loop9): free_blocks=0 [ 116.778236][ T7959] EXT4-fs (loop9): dirty_blocks=1 [ 116.778248][ T7959] EXT4-fs (loop9): Block reservation details [ 116.778276][ T7959] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 116.799343][ T29] audit: type=1400 audit(1790500426.772:3552): avc: denied { write } for pid=7980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.846932][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.968809][ T29] audit: type=1400 audit(1790500426.962:3553): avc: denied { write } for pid=7982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.976232][ T7984] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1043'. [ 117.004172][ T7997] loop1: detected capacity change from 0 to 512 [ 117.008159][ T7997] EXT4-fs: Ignoring removed oldalloc option [ 117.039149][ T7997] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1045: bg 0: block 5: invalid block bitmap [ 117.039181][ T7997] loop1: lost filesystem error report for type 5 error -117 [ 117.040539][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 117.040577][ C1] EXT4-fs (loop1): initial error at time 1790500427: ext4_validate_block_bitmap:436 [ 117.040667][ C1] EXT4-fs (loop1): last error at time 1790500427: ext4_validate_block_bitmap:436 [ 117.043635][ T7997] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 117.043745][ T7997] loop1: lost filesystem error report for type 5 error -117 [ 117.047515][ T29] audit: type=1400 audit(1790500427.042:3554): avc: denied { write } for pid=7999 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.055447][ T7997] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1045: invalid indirect mapped block 3 (level 2) [ 117.055523][ T7997] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 117.063094][ T7997] EXT4-fs (loop1): 1 orphan inode deleted [ 117.063113][ T7997] EXT4-fs (loop1): 1 truncate cleaned up [ 117.063548][ T7997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.081870][ T29] audit: type=1400 audit(1790500427.082:3555): avc: denied { write } for pid=7995 comm="syz.1.1045" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.088510][ T7997] EXT4-fs (loop1): shut down requested (0) [ 117.296470][ T29] audit: type=1400 audit(1790500427.292:3556): avc: denied { write } for pid=8006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.348561][ T29] audit: type=1400 audit(1790500427.342:3557): avc: denied { write } for pid=8019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.502785][ T8003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.510184][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.510318][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.520340][ T8024] netlink: 'syz.7.1050': attribute type 1 has an invalid length. [ 117.543473][ T228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.585616][ T8024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.605033][ T228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.684154][ T228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.755438][ T228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.851183][ T8038] loop9: detected capacity change from 0 to 1024 [ 117.856238][ T8038] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 117.856739][ T8038] JBD2: no valid journal superblock found [ 117.856750][ T8038] EXT4-fs (loop9): Could not load journal inode [ 118.268015][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.268049][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.268107][ T8028] bridge_slave_0: entered allmulticast mode [ 118.268750][ T8028] bridge_slave_0: entered promiscuous mode [ 118.311013][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.311047][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.311157][ T8028] bridge_slave_1: entered allmulticast mode [ 118.311572][ T8028] bridge_slave_1: entered promiscuous mode [ 118.367899][ T228] bridge_slave_1: left allmulticast mode [ 118.367922][ T228] bridge_slave_1: left promiscuous mode [ 118.368051][ T228] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.368731][ T228] bridge_slave_0: left allmulticast mode [ 118.368747][ T228] bridge_slave_0: left promiscuous mode [ 118.368883][ T228] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.485424][ T228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.486588][ T228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.487562][ T228] bond0 (unregistering): Released all slaves [ 118.514363][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.517410][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.568300][ T8028] team0: Port device team_slave_0 added [ 118.569918][ T228] hsr_slave_0: left promiscuous mode [ 118.570258][ T228] hsr_slave_1: left promiscuous mode [ 118.570911][ T228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.570926][ T228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.603296][ T228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.603315][ T228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.663082][ T228] veth1_macvtap: left promiscuous mode [ 118.663110][ T228] veth0_macvtap: left promiscuous mode [ 118.663149][ T228] veth1_vlan: left promiscuous mode [ 118.663180][ T228] veth0_vlan: left promiscuous mode [ 118.858856][ T8083] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.1061'. [ 118.910837][ T228] team0 (unregistering): Port device team_slave_1 removed [ 118.929326][ T228] team0 (unregistering): Port device team_slave_0 removed [ 118.963221][ T8028] team0: Port device team_slave_1 added [ 118.964576][ T8062] netlink: 12504 bytes leftover after parsing attributes in process `syz.7.1057'. [ 118.966352][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 119.008221][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.008235][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.008311][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.008855][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.008868][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.008934][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.168059][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.168177][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.174842][ T8093] loop9: detected capacity change from 0 to 512 [ 119.183166][ T8093] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 119.234563][ T8028] hsr_slave_0: entered promiscuous mode [ 119.235037][ T8028] hsr_slave_1: entered promiscuous mode [ 119.235325][ T8028] debugfs: 'hsr0' already exists in 'hsr' [ 119.235350][ T8028] Cannot create hsr debugfs directory [ 119.529766][ T8121] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1063'. [ 119.536465][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.617271][ T8028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.622867][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.623472][ T8028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.633114][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.635886][ T8028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.647138][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.647695][ T8028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.655349][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.780893][ T8143] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1065'. [ 119.802700][ T8143] ip6gre1: entered promiscuous mode [ 119.802745][ T8143] ip6gre1: entered allmulticast mode [ 119.816084][ T8143] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1065'. [ 119.892660][ T8150] loop9: detected capacity change from 0 to 1024 [ 119.896258][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.898592][ T8150] EXT4-fs (loop9): can't mount with both data=journal and delalloc [ 119.944003][ T8028] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.967958][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.968012][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.978177][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.978209][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.004360][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1067'. [ 120.235611][ T8185] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 120.235636][ T8185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.235669][ T8185] vhci_hcd vhci_hcd.0: Device attached [ 120.241964][ T228] IPVS: starting estimator thread 0... [ 120.331171][ T8188] IPVS: using max 2352 ests per chain, 117600 per kthread [ 120.446456][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.470568][ T7623] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 120.648504][ T8028] veth0_vlan: entered promiscuous mode [ 120.658514][ T8028] veth1_vlan: entered promiscuous mode [ 120.695852][ T8028] veth0_macvtap: entered promiscuous mode [ 120.699515][ T8028] veth1_macvtap: entered promiscuous mode [ 120.718799][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.727042][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.750223][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 120.771218][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.771687][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.771725][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.771828][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.828289][ T8234] loop7: detected capacity change from 0 to 512 [ 120.845252][ T8186] vhci_hcd: connection reset by peer [ 120.847568][ T72] vhci_hcd vhci_hcd.9: stop threads [ 120.847585][ T72] vhci_hcd vhci_hcd.9: release socket [ 120.847605][ T72] vhci_hcd vhci_hcd.9: disconnect device [ 120.874606][ T8243] futex_wake_op: syz.9.1076 tries to shift op by 32; fix this program [ 120.879258][ T8234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.880347][ T8234] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.960537][ T6734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.978852][ T8256] futex_wake_op: syz.9.1076 tries to shift op by 32; fix this program [ 121.199160][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 121.230965][ T8278] loop9: detected capacity change from 0 to 128 [ 121.248363][ T8278] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.250705][ T8278] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.295711][ T7296] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.368459][ T8283] __nla_validate_parse: 3 callbacks suppressed [ 121.368484][ T8283] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1081'. [ 121.438480][ T8294] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1083'. [ 121.517368][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 121.517384][ T29] audit: type=1400 audit(1790500431.512:3747): avc: denied { write } for pid=8297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.534275][ T8301] netlink: 'syz.9.1083': attribute type 16 has an invalid length. [ 121.534376][ T8301] netlink: 'syz.9.1083': attribute type 3 has an invalid length. [ 121.534388][ T8301] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1083'. [ 121.559132][ T8300] loop7: detected capacity change from 0 to 128 [ 121.559744][ T8300] vfat: Unknown parameter 'rWdir' [ 121.592357][ T8300] tipc: Started in network mode [ 121.592433][ T8300] tipc: Node identity 7f000001, cluster identity 4711 [ 121.592669][ T8300] tipc: New replicast peer: 127.0.0.1 [ 121.602571][ T8300] tipc: Enabled bearer , priority 10 [ 121.611878][ T8300] tipc: Disabling bearer [ 121.683903][ T8301] loop9: detected capacity change from 0 to 8192 [ 121.689440][ T29] audit: type=1400 audit(1790500431.682:3748): avc: denied { mounton } for pid=8293 comm="syz.9.1083" path="" dev="cgroup2" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.848391][ T29] audit: type=1400 audit(1790500431.842:3749): avc: denied { write } for pid=8303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.909161][ T29] audit: type=1400 audit(1790500431.902:3750): avc: denied { write } for pid=8323 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.103921][ T228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.107368][ T29] audit: type=1400 audit(1790500432.102:3751): avc: denied { write } for pid=8332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.183026][ T29] audit: type=1400 audit(1790500432.182:3752): avc: denied { write } for pid=8347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.215458][ T8328] loop2: detected capacity change from 0 to 512 [ 122.233129][ T228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.245379][ T8328] EXT4-fs (loop2): invalid #clusters per group: 95 [ 122.306015][ T228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.357285][ T29] audit: type=1400 audit(1790500432.352:3753): avc: denied { write } for pid=8352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.375886][ T29] audit: type=1400 audit(1790500432.362:3754): avc: denied { write } for pid=8369 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.412843][ T228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.532724][ T29] audit: type=1400 audit(1790500432.532:3755): avc: denied { write } for pid=8371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.577257][ T228] bridge_slave_1: left allmulticast mode [ 122.577280][ T228] bridge_slave_1: left promiscuous mode [ 122.577397][ T228] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.578034][ T228] bridge_slave_0: left allmulticast mode [ 122.578080][ T228] bridge_slave_0: left promiscuous mode [ 122.578224][ T228] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.579435][ T228] pimreg: left allmulticast mode [ 122.633036][ T29] audit: type=1400 audit(1790500432.632:3756): avc: denied { write } for pid=8389 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.663791][ T228] team0: Port device bridge0 removed [ 122.675315][ T228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.676692][ T228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.677821][ T228] bond0 (unregistering): Released all slaves [ 122.727374][ T228] tipc: Disabling bearer [ 122.727397][ T228] tipc: Left network mode [ 122.727467][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.727499][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.727600][ T8315] bridge_slave_0: entered allmulticast mode [ 122.728110][ T8315] bridge_slave_0: entered promiscuous mode [ 122.729374][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.729403][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.729503][ T8315] bridge_slave_1: entered allmulticast mode [ 122.730033][ T8315] bridge_slave_1: entered promiscuous mode [ 122.770118][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.783167][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.799910][ T228] hsr_slave_0: left promiscuous mode [ 122.808408][ T228] hsr_slave_1: left promiscuous mode [ 122.814377][ T228] veth1_macvtap: left promiscuous mode [ 122.814405][ T228] veth0_macvtap: left promiscuous mode [ 122.814510][ T228] veth1_vlan: left promiscuous mode [ 122.814542][ T228] veth0_vlan: left promiscuous mode [ 122.945726][ T228] team0 (unregistering): Port device team_slave_1 removed [ 122.949988][ T228] team0 (unregistering): Port device team_slave_0 removed [ 122.993836][ T8315] team0: Port device team_slave_0 added [ 122.994606][ T8315] team0: Port device team_slave_1 added [ 123.008291][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.008306][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.008334][ T8315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.013353][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.013367][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.013444][ T8315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.098568][ T8315] hsr_slave_0: entered promiscuous mode [ 123.098923][ T8315] hsr_slave_1: entered promiscuous mode [ 123.103717][ T8315] debugfs: 'hsr0' already exists in 'hsr' [ 123.103729][ T8315] Cannot create hsr debugfs directory [ 123.126656][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 123.162695][ T8415] xt_policy: output policy not valid in PREROUTING and INPUT [ 123.210027][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 123.250041][ T8415] veth1_to_bond: entered allmulticast mode [ 123.276370][ T8414] veth1_to_bond: left allmulticast mode [ 123.343582][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1096'. [ 123.416307][ T8451] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1098'. [ 123.471254][ T8315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.475076][ T8315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.475775][ T8315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.477248][ T8315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.479500][ T8315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.485216][ T8315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.492356][ T8315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.498015][ T8315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.594440][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.611307][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.616168][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.616203][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.619875][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.619909][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.865159][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.943327][ T8518] loop2: detected capacity change from 0 to 512 [ 123.961468][ T8518] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 123.961618][ T8518] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.961701][ T8518] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1103: bad orphan inode 15 [ 123.961725][ T8518] loop2: lost filesystem error report for type 5 error -117 [ 123.961796][ T8518] ext4_test_bit(bit=14, block=5) = 0 [ 123.962284][ T8518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 124.004466][ T8531] netlink: 'syz.7.1105': attribute type 8 has an invalid length. [ 124.004506][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1105'. [ 124.019429][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.171943][ T8315] veth0_vlan: entered promiscuous mode [ 124.174485][ T8315] veth1_vlan: entered promiscuous mode [ 124.197193][ T8558] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1108'. [ 124.198028][ T8315] veth0_macvtap: entered promiscuous mode [ 124.200372][ T8315] veth1_macvtap: entered promiscuous mode [ 124.205659][ T8549] loop9: detected capacity change from 0 to 512 [ 124.205913][ T8549] EXT4-fs: Ignoring removed i_version option [ 124.209656][ T8549] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.216417][ T8549] EXT4-fs (loop9): orphan cleanup on readonly fs [ 124.216747][ T8549] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 124.216880][ T8549] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.1107: Failed to acquire dquot type 1 [ 124.216933][ T8549] loop9: lost filesystem error report for type 5 error -28 [ 124.217989][ T8549] EXT4-fs (loop9): 1 truncate cleaned up [ 124.230477][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 124.230512][ C1] EXT4-fs (loop9): initial error at time 1790500434: ext4_mb_generate_buddy:1317 [ 124.230566][ C1] EXT4-fs (loop9): last error at time 1790500434: ext4_acquire_dquot:7069 [ 124.252454][ T8549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.318940][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.324020][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.326268][ T8549] tipc: Started in network mode [ 124.326281][ T8549] tipc: Node identity 1000001, cluster identity 4369 [ 124.326293][ T8549] tipc: Node number set to 16777217 [ 124.326475][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1107'. [ 124.373390][ T8549] tipc: Enabling of bearer rejected, failed to enable media [ 124.412638][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.423565][ T72] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.423731][ T72] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.423835][ T72] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.423900][ T72] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.476427][ T8581] FAULT_INJECTION: forcing a failure. [ 124.476427][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 124.476531][ T8581] CPU: 0 UID: 0 PID: 8581 Comm: syz.9.1113 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.476554][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.476567][ T8581] Call Trace: [ 124.476573][ T8581] [ 124.476580][ T8581] __dump_stack+0x1d/0x30 [ 124.476602][ T8581] dump_stack_lvl+0x95/0xd0 [ 124.476697][ T8581] dump_stack+0x15/0x1b [ 124.476718][ T8581] should_fail_ex+0x262/0x280 [ 124.476774][ T8581] ? __alloc_skb+0x2e0/0x6f0 [ 124.476804][ T8581] should_failslab+0x8c/0xb0 [ 124.476903][ T8581] kmem_cache_alloc_node_noprof+0x82/0x400 [ 124.476991][ T8581] ? netlink_insert+0x684/0x900 [ 124.477020][ T8581] ? __alloc_skb+0x2e0/0x6f0 [ 124.477065][ T8581] __alloc_skb+0x2e0/0x6f0 [ 124.477099][ T8581] ? __alloc_skb+0x209/0x6f0 [ 124.477134][ T8581] netlink_alloc_large_skb+0xbf/0xf0 [ 124.477218][ T8581] netlink_sendmsg+0x40c/0x6f0 [ 124.477250][ T8581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.477323][ T8581] ____sys_sendmsg+0x532/0x580 [ 124.477378][ T8581] ___sys_sendmsg+0x195/0x1e0 [ 124.477435][ T8581] __x64_sys_sendmsg+0xd4/0x160 [ 124.477460][ T8581] x64_sys_call+0x22ab/0x2550 [ 124.477486][ T8581] do_syscall_64+0x112/0x360 [ 124.477508][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.477608][ T8581] RIP: 0033:0x7f44c04de159 [ 124.477633][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.477653][ T8581] RSP: 002b:00007f44bef37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.477675][ T8581] RAX: ffffffffffffffda RBX: 00007f44c0765fa0 RCX: 00007f44c04de159 [ 124.477690][ T8581] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000003 [ 124.477756][ T8581] RBP: 00007f44bef37090 R08: 0000000000000000 R09: 0000000000000000 [ 124.477769][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.477783][ T8581] R13: 00007f44c0766038 R14: 00007f44c0765fa0 R15: 00007ffdda548518 [ 124.477844][ T8581] [ 124.949236][ T8597] loop5: detected capacity change from 0 to 128 [ 125.288710][ T8612] loop2: detected capacity change from 0 to 1024 [ 125.294621][ T8612] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 125.295145][ T8612] JBD2: no valid journal superblock found [ 125.295156][ T8612] EXT4-fs (loop2): Could not load journal inode [ 125.302035][ T8617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8617 comm=syz.0.1120 [ 125.540649][ T7623] usb 19-1: enqueue for inactive port 0 [ 125.540681][ T7623] usb 19-1: enqueue for inactive port 0 [ 125.555154][ T8637] netlink: 'syz.2.1126': attribute type 39 has an invalid length. [ 125.557914][ T8645] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.610722][ T7623] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 125.646079][ T8659] loop9: detected capacity change from 0 to 512 [ 125.648145][ T8659] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 125.669167][ T8659] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 125.669363][ T8659] EXT4-fs (loop9): Remounting filesystem read-only [ 125.669399][ T8659] EXT4-fs (loop9): 1 truncate cleaned up [ 125.669809][ T8659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.694999][ T8659] x_tables: duplicate underflow at hook 1 [ 125.728808][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.053829][ T8713] FAULT_INJECTION: forcing a failure. [ 126.053829][ T8713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.053862][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.2.1132 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.053912][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.053926][ T8713] Call Trace: [ 126.053934][ T8713] [ 126.053942][ T8713] __dump_stack+0x1d/0x30 [ 126.053971][ T8713] dump_stack_lvl+0x95/0xd0 [ 126.053997][ T8713] dump_stack+0x15/0x1b [ 126.054132][ T8713] should_fail_ex+0x262/0x280 [ 126.054161][ T8713] should_fail+0xb/0x20 [ 126.054186][ T8713] should_fail_usercopy+0x1a/0x20 [ 126.054275][ T8713] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 126.054305][ T8713] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 126.054338][ T8713] ? kmem_cache_free+0x106/0x3b0 [ 126.054454][ T8713] ? x86_task_fpu+0x36/0x60 [ 126.054478][ T8713] get_sigframe+0x34f/0x470 [ 126.054506][ T8713] ? _raw_spin_unlock_irq+0x9/0x30 [ 126.054607][ T8713] x64_setup_rt_frame+0xa7/0x4e0 [ 126.054649][ T8713] arch_do_signal_or_restart+0x27c/0x480 [ 126.054762][ T8713] irqentry_exit+0x14d/0x610 [ 126.054800][ T8713] asm_exc_page_fault+0x26/0x30 [ 126.054841][ T8713] RIP: 0033:0x7f3e146b72df [ 126.054860][ T8713] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 126.054882][ T8713] RSP: 002b:00007f3e13126bd8 EFLAGS: 00010283 [ 126.054901][ T8713] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 126.054917][ T8713] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f3e13126c00 [ 126.054932][ T8713] RBP: 00007f3e13126c00 R08: 0000000000000000 R09: 0000000000000000 [ 126.054954][ T8713] R10: 0000000000000000 R11: 000000000012bb41 R12: cccccccccccccccd [ 126.054999][ T8713] R13: 00007f3e14956038 R14: 00007f3e14955fa0 R15: 00007ffd1ca8b778 [ 126.055020][ T8713] [ 126.365507][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 126.510398][ T8752] loop5: detected capacity change from 0 to 512 [ 126.517050][ T8752] ext2: Unknown parameter 'smackfsfloor' [ 126.537736][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 126.537750][ T29] audit: type=1400 audit(1790500436.532:3795): avc: denied { append } for pid=8747 comm="syz.7.1138" name="uprobe_events" dev="tracefs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 126.569962][ T8761] loop5: detected capacity change from 0 to 512 [ 126.610872][ T29] audit: type=1400 audit(1790500436.612:3796): avc: denied { write } for pid=8737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.662246][ T29] audit: type=1400 audit(1790500436.662:3797): avc: denied { write } for pid=8774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.671113][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.677949][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.713645][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 126.717873][ T29] audit: type=1400 audit(1790500436.712:3798): avc: denied { read } for pid=8775 comm="syz.9.1141" lport=58906 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.832154][ T29] audit: type=1400 audit(1790500436.832:3799): avc: denied { write } for pid=8781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.957675][ T29] audit: type=1400 audit(1790500436.872:3800): avc: denied { write } for pid=8799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.958293][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 127.507903][ T8823] SELinux: invalid class [ 127.507919][ T8823] SELinux: failed to load policy [ 127.508360][ T29] audit: type=1400 audit(1790500437.502:3801): avc: denied { map } for pid=8822 comm="syz.0.1148" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.596039][ T8827] gretap0: left promiscuous mode [ 127.596412][ T8827] __nla_validate_parse: 5 callbacks suppressed [ 127.596426][ T8827] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1149'. [ 127.596443][ T8827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.656537][ T29] audit: type=1400 audit(1790500437.652:3802): avc: denied { write } for pid=8806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.712915][ T29] audit: type=1400 audit(1790500437.712:3803): avc: denied { write } for pid=8842 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.725213][ T8840] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1152'. [ 127.788096][ T8847] loop5: detected capacity change from 0 to 128 [ 127.793840][ T8847] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 127.805722][ T8847] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.805863][ T8847] ext2 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.828369][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 127.895376][ T29] audit: type=1400 audit(1790500437.892:3804): avc: denied { write } for pid=8844 comm="syz.5.1154" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.973356][ T8315] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.004498][ T8857] netlink: 'syz.9.1155': attribute type 83 has an invalid length. [ 128.097986][ T8846] loop7: detected capacity change from 0 to 512 [ 128.107239][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.107395][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.234970][ T8881] loop7: detected capacity change from 0 to 512 [ 128.760286][ T8939] loop9: detected capacity change from 0 to 128 [ 128.774608][ T8942] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.774702][ T8942] EXT4-fs (loop5): invalid inodes per group: 4072 [ 128.813884][ T8939] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.814055][ T8939] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.066410][ T8951] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 129.068275][ T8951] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1168: inode #15: comm syz.5.1168: iget: illegal inode # [ 129.068329][ T8951] loop5: lost filesystem error report for type 5 error -117 [ 129.068913][ T8951] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1168: couldn't read orphan inode 15 (err -117) [ 129.069141][ T8951] loop5: lost filesystem error report for type 5 error -117 [ 129.075855][ T8951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.166617][ T8982] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.1168: inode #15: comm syz.5.1168: iget: illegal inode # [ 129.171921][ T8982] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.1168: inode #15: comm syz.5.1168: iget: illegal inode # [ 129.175115][ T8982] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.1168: inode #15: comm syz.5.1168: iget: illegal inode # [ 129.175381][ T8982] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1168'. [ 129.255215][ T8987] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1175'. [ 129.266430][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.266503][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.393161][ T7296] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.416986][ T8315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.567623][ T9022] set_capacity_and_notify: 3 callbacks suppressed [ 129.568348][ T9022] loop9: detected capacity change from 0 to 1024 [ 129.573257][ T9022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.604112][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.826079][ T9065] loop5: detected capacity change from 0 to 512 [ 129.826527][ T9065] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.826635][ T9065] ext4: Unknown parameter 'obj_type' [ 129.869618][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1192'. [ 129.869649][ T9069] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1192'. [ 130.042492][ T9087] loop2: detected capacity change from 0 to 512 [ 130.042917][ T9087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.047546][ T9094] loop9: detected capacity change from 0 to 512 [ 130.051399][ T9087] EXT4-fs: Ignoring removed i_version option [ 130.079705][ T9094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.096782][ T9087] EXT4-fs (loop2): 1 orphan inode deleted [ 130.097194][ T9087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.123330][ T9094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.123508][ T9094] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.178273][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.285050][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.342003][ T9134] program syz.0.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.379538][ T9133] syz_tun: entered allmulticast mode [ 130.452691][ T9133] loop9: detected capacity change from 0 to 764 [ 130.466161][ T9133] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 130.716372][ T9147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.766426][ T9170] loop9: detected capacity change from 0 to 512 [ 130.768934][ T9156] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1210'. [ 130.795517][ T9170] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.795651][ T9170] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.884706][ T9185] loop5: detected capacity change from 0 to 512 [ 130.980927][ T9191] netlink: 'syz.5.1215': attribute type 10 has an invalid length. [ 130.980979][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1215'. [ 130.980999][ T9191] batadv0: entered promiscuous mode [ 130.981014][ T9191] batadv0: entered allmulticast mode [ 130.983184][ T9191] bridge0: port 3(batadv0) entered blocking state [ 130.983216][ T9191] bridge0: port 3(batadv0) entered disabled state [ 130.983975][ T9191] bridge0: port 3(batadv0) entered blocking state [ 130.984126][ T9191] bridge0: port 3(batadv0) entered forwarding state [ 131.135679][ T9204] netlink: 'syz.5.1219': attribute type 10 has an invalid length. [ 131.135714][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1219'. [ 131.202177][ T9209] FAULT_INJECTION: forcing a failure. [ 131.202177][ T9209] name failslab, interval 1, probability 0, space 0, times 0 [ 131.202196][ T9209] CPU: 1 UID: 0 PID: 9209 Comm: syz.2.1221 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.202210][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.202218][ T9209] Call Trace: [ 131.202222][ T9209] [ 131.202226][ T9209] __dump_stack+0x1d/0x30 [ 131.202309][ T9209] dump_stack_lvl+0x95/0xd0 [ 131.202321][ T9209] dump_stack+0x15/0x1b [ 131.202332][ T9209] should_fail_ex+0x262/0x280 [ 131.202379][ T9209] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 131.202392][ T9209] should_failslab+0x8c/0xb0 [ 131.202409][ T9209] __kmalloc_cache_noprof+0x7a/0x400 [ 131.202441][ T9209] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 131.202454][ T9209] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 131.202467][ T9209] bpf_prog_alloc_no_stats+0xc4/0x390 [ 131.202480][ T9209] bpf_prog_alloc+0x3c/0x150 [ 131.202493][ T9209] bpf_prog_load+0x54b/0x1060 [ 131.202545][ T9209] ? avc_has_perm_noaudit+0xac/0x160 [ 131.202563][ T9209] ? vfs_write+0x7b0/0x9a0 [ 131.202579][ T9209] __sys_bpf+0xbae/0xc30 [ 131.202593][ T9209] ? vfs_write+0x7b0/0x9a0 [ 131.202668][ T9209] ? vfs_write+0x7b0/0x9a0 [ 131.202686][ T9209] __x64_sys_bpf+0x69/0x80 [ 131.202698][ T9209] x64_sys_call+0xf26/0x2550 [ 131.202735][ T9209] do_syscall_64+0x112/0x360 [ 131.202747][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.202760][ T9209] RIP: 0033:0x7f3e146ce159 [ 131.202770][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.202781][ T9209] RSP: 002b:00007f3e13127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.202814][ T9209] RAX: ffffffffffffffda RBX: 00007f3e14955fa0 RCX: 00007f3e146ce159 [ 131.202822][ T9209] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 131.202829][ T9209] RBP: 00007f3e13127090 R08: 0000000000000000 R09: 0000000000000000 [ 131.202855][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.202863][ T9209] R13: 00007f3e14956038 R14: 00007f3e14955fa0 R15: 00007ffd1ca8b778 [ 131.202890][ T9209] [ 131.342339][ T228] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 131.342388][ T228] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 131.437722][ T9222] loop2: detected capacity change from 0 to 512 [ 131.463264][ T9222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.463585][ T9222] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.506588][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.507068][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.566368][ T9227] FAULT_INJECTION: forcing a failure. [ 131.566368][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.566396][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.2.1226 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.566422][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.566435][ T9227] Call Trace: [ 131.566442][ T9227] [ 131.566459][ T9227] __dump_stack+0x1d/0x30 [ 131.566485][ T9227] dump_stack_lvl+0x95/0xd0 [ 131.566572][ T9227] dump_stack+0x15/0x1b [ 131.566593][ T9227] should_fail_ex+0x262/0x280 [ 131.566628][ T9227] should_fail+0xb/0x20 [ 131.566651][ T9227] should_fail_usercopy+0x1a/0x20 [ 131.566732][ T9227] _copy_from_iter+0xcc/0xe70 [ 131.566821][ T9227] ? __alloc_skb+0x516/0x6f0 [ 131.566854][ T9227] ? __alloc_skb+0x209/0x6f0 [ 131.566886][ T9227] netlink_sendmsg+0x4a4/0x6f0 [ 131.566976][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.567010][ T9227] ____sys_sendmsg+0x532/0x580 [ 131.567113][ T9227] ___sys_sendmsg+0x195/0x1e0 [ 131.567163][ T9227] __x64_sys_sendmsg+0xd4/0x160 [ 131.567213][ T9227] x64_sys_call+0x22ab/0x2550 [ 131.567240][ T9227] do_syscall_64+0x112/0x360 [ 131.567263][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.567284][ T9227] RIP: 0033:0x7f3e146ce159 [ 131.567378][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.567398][ T9227] RSP: 002b:00007f3e13127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.567421][ T9227] RAX: ffffffffffffffda RBX: 00007f3e14955fa0 RCX: 00007f3e146ce159 [ 131.567434][ T9227] RDX: 0000000004000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 131.567470][ T9227] RBP: 00007f3e13127090 R08: 0000000000000000 R09: 0000000000000000 [ 131.567484][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.567498][ T9227] R13: 00007f3e14956038 R14: 00007f3e14955fa0 R15: 00007ffd1ca8b778 [ 131.567516][ T9227] [ 131.819041][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.938328][ T9241] ip6gre1: left promiscuous mode [ 131.938347][ T9241] ip6gre1: left allmulticast mode [ 131.999016][ T9238] loop2: detected capacity change from 0 to 1024 [ 132.008420][ T9238] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 132.008420][ T9238] [ 132.247334][ T9238] FAULT_INJECTION: forcing a failure. [ 132.247334][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 132.247364][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.2.1229 Not tainted syzkaller #0 PREEMPT(lazy) [ 132.247387][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.247398][ T9238] Call Trace: [ 132.247403][ T9238] [ 132.247411][ T9238] __dump_stack+0x1d/0x30 [ 132.247438][ T9238] dump_stack_lvl+0x95/0xd0 [ 132.247459][ T9238] dump_stack+0x15/0x1b [ 132.247483][ T9238] should_fail_ex+0x262/0x280 [ 132.247512][ T9238] ? anon_vma_clone+0xc2/0x450 [ 132.247546][ T9238] should_failslab+0x8c/0xb0 [ 132.247576][ T9238] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 132.247606][ T9238] ? anon_vma_clone+0xc2/0x450 [ 132.247643][ T9238] anon_vma_clone+0xc2/0x450 [ 132.247680][ T9238] __split_vma+0x319/0x720 [ 132.247713][ T9238] vms_gather_munmap_vmas+0x265/0x7f0 [ 132.247741][ T9238] mmap_region+0x802/0x21e0 [ 132.247770][ T9238] ? hrtimer_start_range_ns_common+0x4c5/0x7d0 [ 132.247798][ T9238] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 132.247822][ T9238] ? hrtimer_start_range_ns+0x108/0x120 [ 132.247873][ T9238] do_mmap+0xa20/0xc70 [ 132.247913][ T9238] vm_mmap_pgoff+0x183/0x2d0 [ 132.247946][ T9238] ksys_mmap_pgoff+0xc1/0x310 [ 132.247978][ T9238] ? __x64_sys_mmap+0x49/0x70 [ 132.248010][ T9238] x64_sys_call+0x23b3/0x2550 [ 132.248034][ T9238] do_syscall_64+0x112/0x360 [ 132.248054][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.248073][ T9238] RIP: 0033:0x7f3e146ce159 [ 132.248090][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.248110][ T9238] RSP: 002b:00007f3e13127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.248132][ T9238] RAX: ffffffffffffffda RBX: 00007f3e14955fa0 RCX: 00007f3e146ce159 [ 132.248147][ T9238] RDX: 000000000000000a RSI: 0000000000013000 RDI: 000020000066c000 [ 132.248159][ T9238] RBP: 00007f3e1476506b R08: ffffffffffffffff R09: 0000000000010000 [ 132.248171][ T9238] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 132.248191][ T9238] R13: 00007f3e14956038 R14: 00007f3e14955fa0 R15: 00007ffd1ca8b778 [ 132.248214][ T9238] [ 132.375529][ T9251] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1232'. [ 132.448800][ T9255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.580028][ T9274] loop9: detected capacity change from 0 to 1024 [ 132.627716][ T9276] EXT4-fs: Ignoring removed nobh option [ 132.627930][ T9276] EXT4-fs: Ignoring removed bh option [ 132.628020][ T9276] EXT4-fs: Ignoring removed nobh option [ 132.628334][ T9276] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 132.638590][ T9276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.137982][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 133.137998][ T29] audit: type=1326 audit(1790500956.132:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138088][ T29] audit: type=1326 audit(1790500956.132:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138332][ T29] audit: type=1326 audit(1790500956.132:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138356][ T29] audit: type=1326 audit(1790500956.132:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138379][ T29] audit: type=1326 audit(1790500956.132:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138459][ T29] audit: type=1326 audit(1790500956.132:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138487][ T29] audit: type=1326 audit(1790500956.132:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138611][ T29] audit: type=1326 audit(1790500956.132:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138799][ T29] audit: type=1326 audit(1790500956.132:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.138826][ T29] audit: type=1326 audit(1790500956.132:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.2.1240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 133.260043][ T6734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.679319][ T9306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.679520][ T9306] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.694474][ T9305] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1246'. [ 133.852049][ T6734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.967558][ T9319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.160922][ T9330] FAULT_INJECTION: forcing a failure. [ 134.160922][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 134.160952][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.5.1254 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.161031][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.161046][ T9330] Call Trace: [ 134.161052][ T9330] [ 134.161060][ T9330] __dump_stack+0x1d/0x30 [ 134.161088][ T9330] dump_stack_lvl+0x95/0xd0 [ 134.161153][ T9330] dump_stack+0x15/0x1b [ 134.161176][ T9330] should_fail_ex+0x262/0x280 [ 134.161203][ T9330] ? security_inode_alloc+0x37/0x100 [ 134.161230][ T9330] should_failslab+0x8c/0xb0 [ 134.161264][ T9330] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 134.161317][ T9330] ? security_inode_alloc+0x37/0x100 [ 134.161348][ T9330] security_inode_alloc+0x37/0x100 [ 134.161376][ T9330] inode_init_always_gfp+0x495/0x4e0 [ 134.161435][ T9330] ? __pfx_sock_alloc_inode+0x10/0x10 [ 134.161466][ T9330] alloc_inode+0x58/0x170 [ 134.161486][ T9330] __sock_create+0x121/0x580 [ 134.161551][ T9330] __sys_socketpair+0x175/0x430 [ 134.161584][ T9330] ? ksys_write+0x194/0x1a0 [ 134.161614][ T9330] __x64_sys_socketpair+0x52/0x60 [ 134.161658][ T9330] x64_sys_call+0x1bf7/0x2550 [ 134.161682][ T9330] do_syscall_64+0x112/0x360 [ 134.161702][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.161770][ T9330] RIP: 0033:0x7f0ccf96e159 [ 134.161788][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.161811][ T9330] RSP: 002b:00007f0cce3c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 134.161834][ T9330] RAX: ffffffffffffffda RBX: 00007f0ccfbf5fa0 RCX: 00007f0ccf96e159 [ 134.161892][ T9330] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 134.161960][ T9330] RBP: 00007f0cce3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.162014][ T9330] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 134.162030][ T9330] R13: 00007f0ccfbf6038 R14: 00007f0ccfbf5fa0 R15: 00007fffcf3ccd58 [ 134.162183][ T9330] [ 134.173593][ T9330] socket: no more sockets [ 134.240035][ T9317] EXT4-fs (loop7): invalid #clusters per group: 95 [ 134.534081][ T9354] netlink: 'syz.9.1260': attribute type 1 has an invalid length. [ 134.542601][ T9354] bond1: option mode: invalid value (7) [ 134.563791][ T9354] bond1 (unregistering): Released all slaves [ 134.638774][ T9366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.640418][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1261'. [ 134.640435][ T9363] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1261'. [ 134.641418][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1260'. [ 134.684321][ T9354] netlink: 'syz.9.1260': attribute type 10 has an invalid length. [ 134.684340][ T9354] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1260'. [ 134.684491][ T9354] dummy0: entered promiscuous mode [ 134.747553][ T9370] set_capacity_and_notify: 3 callbacks suppressed [ 134.747591][ T9370] loop2: detected capacity change from 0 to 512 [ 134.768341][ T9370] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.794732][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1263'. [ 134.806198][ T8028] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 134.866120][ T9379] loop7: detected capacity change from 0 to 256 [ 134.949376][ T9384] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1270'. [ 135.028936][ T9392] IPv6: Can't replace route, no match found [ 135.147439][ T9398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.356205][ T9407] vlan2: entered promiscuous mode [ 135.356225][ T9407] bridge0: entered promiscuous mode [ 135.675445][ T9419] loop2: detected capacity change from 0 to 1024 [ 135.681322][ T9419] EXT4-fs: Ignoring removed i_version option [ 135.683461][ T9419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.683539][ T9419] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 135.811788][ T9419] loop2: detected capacity change from 0 to 512 [ 135.860434][ T9419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.860835][ T9419] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.890191][ T9436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.908231][ T9438] netlink: 'syz.5.1288': attribute type 5 has an invalid length. [ 135.908246][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1288'. [ 135.948461][ T9443] FAULT_INJECTION: forcing a failure. [ 135.948461][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.948524][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.5.1290 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.948549][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.948647][ T9443] Call Trace: [ 135.948655][ T9443] [ 135.948663][ T9443] __dump_stack+0x1d/0x30 [ 135.948722][ T9443] dump_stack_lvl+0x95/0xd0 [ 135.948746][ T9443] dump_stack+0x15/0x1b [ 135.948767][ T9443] should_fail_ex+0x262/0x280 [ 135.948795][ T9443] should_fail+0xb/0x20 [ 135.948858][ T9443] should_fail_usercopy+0x1a/0x20 [ 135.948903][ T9443] strncpy_from_user+0x27/0x250 [ 135.948993][ T9443] do_getname+0x59/0x1c0 [ 135.949014][ T9443] getname_flags+0x1d/0x30 [ 135.949035][ T9443] __se_sys_chroot+0x3d/0x270 [ 135.949057][ T9443] __x64_sys_chroot+0x1f/0x30 [ 135.949166][ T9443] x64_sys_call+0x2437/0x2550 [ 135.949190][ T9443] do_syscall_64+0x112/0x360 [ 135.949245][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.949264][ T9443] RIP: 0033:0x7f0ccf96e159 [ 135.949337][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.949354][ T9443] RSP: 002b:00007f0cce3c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 135.949453][ T9443] RAX: ffffffffffffffda RBX: 00007f0ccfbf5fa0 RCX: 00007f0ccf96e159 [ 135.949472][ T9443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 135.949511][ T9443] RBP: 00007f0cce3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.949523][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.949535][ T9443] R13: 00007f0ccfbf6038 R14: 00007f0ccfbf5fa0 R15: 00007fffcf3ccd58 [ 135.949554][ T9443] [ 135.990655][ T9445] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1291'. [ 136.402429][ T9469] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1299'. [ 136.475244][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.804608][ T9479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.941390][ T9485] netlink: 'syz.0.1305': attribute type 10 has an invalid length. [ 136.976341][ T9487] loop2: detected capacity change from 0 to 1024 [ 137.000194][ T9487] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1306: Failed to acquire dquot type 0 [ 137.000223][ T9487] loop2: lost filesystem error report for type 5 error -117 [ 137.000566][ T9487] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 137.000953][ T9487] EXT4-fs (loop2): 1 truncate cleaned up [ 137.001430][ T9487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.385239][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.655463][ T9526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.773998][ T9530] team0: Device wg0 is of different type [ 137.787744][ T9530] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 137.821381][ T9532] bridge0: port 3(syz_tun) entered blocking state [ 137.821415][ T9532] bridge0: port 3(syz_tun) entered disabled state [ 137.821580][ T9532] syz_tun: entered allmulticast mode [ 137.839214][ T9532] --map-set only usable from mangle table [ 139.014274][ T9579] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.129225][ T9577] loop9: detected capacity change from 0 to 512 [ 139.145462][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 139.145520][ T29] audit: type=1400 audit(1790500962.139:4350): avc: denied { write } for pid=9580 comm="syz.5.1328" name="functions" dev="configfs" ino=16426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.147904][ T29] audit: type=1400 audit(1790500962.139:4351): avc: denied { write } for pid=9580 comm="syz.5.1328" name="c.1" dev="configfs" ino=16432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.147932][ T29] audit: type=1400 audit(1790500962.139:4352): avc: denied { write } for pid=9580 comm="syz.5.1328" name="c.1" dev="configfs" ino=16432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.150009][ T29] audit: type=1400 audit(1790500962.139:4353): avc: denied { read } for pid=9580 comm="syz.5.1328" name="id" dev="configfs" ino=24143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 139.265234][ T9577] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 139.345715][ T29] audit: type=1400 audit(1790500962.329:4354): avc: denied { write } for pid=9582 comm="syz.2.1329" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.546112][ T9607] FAULT_INJECTION: forcing a failure. [ 139.546112][ T9607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.546140][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.5.1334 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.546220][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.546234][ T9607] Call Trace: [ 139.546260][ T9607] [ 139.546267][ T9607] __dump_stack+0x1d/0x30 [ 139.546289][ T9607] dump_stack_lvl+0x95/0xd0 [ 139.546309][ T9607] dump_stack+0x15/0x1b [ 139.546364][ T9607] should_fail_ex+0x262/0x280 [ 139.546391][ T9607] should_fail+0xb/0x20 [ 139.546413][ T9607] should_fail_usercopy+0x1a/0x20 [ 139.546441][ T9607] _copy_from_user+0x1c/0xb0 [ 139.546514][ T9607] __copy_msghdr+0x242/0x300 [ 139.546537][ T9607] ___sys_sendmsg+0x10c/0x1e0 [ 139.546566][ T9607] __x64_sys_sendmsg+0xd4/0x160 [ 139.546735][ T9607] x64_sys_call+0x22ab/0x2550 [ 139.546758][ T9607] do_syscall_64+0x112/0x360 [ 139.546779][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.546871][ T9607] RIP: 0033:0x7f0ccf96e159 [ 139.546886][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.546943][ T9607] RSP: 002b:00007f0cce3c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.546962][ T9607] RAX: ffffffffffffffda RBX: 00007f0ccfbf5fa0 RCX: 00007f0ccf96e159 [ 139.546975][ T9607] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 139.546987][ T9607] RBP: 00007f0cce3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.547001][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.547015][ T9607] R13: 00007f0ccfbf6038 R14: 00007f0ccfbf5fa0 R15: 00007fffcf3ccd58 [ 139.547035][ T9607] [ 139.547118][ T29] audit: type=1400 audit(1790500962.539:4355): avc: denied { setopt } for pid=9606 comm="syz.5.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 139.574776][ T29] audit: type=1326 audit(1790500962.569:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 139.575206][ T29] audit: type=1326 audit(1790500962.569:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 139.575233][ T29] audit: type=1326 audit(1790500962.569:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 139.578705][ T29] audit: type=1326 audit(1790500962.569:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9604 comm="syz.2.1333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 139.601270][ T9609] loop9: detected capacity change from 0 to 2048 [ 139.648599][ T9609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 139.806742][ T9605] loop2: detected capacity change from 0 to 128 [ 139.891609][ T9611] __nla_validate_parse: 3 callbacks suppressed [ 139.891695][ T9611] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1336'. [ 139.901116][ T9605] msdos: Unknown parameter 'dot' [ 140.067219][ T9624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.093279][ T9621] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1338'. [ 140.335423][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 140.489197][ T9644] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1346'. [ 140.494587][ T9644] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1346'. [ 140.532747][ T9643] loop2: detected capacity change from 0 to 512 [ 140.533290][ T9643] EXT4-fs: Ignoring removed nobh option [ 140.558012][ T9643] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 140.558176][ T9643] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.1347: inode has both inline data and extents flags [ 140.558205][ T9643] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.558395][ T9643] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1347: couldn't read orphan inode 13 (err -117) [ 140.558425][ T9643] loop2: lost filesystem error report for type 5 error -117 [ 140.559065][ T9643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.630298][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.733052][ T9652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.821665][ T9654] loop5: detected capacity change from 0 to 128 [ 140.859791][ T9654] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 140.888474][ T9654] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.892519][ T9654] ext2 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.123752][ T9669] loop7: detected capacity change from 0 to 512 [ 141.133242][ T9669] EXT4-fs: Ignoring removed nobh option [ 141.206988][ T9669] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 141.207127][ T9669] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.1355: inode has both inline data and extents flags [ 141.207155][ T9669] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 141.207323][ T9669] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1355: couldn't read orphan inode 13 (err -117) [ 141.207351][ T9669] loop7: lost filesystem error report for type 5 error -117 [ 141.207909][ T9669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.209530][ T9669] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 141.212143][ T9673] loop2: detected capacity change from 0 to 2048 [ 141.318807][ T9673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.397109][ T6734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.398336][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.652268][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1360'. [ 141.678505][ T9654] tipc: Started in network mode [ 141.678715][ T9654] tipc: Node identity 4, cluster identity 4711 [ 141.678814][ T9654] tipc: Node number set to 4 [ 141.681552][ T9654] FAULT_INJECTION: forcing a failure. [ 141.681552][ T9654] name failslab, interval 1, probability 0, space 0, times 0 [ 141.681609][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.5.1351 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.681636][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.681649][ T9654] Call Trace: [ 141.681656][ T9654] [ 141.681664][ T9654] __dump_stack+0x1d/0x30 [ 141.681767][ T9654] dump_stack_lvl+0x95/0xd0 [ 141.681792][ T9654] dump_stack+0x15/0x1b [ 141.681815][ T9654] should_fail_ex+0x262/0x280 [ 141.681842][ T9654] ? __alloc_skb+0x2e0/0x6f0 [ 141.681933][ T9654] should_failslab+0x8c/0xb0 [ 141.681968][ T9654] kmem_cache_alloc_node_noprof+0x82/0x400 [ 141.682079][ T9654] ? __alloc_skb+0x2e0/0x6f0 [ 141.682112][ T9654] __alloc_skb+0x2e0/0x6f0 [ 141.682149][ T9654] tipc_msg_build+0xc1/0x950 [ 141.682182][ T9654] tipc_send_group_bcast+0x5e0/0x6f0 [ 141.682207][ T9654] ? __pfx_woken_wake_function+0x10/0x10 [ 141.682247][ T9654] __tipc_sendmsg+0x17b/0x1c00 [ 141.682305][ T9654] ? irqentry_exit+0x58f/0x610 [ 141.682345][ T9654] ? lock_sock_nested+0x84/0x110 [ 141.682377][ T9654] tipc_sendmsg+0x3e/0x60 [ 141.682478][ T9654] ? __pfx_tipc_sendmsg+0x10/0x10 [ 141.682502][ T9654] ____sys_sendmsg+0x532/0x580 [ 141.682542][ T9654] ___sys_sendmsg+0x195/0x1e0 [ 141.682587][ T9654] __sys_sendmmsg+0x185/0x320 [ 141.682621][ T9654] __x64_sys_sendmmsg+0x57/0x70 [ 141.682717][ T9654] x64_sys_call+0x1fb4/0x2550 [ 141.682745][ T9654] do_syscall_64+0x112/0x360 [ 141.682768][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.682792][ T9654] RIP: 0033:0x7f0ccf96e159 [ 141.682809][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.682900][ T9654] RSP: 002b:00007f0cce3c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.682975][ T9654] RAX: ffffffffffffffda RBX: 00007f0ccfbf5fa0 RCX: 00007f0ccf96e159 [ 141.682991][ T9654] RDX: 04000000000000e4 RSI: 0000200000003240 RDI: 0000000000000006 [ 141.683007][ T9654] RBP: 00007f0cce3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.683022][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.683035][ T9654] R13: 00007f0ccfbf6038 R14: 00007f0ccfbf5fa0 R15: 00007fffcf3ccd58 [ 141.683106][ T9654] [ 141.755405][ T8315] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.790957][ T9697] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1362'. [ 141.839513][ T9704] loop2: detected capacity change from 0 to 512 [ 141.861039][ T9704] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1359: iget: bad i_size value: 38620345925642 [ 141.861088][ T9704] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.861302][ T9704] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1359: couldn't read orphan inode 15 (err -117) [ 141.861398][ T9704] loop2: lost filesystem error report for type 5 error -117 [ 141.866103][ T9704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.892830][ T9703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.968997][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.527032][ T9715] loop7: detected capacity change from 0 to 128 [ 142.530619][ T9715] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 142.562863][ T9715] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.563881][ T9715] ext2 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.930987][ T9713] loop9: detected capacity change from 0 to 736 [ 143.109094][ T9663] tipc: Started in network mode [ 143.109287][ T9663] tipc: Node identity 4, cluster identity 4711 [ 143.109318][ T9663] tipc: Node number set to 4 [ 143.650500][ T9767] loop9: detected capacity change from 0 to 512 [ 143.697952][ T9767] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.1371: iget: bad i_size value: 38620345925642 [ 143.697990][ T9767] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.698472][ T9767] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1371: couldn't read orphan inode 15 (err -117) [ 143.698650][ T9767] loop9: lost filesystem error report for type 5 error -117 [ 143.703928][ T9767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.841208][ T7296] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.074548][ T9804] loop9: detected capacity change from 0 to 512 [ 144.146568][ T9814] --map-set only usable from mangle table [ 144.150891][ T9804] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 144.249872][ T9825] bpf: Bad value for 'mode' [ 144.285955][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1377'. [ 144.363095][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 144.363173][ T29] audit: type=1400 audit(1790500967.357:4523): avc: denied { read } for pid=9828 comm="syz.5.1377" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.363197][ T29] audit: type=1400 audit(1790500967.357:4524): avc: denied { open } for pid=9828 comm="syz.5.1377" path="/56/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.427080][ T9829] netlink: 'syz.9.1376': attribute type 21 has an invalid length. [ 144.427154][ T9829] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1376'. [ 144.427204][ T9829] netlink: 'syz.9.1376': attribute type 5 has an invalid length. [ 144.562907][ T9715] netlink: 'syz.7.1367': attribute type 11 has an invalid length. [ 144.655834][ T9720] netlink: 149 bytes leftover after parsing attributes in process `syz.2.1366'. [ 144.657144][ T6734] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.761536][ T9843] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.761657][ T9843] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.824454][ T9847] set_capacity_and_notify: 1 callbacks suppressed [ 144.824482][ T9847] loop5: detected capacity change from 0 to 512 [ 144.844663][ T9852] cgroup: fork rejected by pids controller in /syz2 [ 144.868110][ T9876] loop2: detected capacity change from 0 to 512 [ 144.877867][ T9847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.881219][ T9847] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.897913][ T6734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.946599][ T9849] loop9: detected capacity change from 0 to 2048 [ 144.974168][ T9888] ip_tables: iptables: counters copy to user failed while replacing table [ 145.017535][ T72] IPVS: starting estimator thread 0... [ 145.098043][ T8315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.098240][ T9893] IPVS: using max 2064 ests per chain, 103200 per kthread [ 145.168466][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 145.175435][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 145.177227][ T9898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1385'. [ 145.177243][ T9898] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1385'. [ 145.248645][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 145.424962][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1393'. [ 145.542163][ T9921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.542290][ T9921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.544346][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1394'. [ 145.824163][ T9933] loop7: detected capacity change from 0 to 164 [ 145.836472][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1397'. [ 146.006498][ T9940] veth0_to_bond: entered promiscuous mode [ 146.006693][ T9940] macsec1: entered promiscuous mode [ 146.006792][ T9940] macsec1: entered allmulticast mode [ 146.006805][ T9940] veth0_to_bond: entered allmulticast mode [ 146.010157][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 146.061130][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 146.098428][ T9943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9943 comm=syz.0.1400 [ 146.126481][ T29] audit: type=1326 audit(1790500969.118:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.126675][ T29] audit: type=1326 audit(1790500969.118:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.126762][ T29] audit: type=1326 audit(1790500969.118:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.127441][ T29] audit: type=1326 audit(1790500969.118:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.127552][ T29] audit: type=1326 audit(1790500969.118:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.127885][ T29] audit: type=1326 audit(1790500969.128:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.127958][ T29] audit: type=1326 audit(1790500969.128:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.0.1401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12d71e159 code=0x7ffc0000 [ 146.178254][ T29] audit: type=1400 audit(1790500969.168:4532): avc: denied { setopt } for pid=9949 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 146.414232][ T9958] loop2: detected capacity change from 0 to 2048 [ 146.593925][ T9959] loop9: detected capacity change from 0 to 512 [ 146.608220][ T9959] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.1406: iget: bad i_size value: 38620345925642 [ 146.608319][ T9959] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.611049][ T9959] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1406: couldn't read orphan inode 15 (err -117) [ 146.611087][ T9959] loop9: lost filesystem error report for type 5 error -117 [ 146.620366][ T9959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.651073][ T9959] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.612003][ T9999] loop2: detected capacity change from 0 to 1024 [ 147.623853][T10001] loop9: detected capacity change from 0 to 164 [ 147.624226][T10001] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 147.667306][ T9999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.689504][ T9999] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 147.689649][ T9999] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 147.689703][ T9999] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.689703][ T9999] [ 147.689715][ T9999] EXT4-fs (loop2): Total free blocks count 0 [ 147.689729][ T9999] EXT4-fs (loop2): Free/Dirty block details [ 147.689741][ T9999] EXT4-fs (loop2): free_blocks=20480 [ 147.689753][ T9999] EXT4-fs (loop2): dirty_blocks=80 [ 147.689764][ T9999] EXT4-fs (loop2): Block reservation details [ 147.689775][ T9999] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 147.716395][ T9999] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 147.913706][T10028] netlink: 'syz.0.1426': attribute type 29 has an invalid length. [ 147.948125][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.952026][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.955012][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.957134][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.959136][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.961337][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.964581][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.965458][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.966558][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.969348][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.972456][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.973376][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.975710][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.980001][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.981026][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.984449][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.989800][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.990734][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 147.996546][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.005109][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.012868][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.013788][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.026983][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.034094][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.051518][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.055529][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.066285][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.071249][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.085189][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.092744][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.093793][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.098684][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.103142][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.111975][T10037] FAULT_INJECTION: forcing a failure. [ 148.111975][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.112004][T10037] CPU: 1 UID: 0 PID: 10037 Comm: syz.7.1431 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.112031][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.112046][T10037] Call Trace: [ 148.112053][T10037] [ 148.112060][T10037] __dump_stack+0x1d/0x30 [ 148.112086][T10037] dump_stack_lvl+0x95/0xd0 [ 148.112109][T10037] dump_stack+0x15/0x1b [ 148.112132][T10037] should_fail_ex+0x262/0x280 [ 148.112182][T10037] should_fail+0xb/0x20 [ 148.112208][T10037] should_fail_usercopy+0x1a/0x20 [ 148.112243][T10037] _copy_from_user+0x1c/0xb0 [ 148.112272][T10037] load_msg+0x1e1/0x2f0 [ 148.112321][T10037] do_msgsnd+0xe4/0xb50 [ 148.112342][T10037] ? __se_sys_futex+0x2f6/0x370 [ 148.112372][T10037] ? xfd_validate_state+0x45/0xf0 [ 148.112415][T10037] __x64_sys_msgsnd+0xa8/0xc0 [ 148.112437][T10037] x64_sys_call+0x227f/0x2550 [ 148.112464][T10037] do_syscall_64+0x112/0x360 [ 148.112488][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.112543][T10037] RIP: 0033:0x7f3178e5e159 [ 148.112559][T10037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.112612][T10037] RSP: 002b:00007f31778b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 148.112635][T10037] RAX: ffffffffffffffda RBX: 00007f31790e5fa0 RCX: 00007f3178e5e159 [ 148.112650][T10037] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 0000000000000000 [ 148.112666][T10037] RBP: 00007f3178ef506b R08: 0000000000000000 R09: 0000000000000000 [ 148.112680][T10037] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 148.112695][T10037] R13: 00007f31790e6038 R14: 00007f31790e5fa0 R15: 00007fffe8631068 [ 148.112765][T10037] [ 148.117379][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.126403][T10037] loop7: detected capacity change from 0 to 128 [ 148.127005][T10037] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.128876][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.129871][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.143454][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.159520][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.177180][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.181474][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.184606][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.192877][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.197187][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.206182][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.207160][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.219913][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.222018][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.226227][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.241202][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.243359][ T31] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.257368][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.272620][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.285678][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.300591][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.301657][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.306225][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.312930][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.323651][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.324549][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.325712][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.326626][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.336311][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.339091][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.344783][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.349614][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.350524][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.388410][T10043] loop2: detected capacity change from 0 to 164 [ 148.402301][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.404635][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.410004][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.425962][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.438889][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.439960][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.460412][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.461420][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.466905][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.481411][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.490128][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.491431][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.517573][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.520401][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.521412][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.527420][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.535064][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.536903][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.559042][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.560142][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.565859][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.575513][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.576607][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.577638][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.597494][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.598643][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.607426][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.610591][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.617487][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.620649][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.621775][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.624454][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.626743][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.635341][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.657471][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.663142][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.664311][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.673541][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.678384][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.681514][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.685406][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.691070][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.692033][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.752991][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.761413][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.761738][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.762025][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.762321][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.769742][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.770095][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.770559][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.770978][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.772855][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.773194][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.773600][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.773910][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.776243][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.776725][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.777104][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.780777][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.781173][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.781564][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.784888][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.785320][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.785703][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.786079][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.794909][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.795294][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.795708][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.796095][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.797054][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.797385][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.797792][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.799742][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.800091][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.800422][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.800767][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.803052][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.803430][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.803811][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.804236][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.807796][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.808320][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.808729][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.812217][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.812578][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.812980][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 148.816638][T10027] 9pnet_fd: p9_fd_create_tcp (10027): problem connecting socket to 127.0.0.1 [ 149.027136][T10041] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.056194][T10041] EXT4-fs (loop7): 1 truncate cleaned up [ 149.065062][T10041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.330896][T10060] FAULT_INJECTION: forcing a failure. [ 149.330896][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 149.330958][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.9.1438 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.330986][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.330998][T10060] Call Trace: [ 149.331006][T10060] [ 149.331014][T10060] __dump_stack+0x1d/0x30 [ 149.331055][T10060] dump_stack_lvl+0x95/0xd0 [ 149.331079][T10060] dump_stack+0x15/0x1b [ 149.331101][T10060] should_fail_ex+0x262/0x280 [ 149.331171][T10060] ? do_getname+0x2e/0x1c0 [ 149.331195][T10060] should_failslab+0x8c/0xb0 [ 149.331300][T10060] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 149.331388][T10060] ? do_getname+0x2e/0x1c0 [ 149.331411][T10060] do_getname+0x2e/0x1c0 [ 149.331487][T10060] __se_sys_mkdir+0x1e/0xf0 [ 149.331519][T10060] __x64_sys_mkdir+0x31/0x40 [ 149.331551][T10060] x64_sys_call+0x18da/0x2550 [ 149.331576][T10060] do_syscall_64+0x112/0x360 [ 149.331607][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.331631][T10060] RIP: 0033:0x7f44c04de159 [ 149.331648][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.331677][T10060] RSP: 002b:00007f44bef37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 149.331732][T10060] RAX: ffffffffffffffda RBX: 00007f44c0765fa0 RCX: 00007f44c04de159 [ 149.331748][T10060] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000200000000000 [ 149.331761][T10060] RBP: 00007f44bef37090 R08: 0000000000000000 R09: 0000000000000000 [ 149.331775][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.331788][T10060] R13: 00007f44c0766038 R14: 00007f44c0765fa0 R15: 00007ffdda548518 [ 149.331857][T10060] [ 149.348397][ T6734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.896630][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 149.896645][ T29] audit: type=1326 audit(1790500972.888:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.896669][ T29] audit: type=1326 audit(1790500972.888:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.900366][ T29] audit: type=1326 audit(1790500972.898:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.900700][ T29] audit: type=1326 audit(1790500972.898:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.900798][ T29] audit: type=1326 audit(1790500972.898:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.900824][ T29] audit: type=1326 audit(1790500972.898:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.901656][ T29] audit: type=1326 audit(1790500972.898:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.902145][ T29] audit: type=1326 audit(1790500972.898:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.902623][ T29] audit: type=1326 audit(1790500972.898:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.902675][ T29] audit: type=1326 audit(1790500972.898:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1442" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e146ce159 code=0x7ffc0000 [ 149.989974][T10082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.603080][T10091] set_capacity_and_notify: 3 callbacks suppressed [ 150.603121][T10091] loop5: detected capacity change from 0 to 512 [ 150.613734][T10091] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1449: iget: bad i_size value: 38620345925642 [ 150.613813][T10091] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.614470][T10091] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1449: couldn't read orphan inode 15 (err -117) [ 150.614515][T10091] loop5: lost filesystem error report for type 5 error -117 [ 150.616177][T10091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.830410][ T8315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.889990][T10100] __nla_validate_parse: 8 callbacks suppressed [ 150.890004][T10100] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1452'. [ 150.984178][T10098] xt_hashlimit: size too large, truncated to 1048576 [ 151.021743][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 151.057526][T10103] loop9: detected capacity change from 0 to 512 [ 151.084622][T10103] EXT4-fs (loop9): invalid inodes per group: 0 [ 151.146994][T10112] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 151.226721][T10119] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1460'. [ 151.344189][T10134] loop2: detected capacity change from 0 to 1024 [ 151.344603][T10134] EXT4-fs: Ignoring removed bh option [ 151.368426][T10134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.384693][T10131] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1465'. [ 151.461265][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1467'. [ 151.531377][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1468'. [ 151.676708][T10158] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20004 [ 152.112718][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1471'. [ 152.112738][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1471'. [ 152.160488][T10177] veth3: entered allmulticast mode [ 152.163286][T10180] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1471'. [ 152.204521][ T8028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.204603][T10179] loop7: detected capacity change from 0 to 128 [ 152.223682][ T3290] udevd[3290]: incorrect ext4 checksum on /dev/loop7 [ 152.236470][T10179] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 152.296190][T10188] ip_tables: iptables: counters copy to user failed while replacing table [ 152.342713][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1475'. [ 152.678836][ T7628] ================================================================== [ 152.678868][ T7628] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 152.678909][ T7628] [ 152.678915][ T7628] write to 0xffff88811a4d9750 of 8 bytes by task 8470 on cpu 1: [ 152.678930][ T7628] __mod_timer+0x671/0x990 [ 152.678956][ T7628] mod_timer+0x1f/0x30 [ 152.678982][ T7628] wg_timers_any_authenticated_packet_traversal+0xd1/0x100 [ 152.679019][ T7628] wg_packet_rx_poll+0x7b2/0x1090 [ 152.679035][ T7628] __napi_poll+0x61/0x300 [ 152.679058][ T7628] napi_threaded_poll_loop+0x1e9/0x6c0 [ 152.679085][ T7628] napi_threaded_poll+0x193/0x240 [ 152.679110][ T7628] kthread+0x223/0x270 [ 152.679131][ T7628] ret_from_fork+0x146/0x330 [ 152.679156][ T7628] ret_from_fork_asm+0x1a/0x30 [ 152.679181][ T7628] [ 152.679187][ T7628] read to 0xffff88811a4d9750 of 8 bytes by task 7628 on cpu 0: [ 152.679202][ T7628] __mod_timer+0x69/0x990 [ 152.679226][ T7628] mod_timer+0x1f/0x30 [ 152.679253][ T7628] wg_timers_any_authenticated_packet_traversal+0xd1/0x100 [ 152.679291][ T7628] wg_packet_tx_worker+0xeb/0x340 [ 152.679319][ T7628] process_scheduled_works+0x56a/0xa50 [ 152.679352][ T7628] worker_thread+0x569/0x750 [ 152.679382][ T7628] kthread+0x223/0x270 [ 152.679399][ T7628] ret_from_fork+0x146/0x330 [ 152.679423][ T7628] ret_from_fork_asm+0x1a/0x30 [ 152.679447][ T7628] [ 152.679451][ T7628] value changed: 0x00000000ffffc986 -> 0x00000000ffffc9c5 [ 152.679464][ T7628] [ 152.679469][ T7628] Reported by Kernel Concurrency Sanitizer on: [ 152.679480][ T7628] CPU: 0 UID: 0 PID: 7628 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.679504][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.679516][ T7628] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 152.679537][ T7628] ==================================================================