last executing test programs: 10m40.436476827s ago: executing program 32 (id=770): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000090008000200e00000020c0002800500010000000000080007400000000014000f80080001400000000008000240"], 0x78}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f00000003c0)='\x00', 0x400, &(0x7f0000000400)={@_ha_fsid={[0xffffffff, 0xc]}, {0x3ff, 0x4, 0x8, 0x5}}, 0x1a1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000500)=0x1c32}, {[0xeb0, 0xc, 0x80000000]}, 0x450e, 0x9d, &(0x7f0000000540)=""/157}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x50, r6, 0xd0d, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000fbdbdf250100000005000400010000009b6136c39148489414e7941c0900030073797a30000000000900030073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0x8044}, 0x50091) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4000002) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) r9 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_getsetattr(r9, &(0x7f0000001080)={0x0, 0x2, 0x8001, 0x55e}, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10m27.788970805s ago: executing program 33 (id=991): r0 = socket(0x1f, 0x3, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000002c0)=""/225, &(0x7f00000003c0)=0xe1) sendmmsg$inet(r0, &(0x7f00000008c0), 0x0, 0x4800) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "f311c1208a1cd6aa", "76b6742e44401bfb2fff8c8774ea1267", "1077047e", "f2746f50f8e9f74f"}, 0x28) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r3 = io_uring_setup(0x24e7, &(0x7f0000000080)={0x0, 0xa980, 0x40, 0x2, 0x17e}) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000001c0), 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/168, 0xa8) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) r4 = epoll_create(0x1e) epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x10005, 0x7, 0xd, 0x40042, r1, 0x8, '\x00', r5, r6, 0x1, 0x4, 0x3}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xfffffffffffeffff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c041}, 0x2400c080) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 7m45.355189772s ago: executing program 34 (id=2569): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4890) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x2404c440) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)={[{@noinit_itable}, {@discard}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nolazytime}, {@nobarrier}]}, 0x6, 0x62e, &(0x7f0000001140)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x48) r5 = msgget$private(0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) msgrcv(r5, &(0x7f00000003c0)={0x0, ""/214}, 0xde, 0x0, 0x2000) msgsnd(r5, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200ff0000000000"], 0x8, 0x800) r6 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f00000000c0)=0x4, 0x4) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0xfe33) close(r0) setfsuid(0xee00) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000ebd68b0c"], 0x50) r7 = syz_io_uring_setup(0x4171, &(0x7f0000000280)={0x0, 0x1bf5c, 0x10000, 0xfffffffb, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) syz_clone3(0x0, 0x0) 7m11.625437711s ago: executing program 7 (id=3148): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b6, 0x13500}, &(0x7f0000000280), &(0x7f0000001880), &(0x7f0000000000)) poll(&(0x7f0000000a80)=[{r0, 0x1000}], 0x1, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'veth0_vlan\x00', 0x4}, 0x18) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x10402, 0x3, 0x7f, 0x9, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xb0d8}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) setresuid(0x0, 0xee01, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getpid() fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) 7m11.579229502s ago: executing program 7 (id=3150): close(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a0001002bbd700000010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b00000000000008000000000800001c250800000000000500000000000000fcffffffffffffff040000000000000025ad00000000000000000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00090005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x8024}, 0x844) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) mkdirat(r2, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0)) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 7m11.512227664s ago: executing program 7 (id=3151): bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @loopback={0xfbffff7f00000000}, 0x805}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000050000008402020100edff00ff02000000000000000000000000310118"], 0x40}, 0x2404c850) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x55459d45c9412840, {0x42, 0x1, 0x1}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xe, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010328bd7000fcdbdf252100"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004814) 7m11.511788655s ago: executing program 7 (id=3152): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7a", 0xba, 0xffffffffffffffff) 7m11.488250995s ago: executing program 7 (id=3153): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 7m11.391704278s ago: executing program 7 (id=3154): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) (async) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r2, &(0x7f0000000000)={0x2, 0x24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000340791b9227926ee86a969a41f1aa78eaf92cbc0dbf9bd5bc8b0e201c1d650c80b1bed718dcaada5538ed14f2cb401e39ce56eb628bbffa146e931fcb9303502cfa16b17c6275ebe97013d676ba190d27fc9a98560925bfaa57dc70a8d19fc70a8f6042a6062b1d85f42a664", @ANYRES32=0x0, @ANYBLOB="84d001000000010008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000340791b9227926ee86a969a41f1aa78eaf92cbc0dbf9bd5bc8b0e201c1d650c80b1bed718dcaada5538ed14f2cb401e39ce56eb628bbffa146e931fcb9303502cfa16b17c6275ebe97013d676ba190d27fc9a98560925bfaa57dc70a8d19fc70a8f6042a6062b1d85f42a664", @ANYRES32=0x0, @ANYBLOB="84d001000000010008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8970, &(0x7f00000038c0)={'veth1_to_bond\x00', @ifru_mtu=0xfffffff8}) (async) ioctl$sock_ifreq(r6, 0x8970, &(0x7f00000038c0)={'veth1_to_bond\x00', @ifru_mtu=0xfffffff8}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f00000041c0)={0x4004080, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m56.97812307s ago: executing program 5 (id=3269): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b6, 0x13500}, &(0x7f0000000280), &(0x7f0000001880), &(0x7f0000000000)) poll(&(0x7f0000000a80)=[{r0, 0x1000}], 0x1, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'veth0_vlan\x00', 0x4}, 0x18) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x10402, 0x3, 0x7f, 0x9, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xb0d8}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) setresuid(0x0, 0xee01, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getpid() fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) 6m56.873507203s ago: executing program 5 (id=3271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x2) setns(0xc9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, 0x0, 0xc8) ioctl(0xffffffffffffffff, 0xc138fd02, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 6m56.823075244s ago: executing program 5 (id=3273): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x200000000002, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f00000003c0)="7e1764e706fe659cb7149a3cd34f7a65de722bdd3ff692f6d363455c5c62cd40cff4fc362672cb3aa63521d0d1e1a29b0e841dd44a0ff398f12bc0e5ebfc03d3165a97735eb6ae16ce793245ecf46c4c168f924fa6156b25c3e9e1b34c2c08cea52bfe9f7d29ea5009e21614e90aa1af43691bdeb1216f394e2f65f8ad5b13eee75db45826aeb3ef481663b8195a204504b4d441bb78d1a423b1a8c2377462c1c1c161c058822a35175b76ea3e04ec361bbbefabb5f9cc9912bd2b891e455c740aba0ab2223170251e0008878190da997a89a940575c2c240ca1b1042fc977d149c2413bb57e1391a564a93fcabaa486bb7a689f4d", 0xf5, r2}, 0x68) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x5, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c82}, 0x94) statfs(&(0x7f0000000000)='./mnt\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x66}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000240), 0x10012, 0x0) 6m56.644771989s ago: executing program 5 (id=3280): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='fG'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02020002100000000000000000"], 0x80}, 0x1, 0x7}, 0x0) 6m56.21265196s ago: executing program 35 (id=3154): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) (async) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r2, &(0x7f0000000000)={0x2, 0x24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000340791b9227926ee86a969a41f1aa78eaf92cbc0dbf9bd5bc8b0e201c1d650c80b1bed718dcaada5538ed14f2cb401e39ce56eb628bbffa146e931fcb9303502cfa16b17c6275ebe97013d676ba190d27fc9a98560925bfaa57dc70a8d19fc70a8f6042a6062b1d85f42a664", @ANYRES32=0x0, @ANYBLOB="84d001000000010008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000340791b9227926ee86a969a41f1aa78eaf92cbc0dbf9bd5bc8b0e201c1d650c80b1bed718dcaada5538ed14f2cb401e39ce56eb628bbffa146e931fcb9303502cfa16b17c6275ebe97013d676ba190d27fc9a98560925bfaa57dc70a8d19fc70a8f6042a6062b1d85f42a664", @ANYRES32=0x0, @ANYBLOB="84d001000000010008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8970, &(0x7f00000038c0)={'veth1_to_bond\x00', @ifru_mtu=0xfffffff8}) (async) ioctl$sock_ifreq(r6, 0x8970, &(0x7f00000038c0)={'veth1_to_bond\x00', @ifru_mtu=0xfffffff8}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x3) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r7 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f00000041c0)={0x4004080, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m56.025151854s ago: executing program 5 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC=r4], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m55.764304081s ago: executing program 5 (id=3291): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x200000000002, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f00000003c0)="7e1764e706fe659cb7149a3cd34f7a65de722bdd3ff692f6d363455c5c62cd40cff4fc362672cb3aa63521d0d1e1a29b0e841dd44a0ff398f12bc0e5ebfc03d3165a97735eb6ae16ce793245ecf46c4c168f924fa6156b25c3e9e1b34c2c08cea52bfe9f7d29ea5009e21614e90aa1af43691bdeb1216f394e2f65f8ad5b13eee75db45826aeb3ef481663b8195a204504b4d441bb78d1a423b1a8c2377462c1c1c161c058822a35175b76ea3e04ec361bbbefabb5f9cc9912bd2b891e455c740aba0ab2223170251e0008878190da997a89a940575c2c240ca1b1042fc977d149c2413bb57e1391a564a93fcabaa486bb7a689f4d", 0xf5, r2}, 0x68) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x5, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c82}, 0x94) statfs(&(0x7f0000000000)='./mnt\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x66}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10012, 0x0) 6m55.713753402s ago: executing program 36 (id=3291): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x200000000002, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f00000003c0)="7e1764e706fe659cb7149a3cd34f7a65de722bdd3ff692f6d363455c5c62cd40cff4fc362672cb3aa63521d0d1e1a29b0e841dd44a0ff398f12bc0e5ebfc03d3165a97735eb6ae16ce793245ecf46c4c168f924fa6156b25c3e9e1b34c2c08cea52bfe9f7d29ea5009e21614e90aa1af43691bdeb1216f394e2f65f8ad5b13eee75db45826aeb3ef481663b8195a204504b4d441bb78d1a423b1a8c2377462c1c1c161c058822a35175b76ea3e04ec361bbbefabb5f9cc9912bd2b891e455c740aba0ab2223170251e0008878190da997a89a940575c2c240ca1b1042fc977d149c2413bb57e1391a564a93fcabaa486bb7a689f4d", 0xf5, r2}, 0x68) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x5, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c82}, 0x94) statfs(&(0x7f0000000000)='./mnt\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x66}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) gettid() syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10012, 0x0) 4m50.361175407s ago: executing program 8 (id=4987): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x14, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getgid() sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="07200000c3d5131a999bb846c5f93e727a2484ab9ec3024a4b6265", @ANYRES16=r3, @ANYBLOB="65cf000000000100000008000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 4m50.245964179s ago: executing program 8 (id=4988): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000440)='reno\x00', 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x4000400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 4m49.933413158s ago: executing program 8 (id=4992): r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000180), 0x80010a, 0x1cb681) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006800010000000000fdffff27d8d19a000000180004000200040000000541c6e81b2b2380fa32ef33dd27b794922b"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m49.675374134s ago: executing program 8 (id=4993): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611850000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0x3) fstat(r2, &(0x7f00000002c0)) r3 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f00002e1000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4m48.776428416s ago: executing program 8 (id=5003): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000e632c68bda39042b0b000000000000"], 0x0, 0x26}, 0x28) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) setns(0xc9, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1}, 0x40012000) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0xe, 0x0, 0x20, 0x8000}, {0x2, 0x7f, 0x40, 0x102e}, {0xbf8, 0x40, 0x9, 0xfffffff9}, {0x7, 0x1, 0x4, 0x2}, {0x0, 0x7, 0xff, 0x9}, {0xff, 0x6, 0x10, 0x8}, {0x493, 0x0, 0x5, 0x4}, {0x8, 0x6, 0x2, 0x8}, {0xfff, 0xc0, 0x0, 0x43}]}) add_key$user(0x0, 0x0, 0x0, 0xfffffe80, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa46500, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in=@remote, 0x4e21, 0xf, 0x4e21, 0x0, 0x8, 0xa0, 0x0, 0x16}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@empty, {0x7, 0xfffffffffffffffd, 0x2, 0x1000, 0xffff, 0x2, 0x0, 0x3}, {0x0, 0x6, 0x8, 0x3ff}, {0x0, 0xa3b7, 0xfff}, 0x70bd2c, 0x0, 0x2, 0x3, 0x2, 0x40}, 0x2, 0xfffffffe}}, 0xf8}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000001e0800064000000002"], 0x94}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r5}}, 0xc) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 4m48.660996919s ago: executing program 8 (id=5006): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0xfd78) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10012, r0, 0x0) 4m48.62790307s ago: executing program 37 (id=5006): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0xfd78) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10012, r0, 0x0) 3m59.629814633s ago: executing program 9 (id=5453): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount(0x0, &(0x7f00000026c0)='.\x00', &(0x7f0000002680)='ramfs\x00', 0x1000040, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x9, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = fsmount(r0, 0x0, 0xf5) fchdir(r5) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x13, 0x3, 0x4000000a, 0x8000, 0x4, 0x56, 0x1}) bind$nfc_llcp(r2, 0x0, 0x0) readv(r2, &(0x7f0000002300)=[{&(0x7f0000000840)=""/167, 0xa7}], 0x1) close(r3) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r7, 0xffd, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r9, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) socket$inet(0x2, 0x2, 0x1) 3m59.35351802s ago: executing program 9 (id=5456): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m59.215583294s ago: executing program 9 (id=5458): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28a9f39b314d1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9", 0x3e2}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d0576425e493a2fdf20aa2e298a41e395d7025cbce20e7df7357f5c11035638ee615514da29a9fa215ad9", 0x9f}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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") mknod$loop(&(0x7f0000000200)='./file0\x00', 0x209, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 3m59.094619417s ago: executing program 9 (id=5460): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(r0, &(0x7f0000000040)='./mnt\x00', 0x100, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0, r1, r2, r0, r2, 0xffffffffffffffff, r1, r5], 0x8) 3m57.906823296s ago: executing program 9 (id=5483): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m55.488823277s ago: executing program 9 (id=5497): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000e632c68bda39042b0b000000000000"], 0x0, 0x26}, 0x28) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) setns(0xc9, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1}, 0x40012000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0xe, 0x0, 0x20, 0x8000}, {0x2, 0x7f, 0x40, 0x102e}, {0xbf8, 0x40, 0x9, 0xfffffff9}, {0x7, 0x1, 0x4, 0x2}, {0x0, 0x7, 0xff, 0x9}, {0xff, 0x6, 0x10, 0x8}, {0x493, 0x0, 0x5, 0x4}, {0x8, 0x6, 0x2, 0x8}, {0xfff, 0xc0, 0x0, 0x43}]}) add_key$user(0x0, 0x0, 0x0, 0xfffffe80, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa46500, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in=@remote, 0x4e21, 0xf, 0x4e21, 0x0, 0x8, 0xa0, 0x0, 0x16}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@empty, {0x7, 0xfffffffffffffffd, 0x2, 0x1000, 0xffff, 0x2, 0x0, 0x3}, {0x0, 0x6, 0x8, 0x3ff}, {0x0, 0xa3b7, 0xfff}, 0x70bd2c, 0x0, 0x2, 0x3, 0x2, 0x40}, 0x2, 0xfffffffe}}, 0xf8}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000001e0800064000000002"], 0x94}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r6}}, 0xc) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 3m55.478839397s ago: executing program 38 (id=5497): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000e632c68bda39042b0b000000000000"], 0x0, 0x26}, 0x28) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) setns(0xc9, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1}, 0x40012000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0xe, 0x0, 0x20, 0x8000}, {0x2, 0x7f, 0x40, 0x102e}, {0xbf8, 0x40, 0x9, 0xfffffff9}, {0x7, 0x1, 0x4, 0x2}, {0x0, 0x7, 0xff, 0x9}, {0xff, 0x6, 0x10, 0x8}, {0x493, 0x0, 0x5, 0x4}, {0x8, 0x6, 0x2, 0x8}, {0xfff, 0xc0, 0x0, 0x43}]}) add_key$user(0x0, 0x0, 0x0, 0xfffffe80, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa46500, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in=@remote, 0x4e21, 0xf, 0x4e21, 0x0, 0x8, 0xa0, 0x0, 0x16}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@empty, {0x7, 0xfffffffffffffffd, 0x2, 0x1000, 0xffff, 0x2, 0x0, 0x3}, {0x0, 0x6, 0x8, 0x3ff}, {0x0, 0xa3b7, 0xfff}, 0x70bd2c, 0x0, 0x2, 0x3, 0x2, 0x40}, 0x2, 0xfffffffe}}, 0xf8}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000001e0800064000000002"], 0x94}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r6}}, 0xc) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 2m37.676906536s ago: executing program 3 (id=6342): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000580)={r7, 0x9, 0x9, 0xffb5, 0xd72d, 0x1, 0x3, 0x1ff, {r7, @in={{0x2, 0x4e23, @loopback}}, 0x4, 0x4, 0x3, 0x0, 0x9}}, &(0x7f0000000640)=0xb0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1226, 0x2, 0x9, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x3d, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 2m37.653146546s ago: executing program 3 (id=6343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@delchain={0x30, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4040004) (fail_nth: 1) 2m37.384676103s ago: executing program 3 (id=6347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x4004814) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2805e}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080) socket$inet(0x2, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a42b820a8e8c9881d"], 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000140)={[{@data_writeback}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}], [{@measure}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot}, {@flag='silent'}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") 2m36.829398497s ago: executing program 3 (id=6353): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@nombcache}, {@nogrpid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='.\x00', 0x2075, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x43aa, 0xc0ca, 0x29, &(0x7f0000000100)={[0xf]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) close(r3) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x9a, 0x4, 0x6, 0x0, 0x6b1b, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7fff, 0xa6}, 0x1490, 0x9, 0xffffffbb, 0x0, 0xfe07, 0x1, 0x2, 0x0, 0x6, 0x0, 0xfffffffffffffff9}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200), 0x4) 2m36.520911205s ago: executing program 3 (id=6355): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000dc1e27d6a6f8ed7ce3568ec1bc80b0e647bfa51373eb70b2e5f4d", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000200000850000000c000000b709000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x209, 0x1) prlimit64(0x0, 0x1, &(0x7f0000000240)={0x5, 0x4}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) 2m36.3048374s ago: executing program 3 (id=6358): preadv(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000600)=""/147, 0x93}, {0x0}, {&(0x7f0000001940)=""/201, 0xc9}, {&(0x7f0000000280)=""/7, 0x7}], 0x6, 0x5d, 0xe1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x8894) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0xffffffff, 0x4, 0x1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x7, 0x0, 0x0, 0x0, 0x9, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x4100, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) ptrace$poke(0x4, 0x0, &(0x7f00000003c0), 0x1) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000882}, 0x4000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m36.30419277s ago: executing program 39 (id=6358): preadv(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000600)=""/147, 0x93}, {0x0}, {&(0x7f0000001940)=""/201, 0xc9}, {&(0x7f0000000280)=""/7, 0x7}], 0x6, 0x5d, 0xe1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x8894) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0xffffffff, 0x4, 0x1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x7, 0x0, 0x0, 0x0, 0x9, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x4100, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) ptrace$poke(0x4, 0x0, &(0x7f00000003c0), 0x1) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000882}, 0x4000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 13.908895729s ago: executing program 4 (id=7518): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000440)='reno\x00', 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x4000400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) 12.907625774s ago: executing program 4 (id=7526): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xfffe, 0x0, 0x6, 0x80000001}, &(0x7f00000001c0)=0x18) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x100, 0x9332}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) socket(0x11, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40, 0x3b) write(0xffffffffffffffff, &(0x7f0000000a00)="c7", 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000", 0x28}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x884) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) 9.846981512s ago: executing program 4 (id=7537): syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe98) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xfffe, 0x0, 0x6, 0x80000001}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x81}, &(0x7f0000000380)=0x8) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x100, 0x9332}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$eJzs3V1PZGcdAPD/GZgtr0KjF7VJa+PWANEdQOyWeFFrYvSqiVrvK8JACANDYGgXUpXGD2BijDXxqlfemPgBTEw/gjFpovdGjS/RXb3YRHfHnDMvy7JnFtgdZhB+v+RwnvOc58z/+c+Eh/PGmQCurJci4npE3K/X6zMRMdGsLzSnOGxMabs7t99dTqck6vU3/5FEJI26tNn0kdccbW42FBHf/FrEd5JH4+7uH2wsVSrlnebybG1ze3Z3/+DG+ubSWnmtvLWwMH9z8dXFVxbnupLnWES89pU//+SHP//qa7/+3Dt/eOuv099LmvURD/Lotkbqxey9aBmMiJ3zCNYng1mGAAD8P2jt5386ImZiIgayvTkAAADgMql/aSz+m0TUT2XodM0AAACAC6WQ3QObFErN+wDG4oX3S6XGPbyfiJFCpbpb++xqdW9rpXGv7GQUC6vrlfJc817hySgm6fJ8Vm4vR8Tdo8vlhYh4NiJ+PDGcLZeWq5WVfp/8AAAAgCti9Njx/78fbfKffvQLAAAA6LLJfncAAAAAOHeO/wEAAODyc/wPAAAAl9rX33gjneqt779eeXt/b6P69o2V8u5GaXNvubRc3dkurVWra9kz+zZPer1Ktbr9hdjauzVbK/9tvFFX3duqvbX+0FdgAwAAAD307Kc+/H0SEYdfHM6m1LV+dwroicGzNP7T+fUD6L2BfncA6Jsz/f0HLpVivzsA9F1ywvqhD76bv+I3HTfxX0UAAHDBTH0y//r/wInnBg4LPeoicE6c/4Ory/V/uLrOev3f/gJcHsUYCAfycLW1L9YPP1w/2px3fHhH5+v/x9TrT9QxAACga8ayKSmUIrLzAGNRKJRKEePZMUExWV2vlOci4mMR8buJ4jPp8ny2ZRLJSTcNAwAAAAAAAAAAAAAAAAAAAAAAAACZej2J+hksnqk1AAAAcBFEFP6SZE/zj5iaeHns+PmBa8ndiWweEe/87M33by3Vajvzaf0/2/W1nzbrP9+PMxgAAADAca3j9Gw+3O/eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDZ3Ln97nJr6mXcv385Iibz4g/GUDYfimJEjPwricEj2yURMdCF+IfvRcRzefGTtFsx2exFXvzhPscf7UJ8uMo+TMef1/N+/wrxUjbP//27mY1QT6/z+Fdoj38DOfHTuvF26fGe/+iXsx3jvxfx/GD++NOKn8T4w/EPG+PP9VPm+O1vHRx0Wlf/IGIq9+9P0m6TlmZrm9uzu/sHN9Y3l9bKa+WthYX5m4uvLr6yODe7ul4pN3/mxvjRC7+6/7j8RzrEn2znnz/+vnzK/O99dOv2xxvFYnvz5EH86ev5n/9zHeIXmp/6Z5rldP1Uq3zYKB/14i9++2Kr/HpO/ivH85+JY59/fv7Tp8x/5hs/+OMpmwIAPbC7f7CxVKmUd3pVKETvYp268FTvRrpb1KwZuRjpPEnh2oMsuvvK6ft6ERLMK3z/STdPd387rBrovOpCFYZOaBPxTF9HJgAAoNsePQYGAAAAAAAAAAAAAAAAAAAAeu2cnzR2Ly0Uj8U8zH524+n5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd878AAAD//+w2y28=") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) ioprio_set$pid(0x3, 0x0, 0x0) socket(0x11, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40, 0x3b) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000a00)="c7", 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 9.296244695s ago: executing program 2 (id=7542): syz_clone3(&(0x7f0000000500)={0x41000200, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum]}}, &(0x7f0000000f40)=""/4085, 0x32, 0xff5, 0x5}, 0x28) syz_clone3(&(0x7f0000000500)={0x41000200, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum]}}, &(0x7f0000000f40)=""/4085, 0x32, 0xff5, 0x5}, 0x28) (async) 8.760893369s ago: executing program 4 (id=7549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x31, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044cd0}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x4a}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000100)={0x4, 0x4, 0x2, 0x401}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200004, 0x0, 0x10000000}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb06e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4816) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 8.535071954s ago: executing program 2 (id=7552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000030000100003800400"], 0x3c}}, 0x0) 8.123666105s ago: executing program 2 (id=7556): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0xd0, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4c2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x262}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x26}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4c005}, 0x810) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, '\x00\x00\x00\x00\x00\x00\x00@', "de51e43bead03c41635dd3145f1f6100", "87d560d1", "24fdb55a99003858"}, 0x28) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) chmod(0x0, 0x2ea) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x2, 0x0, 0x0, 0x12, 0x1c, "3be8aaab78fc179fd116ba5853f1aca783dda1af1ea89de2b7000000001f000000ffe71100", "2809e8dbe108598948224ad54afab420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x9]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r5}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 7.448728592s ago: executing program 0 (id=7560): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000503afffe8000000000000000000000000000bbff020400907800000000600d080200001100fc0100000000000000000000000000010000000000b2f6c8a457bf48c3c0270b280000000000ffffac1414332b010000000000000401fb010100000100000000000000008400"/146], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 6.73647549s ago: executing program 2 (id=7562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8003, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000180)={'wg0\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25df5bff, {0x0, 0x0, 0x0, 0x0, 0x50010, 0x50042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @empty}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x202, 0x0, 0x1b, "0098ba7d82070400f900"}) r5 = syz_open_pts(r3, 0x80) dup3(r5, r3, 0x80000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 6.680916301s ago: executing program 1 (id=7563): mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x14) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000280)={r9, 0xffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f00000002c0)={r9, @in6={{0xa, 0x4e20, 0x0, @private2, 0x5}}, [0x80000000, 0x401, 0x8, 0x7fffffffffffffff, 0x2, 0x0, 0x5, 0xfff, 0xad, 0xfffffffffffffff7, 0x98, 0x6, 0x7, 0x0, 0xc63]}, &(0x7f00000003c0)=0x100) 3.476896052s ago: executing program 4 (id=7564): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xfffe, 0x0, 0x6, 0x80000001}, &(0x7f00000001c0)=0x18) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x100, 0x9332}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) socket(0x11, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40, 0x3b) write(0xffffffffffffffff, &(0x7f0000000a00)="c7", 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000", 0x28}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x884) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) 3.208036239s ago: executing program 0 (id=7565): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 3.052883313s ago: executing program 1 (id=7567): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80004700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) migrate_pages(0xffffffffffffffff, 0xbe9, &(0x7f0000000140)=0x6ca5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.999346424s ago: executing program 6 (id=7568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000580)=""/48, 0x30}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10, r2}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x800, 0x0, r1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, &(0x7f0000000040), &(0x7f0000000100)='GPL\x00', 0x2, 0x5c, &(0x7f00000002c0)=""/92, 0x40f00, 0x22, '\x00', r4, @fallback=0x25, r5, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x1, 0x8}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r2, r0, r7, r8, r9, r2, r0], &(0x7f0000000800)=[{0x0, 0x3, 0x4}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r1, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b705eeff070000001c0000000000000d080000000000008500000006000000b70000000200000095", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) 2.924063246s ago: executing program 0 (id=7569): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0xd0, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4c2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x262}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x26}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4c005}, 0x810) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, '\x00\x00\x00\x00\x00\x00\x00@', "de51e43bead03c41635dd3145f1f6100", "87d560d1", "24fdb55a99003858"}, 0x28) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) chmod(0x0, 0x2ea) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.sectors\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x2, 0x0, 0x0, 0x12, 0x1c, "3be8aaab78fc179fd116ba5853f1aca783dda1af1ea89de2b7000000001f000000ffe71100", "2809e8dbe108598948224ad54afab420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x9]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r5}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 2.712561801s ago: executing program 1 (id=7570): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="f5c993fa3aff7f000b000000aef0000000000000", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000033c0)={'wg2\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000045c0)={0xffffffffffffffff, 0x20, &(0x7f0000004580)={&(0x7f0000003480)=""/207, 0xcf, 0x0, &(0x7f0000003580)=""/4096, 0x1000}}, 0x10) (async) r7 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000046c0)={0x18, 0x9, &(0x7f00000002c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x6}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000023c0)=""/4096, 0x41100, 0x1, '\x00', r4, @fallback=0x9, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003440)={0x4, 0x1, 0x7, 0x2}, 0x10, r6, 0xffffffffffffffff, 0x8, &(0x7f0000004600)=[r0, r7, r0, r0], &(0x7f0000004640)=[{0x4, 0x3, 0x3, 0x1}, {0x5, 0x1, 0x8, 0x2}, {0x2, 0x3, 0x7, 0xc}, {0x0, 0x2, 0x4, 0x3}, {0x2, 0x1, 0xc, 0xa}, {0x0, 0x4, 0x0, 0x8}, {0x5, 0x4, 0xf}, {0x5, 0x4, 0x8, 0x1}], 0x10, 0x101}, 0x94) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x6, 0x401, 0x4bd7, {}, {r10, r11/1000+10000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x35, 0x3, 0x0, 0x0, "3e92ab81b1a7fb5f3c664c491295554a17944acde277085663836fcffbebc7c65f40b83e005d612a32e175d405a294213186f1e7b1f61c2c6970b66d1c81b780"}}, 0x80}, 0x1, 0x0, 0x0, 0x889}, 0x4004001) (async) sendmsg$tipc(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x0, @private}}) 2.699350852s ago: executing program 1 (id=7571): mount(0x0, 0x0, 0x0, 0x82800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 2.554645096s ago: executing program 6 (id=7572): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3db}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d057642", 0x78}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000dc1e27d6a6f8ed7ce3568ec1bc80b0e647bfa51373eb70b2e5f4d", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000200000850000000c000000b709000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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") mknod$loop(&(0x7f0000000200)='./file0\x00', 0x209, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) 2.432677499s ago: executing program 6 (id=7573): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x76, &(0x7f0000002500)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000000)='\v', 0x1, 0x7fffffffffffffff}]) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0x5, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48978, 0x61005}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff42997dc64bbeb7f59030352ab684de"}, @IFLA_PORT_INSTANCE_UUID={0xffffffffffffffab, 0x4, "69408c725fa8fc15ed83aa516ab57449"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4c75c9ff51b2378156d5589b65f113db"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x404c0c4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/45, 0x2d}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000001280)={0x30000010}) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) 2.240914733s ago: executing program 2 (id=7574): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fd"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.252624928s ago: executing program 1 (id=7575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @local, 0x388}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="140000000b040000b500000009000000001400000000000000290000000b000000fffffff9000000c9382a02af897a0d657bce52134c9258e69ee4085aff2690d660b86597cb2dfd2418cec33a8369e1efaadd9dbaca37e45da1b530aa8199e1699a49303f402408055102667c77760768896b4232716bfb311962411bd0410c07d263f47232f2d3d4258a87fa9147e1a30f78b614a29cb65cdb56ed013ab82aee7c860019dc695c9ae11001aa5640cc6e07c18130c0f74415f67bef86de050b1cb83d5373582f8cf8d16bc49ad1874c4c4df6c499b59e797ae9fccfd84e005e6c3e5708646d7b8a18e752614829ddbabe32930fc2d5081a097976f0a08492047fd765898193477afb81bd25930a706e1b20fbb68030b353b72a7dc1796f4c0ee4"], 0x30}, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") 1.210785129s ago: executing program 6 (id=7576): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000503afffe8000000000000000000000000000bbff020400907800000000600d080200001100fc0100000000000000000000000000010000000000b2f6c8a457bf48c3c0270b280000000000ffffac1414332b010000000000000401fb010100000100000000000000008400"/146], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 952.537466ms ago: executing program 4 (id=7577): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) gettid() bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9}, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000200)="76657468303a3000000000000000000002") getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2113}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) 913.279247ms ago: executing program 1 (id=7578): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0x900, &(0x7f0000000040)={@align=0x8, {0x1, 0x100, 0xd, 0x100}}, 0xb, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x80500, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4060}, {r0}, {r1, 0x2}, {r2, 0x400}], 0x4, 0xffff) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000200)={0x0, 0x2, 0x5}) ppoll(&(0x7f0000000240)=[{r1, 0x248}, {r0, 0x10e}, {r0, 0x8044}, {r2}], 0x4, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0xffffffffffffffb6]}, 0x8) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000480)={&(0x7f0000000300)=[{0x2, 0x0, 0x8000, 0xd, 0xfffffffffffffffb, 0x800, 0x6c1e, 0x800}, {0x1, 0x0, 0x4, 0x7, 0x1, 0x101, 0x93, 0x7}, {0x2, 0x0, 0xffffffffffffff01, 0x4, 0x7f, 0x100, 0xbda6, 0x9}, {0x1, 0x0, 0x2, 0x9, 0x5, 0xd, 0x1000, 0x8000000000000000}, {0x0, 0x0, 0x6, 0xd43, 0x7, 0x7, 0x0, 0x3}, {0x36589de305b4f63, 0x0, 0x9, 0x5, 0xfffffffffffffff9, 0xffffffff80000001, 0x8, 0x9}], 0x6, 0x38, 0x1}) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r3 = geteuid() quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, r3, &(0x7f00000004c0)={0x9, 0x5}) r4 = msgget(0x0, 0x7e5) statx(r2, &(0x7f0000000500)='./file0\x00', 0x100, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) syz_clone3(&(0x7f0000000980)={0x18000000, &(0x7f00000006c0)=0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x24}, &(0x7f0000000780)=""/134, 0x86, &(0x7f0000000840)=""/250, &(0x7f0000000940)=[0x0], 0x1, {r0}}, 0x58) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000a00)={{0x3, r3, 0xffffffffffffffff, r3, r5, 0x0, 0x5}, 0x0, 0x0, 0x9, 0x6f, 0x4a1ec4d7, 0x9, 0xac7e, 0x43f, 0x2, 0x0, r6, r8}) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000a80)={0x2, 0x0, 0xea, 0xac95, 0x6, 0x2}) getpeername$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x10) fdatasync(r7) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000c80)={0x2, 0x28, '\x00', 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socket(0x18, 0x80000, 0x9) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000cc0)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001100)={0x0, 0x7, @start={r9, 0x0, "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", "3d5103393fb9a7c830e991f85b679c6dab5781798da17e7db86b9db195291a9c7327d6c15e982a38d2ea6b54dcff0fbf9ca1b489eaf12444b98e5d84256fb583fb482f816822a1d112e914fc94e6445188f69fb4918979071de75ff904af5e1b0e9641960cacc4fb0c64324d88ca58038c8697d8b3af67f94fe8f53f7948fed2aa7e9f707bf01d6c0f426914bea4c5aab1eea88c02e839da4e03c64eeb1102e03f54a788078292af04614ab21b6a35f2c6f9b88ab1c9e0a763c8ee6001eec502323dfa5803927449cf10c9898863f626b6fc1cf288c68cebee7bb2c12886b05189f0cdddaac5ca2e2ddc2ad906239e0c88a26db28a18ae5df8843680417d49361543bd02b7beffb333506241b75c2bf965607e3c060df46721066e84dafe4597bf479d1a1fa3b6a260e32328114b879fa20f5a6ea12619a0fa6edf4489d9f225c51f1ca7141d9b25137a6b0bf5c74715b1a0414bda5b7680efddaef100ed7cc6264946394608d25e8b9fef6fcac09eb097cd7bb81987a0b128caa6c77f7ce8948c0202a9ec2ba404095925005e920664e3c8310becfbe73628febfa8d6dc040fd9031f7a01998ca23e5abb9b33b0b691d577b20027a1c251e0a19ee535cd5ac0b3f3073116d18a0091f7b868804c877a6b6b43a906fbc23e9928294c9426128e4412be9a2eafe8578a743b572bfd8fbe0258ad51e4873786cacea9dcde26f713afdcad6273ec6371e7569646c3f03e1ba958d30e66343dfc60f84ac0b8ce6f27e43afeda5de6688d771ee245bb6bb9cd1bc0edf774bb5c67cce801f534eade8a1c64bc2a4034b3d3d986c606f32a7840118363e88ca2560af6e1c4fbea05a58467b4da81048223a76981d509589c5b271da8c3d4dac4858ac929518598e45c12d76e8ed95043c0739c931e83c78e3c8436408bed9b106f5d9266dd4a6f141502ad124a992e8ecdf91f3dfa538e1a2e8d0578b8b0047aa1a98a9d54c04a92cbc428170ebfadeb9dcfb612ee27af8dd0e7464acbbae07ecad9e9863632b17f1e31f80adbbf9a2368d281023ce7f159d1c47ded9fc083688a375b51c327682ddecf13a9e0b4d377363ce81580c4471418bd0d67665f2c5493c639d6b7983488f27158a4b0d7a0da7e0c0d2a81d224aff42524002c87a0ead256082adf0acb6bbc42bde89d98bd3fea8a44f7c10818d2f6662d89164642ef91ab580f0608843c618e83ce861aa78b558a5a58237c5715ff0be4e5f0e18ff8ea45aed806b0089e331b6fbac3e2789166e66eed5162d02083ff2232dc30ff6ae4bae27bd8a85cbab301a453e8a00b373683d7fd72d312b72ac6a3ef5d25f4a50ebdd7cd2efa410ae155d74bb2feb8d6d92c497a0d1e80e9426392a3cf27464d9dc5995cda6ea397225dea49f4b8e58482d4330e8695c4b8e301fa2a16c8ba815990d040aa13c4f569aac8"}, [0x28, 0xbb61, 0x6, 0xe, 0x9, 0x0, 0x0, 0x7, 0x9, 0x7fffffffffffffff, 0x6, 0x2, 0x9, 0x8, 0x1, 0x6, 0x10, 0x8, 0x7f, 0x5, 0x8000000000000001, 0xc36f, 0x1, 0x0, 0x0, 0x1, 0x4, 0x8, 0xe, 0xc80, 0x6, 0xffffffff, 0x80000000, 0x800, 0x1, 0x8, 0xc90e, 0x2, 0x59d, 0x1, 0x1, 0x6e114434, 0x9, 0x13, 0x401, 0xc, 0x10000, 0x8000000000000001, 0xd, 0xf7, 0x7, 0x0, 0x2, 0xf, 0x8000000000000001, 0x2bce, 0x0, 0x6, 0x6, 0x5, 0x4, 0x7f, 0x4, 0x8]}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001b40)={r2}) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000001c80)={@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, {&(0x7f0000001b80)=""/155, 0x9b}, &(0x7f0000001c40)}, 0xa0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d40), &(0x7f0000001d80)=0xc) ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000001dc0)={r7, 0x0, 0x7, 0x8e7, 0x6, 0xf}) 832.548189ms ago: executing program 0 (id=7579): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x11) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x1263, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) socket$nl_route(0x10, 0x3, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x11) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x1263, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) (async) 428.880209ms ago: executing program 0 (id=7580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008001300000001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x2000, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x0, 0x9, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x90}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 278.320313ms ago: executing program 6 (id=7581): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x3, 0x70bd2d, 0x1, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c085}, 0x4) (fail_nth: 5) 194.439625ms ago: executing program 2 (id=7582): getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x8, 0x8, 0x80]}, &(0x7f0000000340)=0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = gettid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010727bd7000fbdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) r5 = socket(0xb, 0x800, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70ad35, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDGETLED(r6, 0x4b31, &(0x7f0000000040)) fcntl$addseals(r5, 0x409, 0xb) 92.914528ms ago: executing program 6 (id=7583): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="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", 0x3db}, {&(0x7f0000000400)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241070096c1498194a7197b45d74a8532b82037b02c9e6045c361ebf4752154fdfe39867a3236186eff2e437321de2e5f6479b384bd9ba37bcab948be0db1e4631eda95e59fdb9d1172c26347db86cdbbf687b5ae29029fbaf53d057642", 0x78}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000dc1e27d6a6f8ed7ce3568ec1bc80b0e647bfa51373eb70b2e5f4d", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000200000850000000c000000b709000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$eJzs3ctvXGdfB/DvmdiJ41YhbUMJUdtMUqV12+CMHZoo6oIm9jhx8QXZjtQIUFM1CYpiUdSC1FYsUgmxoqJCCAnYoC5ZVSoLukHZwZIVCyTof4AqFhAWaF7NmXEytucSu46dN+/nMzo5t99zm3PmPJnxzHnCz7NGo1FO21y/+ve7WVmePJemf/jm26+a05d3sz/78nbxj8lIkmoy9P/luTI8Nb20OD8gozvJ9ST3kiLJgbTmPRxct3Y9xZ/n2Yfr91L8bY52STayxcYxUINfaHt9/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBNparpWmygyN7tw9f1qb+UQ4H32r2X3fTnqd/H9oGKLpGhOGRlZG+r76JGHu19s/nMyL7XWXmqN/D2SL5558fA7LwxV1tL3qdCu+PTzL+58uLp685OHm4a7Bg6129VcPrBr1Xt0+7eX7HJ9YXZ5cXb+4uV6dXZ5sXrh3LnamSszy9WZ2dSXry2v1OerU0v1iyuLS9WxqTeqExcunK3Wx68tXl24PD0+V1/beP7XJmu1c9X3xn+rfnFpeXHhzHvjy1NXZufmZhculzHN3c2Y880T8TdnV6or9Yvz1eqt26s3zw6qZDNoouueYn3Q5KCcJmuTkxMTk5MT596+8Pb5Wm1o04baBtkUsfcnLXvnH3b02g0/UaXd/2cus1nI1byfatfHVKazlMXM99jfttb/nzpT71tuZ/+/1ssffbj7WMr+/5XW2iu9+v8edRn8aDRaOW83/drj03yeL3InH2Y1q7mZT35yjpse/7f1NMPdtlZ/ems3Py6nnoXMZjmLmc18LpZbqu0t1VzIuZxLLR/kSmaynGpmMpu51LOca1nOSurlGTWVpdRzMStZzFKqGctU3kg1E7mQCzmbauoZz7Us5moWcjnTuVjmciu3y+f9bJ86PgiaeJSgyT5Bk7VkB/v/xpP4P0Eetx2/hsN2Ndr9//6eAY21pbGpXasVAAAAsJN+9V9y6Mjz//wfyXBeLj+Xn5mdq9f2uloAAADADiq/rvdSczbcXHo5hff/AAAA8LQpyt/YFUlGc7y11Pol1L74EAAAAACeEuXf/19pzkabS8dTPLgTyvW9rhsAAACwMwbfY39gRHF67fa/1Rut+Y12RPs+v6Mzs3P18anFuXcm8lp5l4HylwabctuXFMPlzw/ezIlW1InR1nx0fY4jzaiJ8Xcm8mZOthsy9mpz9upYl8jJVuTrrcjX+0SebUYCwNPuZJ/+uF///z+Nlmb//2ZOtyJOHxvan2ToWJeetaZnBYAnxeAxdgZGFL/+8P3/cDvbdf3/87n1v62vFIzno3yc1dzI6fLXBuU3Dtbl+jtftz8zePA1hFqKAZ8GrMX+6/lKTg/4PGC0Y6CX0wM+EWjF5neTs4//QADALjrZox/eSv9/uuP9fza//38wtNBNPykEgCfCgxHsH+PCXrcRAFhPLw0AAAAAAAAAAAAAAAAAAAAAAAAAAAA7b0fv9j+yzeT/2R7X7/EOQ7Bp4WD7Odh+Pn+RZPfqXOxwWZUdyKeRZLeO1+4t5HCy7We162m8P8net2vgwlD7JXHnw9W9uiIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwm4pkX7ftleRAklqSM7tfq8fn7l5XYPf9RudKcT/381kO7V11AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeTu37/1fSmj/T2pShSnIqyfUkv73XddxJ9/e6Ajvk4DbTddz/v3nM0ygy1DrsKYanppcW55uHvxz7ofLDN99+1Zw6kh941HLKwMqGwSXaJWyM/btn15aeK1ONTt/89M4ffvwH1elLqWR/Lq3MzE3PX15692GSF4vvkmpa05q1+v7xqX/6ukvLv2u2tLuN5c6UT8705nJ/pVvq/uX2c3v15mSzpJX6+yt/9Pu3P+vY9XxOJK+OJWPrS/q95tSjpBMZ7lda8WPxp8Wh/FWul8e/+WwUjaJ5iH6pbP/BW7dXb45/9PHqjR51OpzjSW4kI/3r9GXH7uPl9aSr8qyrDDdLrZVBzX+ODGhjXx05TvRow3PlKTPabsP+nm3oVO3dhlLH817ptr9Vo7M9avRCXutypBsHkt41eq3/ke6u+LH49+JK/i1/0jH+R6V5/E+l96tzfRZlZMeZ0jOy0oosWz7ZueODjZH/9dePVPuuw9SwVX+27sVb6bj+t4/VDl2PGkXf61FHiVt7XWwoccNZ0ed1UfZIRzakaF99eqVp1/NIK6pHPX85byVDx/pdFTf11m8NuKI8SP9u993bff3/TTGW/85d4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPviLZ1217JTmV5PDaejVpbCHbA712VEaLrVZxR9198M9TobLVBMX93M9nOfR4qgMAAAAAAADAbrs0/cM3337VnIqD7U3tv+9Xk6Ekh4u/PJjppcX5ARkNJ9eT3Gsuj3TZ3+fP/c10efbh+r3m2tGttgQAeFQ/CwAA//9Q62fs") mknod$loop(&(0x7f0000000200)='./file0\x00', 0x209, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) 0s ago: executing program 0 (id=7584): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x8300, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000010c0)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x002b', @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000004000180080004000000000004000680"], 0x24}}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): 71 (pid 26413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.301416][T26413] Use struct sctp_sack_info instead [ 609.324286][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.368782][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6771'. [ 609.508323][T26415] loop2: detected capacity change from 0 to 1024 [ 609.653277][T26415] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 609.751948][T26415] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 609.848087][T26415] EXT4-fs (loop2): orphan cleanup on readonly fs [ 609.932488][T26415] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.6772: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 609.955745][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 609.961924][T20622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 610.117304][T26415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 610.119499][T26415] EXT4-fs error (device loop2): ext4_quota_enable:7235: comm syz.2.6772: Bad quota inode: 3, type: 0 [ 610.128793][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 610.128828][ C0] EXT4-fs (loop2): initial error at time 1786127558: ext4_ext_check_inode:521: inode 3 [ 610.128882][ C0] EXT4-fs (loop2): last error at time 1786127558: ext4_ext_check_inode:521: inode 3 [ 610.232426][T26415] loop2: lost filesystem error report for type 5 error -117 [ 610.234702][T26415] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 610.302777][T26415] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 610.330092][T26415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 610.726406][T26444] loop4: detected capacity change from 0 to 1024 [ 610.733382][T26444] EXT4-fs: Ignoring removed bh option [ 610.767503][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.826148][T26452] IPv6: NLM_F_REPLACE set, but no existing node found! [ 610.836756][T26444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 610.910074][T26444] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.956119][T26457] sctp: [Deprecated]: syz.0.6783 (pid 26457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.956119][T26457] Use struct sctp_sack_info instead [ 611.010713][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6783'. [ 611.267481][T26467] loop2: detected capacity change from 0 to 512 [ 611.330387][T26467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.372237][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 611.382088][T26467] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.401000][ T28] audit: type=1400 audit(1786127559.346:7919): avc: denied { write } for pid=26466 comm="syz.2.6787" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.402453][T26467] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:107: comm syz.2.6787: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 611.445699][ T28] audit: type=1400 audit(1786127559.416:7920): avc: denied { accept } for pid=26470 comm="syz.1.6789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 611.509533][ T28] audit: type=1400 audit(1786127559.496:7921): avc: denied { write } for pid=26466 comm="syz.2.6787" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.543465][T26467] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 611.620017][T26474] loop4: detected capacity change from 0 to 512 [ 611.647236][T26474] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 611.677883][T26474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 611.720400][T26474] EXT4-fs (loop4): orphan cleanup on readonly fs [ 611.739397][T26474] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.6788: bad orphan inode 3 [ 611.772834][T26474] loop4: lost filesystem error report for type 5 error -117 [ 611.782838][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 611.796736][ C0] EXT4-fs (loop4): initial error at time 1786127559: ext4_orphan_get:1425 [ 611.805328][ C0] EXT4-fs (loop4): last error at time 1786127559: ext4_orphan_get:1425 [ 611.831284][T26474] EXT4-fs (loop4): Remounting filesystem read-only [ 611.855862][T26474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 611.934230][T26474] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.6788: dx entry: limit 0 != root limit 125 [ 612.026503][T26474] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6788: Corrupt directory, running e2fsck is recommended [ 612.067685][T26484] loop6: detected capacity change from 0 to 512 [ 612.176922][T26484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.233268][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 612.243729][T26496] sctp: [Deprecated]: syz.1.6796 (pid 26496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.243729][T26496] Use struct sctp_sack_info instead [ 612.260448][T26484] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.272253][T26467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.349887][T26496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6796'. [ 612.392842][T26484] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 612.423616][T26500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6798'. [ 612.444258][ T28] audit: type=1400 audit(1786127560.436:7922): avc: denied { write } for pid=26483 comm="syz.6.6794" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 612.599090][T16982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.690811][T26517] FAULT_INJECTION: forcing a failure. [ 612.690811][T26517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.719008][T26519] netlink: 'syz.1.6799': attribute type 39 has an invalid length. [ 612.749857][T26517] CPU: 1 UID: 0 PID: 26517 Comm: syz.6.6805 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 612.749905][T26517] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 612.749927][T26517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.749944][T26517] Call Trace: [ 612.749953][T26517] [ 612.749963][T26517] __dump_stack+0x1d/0x30 [ 612.749995][T26517] dump_stack_lvl+0x95/0xd0 [ 612.750017][T26517] dump_stack+0x15/0x1b [ 612.750051][T26517] should_fail_ex+0x25e/0x270 [ 612.750134][T26517] should_fail+0xb/0x20 [ 612.750168][T26517] should_fail_usercopy+0x1a/0x20 [ 612.750275][T26517] strncpy_from_user+0x27/0x250 [ 612.750356][T26517] ? __fget_files+0x184/0x1c0 [ 612.750388][T26517] __se_sys_add_key+0x86/0x360 [ 612.750494][T26517] __x64_sys_add_key+0x67/0x80 [ 612.750520][T26517] x64_sys_call+0xb39/0x3020 [ 612.750564][T26517] do_syscall_64+0x136/0x3c0 [ 612.750604][T26517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.750635][T26517] RIP: 0033:0x7fd117ebe0d9 [ 612.750656][T26517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.750688][T26517] RSP: 002b:00007fd116917028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 612.750798][T26517] RAX: ffffffffffffffda RBX: 00007fd118145fa0 RCX: 00007fd117ebe0d9 [ 612.750873][T26517] RDX: 0000200000000080 RSI: 0000200000000400 RDI: 00002000000003c0 [ 612.750893][T26517] RBP: 00007fd116917090 R08: 00000000343634e3 R09: 0000000000000000 [ 612.750911][T26517] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 612.750981][T26517] R13: 00007fd118146038 R14: 00007fd118145fa0 R15: 00007ffe9cbf27e8 [ 612.751009][T26517] [ 613.006139][T26518] IPv6: NLM_F_REPLACE set, but no existing node found! [ 613.020390][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6799'. [ 613.038137][T26523] loop6: detected capacity change from 0 to 512 [ 613.048590][T26523] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 613.189814][T26527] loop6: detected capacity change from 0 to 512 [ 613.231208][T26527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.323153][T26527] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.352374][T26527] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:107: comm syz.6.6808: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 613.361149][ T28] audit: type=1400 audit(1786127561.336:7923): avc: denied { write } for pid=26526 comm="syz.6.6808" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.369263][T26527] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 613.415030][ T28] audit: type=1400 audit(1786127561.336:7924): avc: denied { write } for pid=26526 comm="syz.6.6808" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.571011][T26527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.368030][T26552] loop4: detected capacity change from 0 to 512 [ 615.673607][T26552] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 616.156568][T26569] loop2: detected capacity change from 0 to 512 [ 616.202628][T26569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.243202][T26569] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.263564][T26572] IPv6: NLM_F_REPLACE set, but no existing node found! [ 616.340218][ T28] audit: type=1400 audit(1786127564.326:7925): avc: denied { write } for pid=26568 comm="syz.2.6824" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.362471][T26569] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:107: comm syz.2.6824: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 616.877128][T26569] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.035733][T26592] sctp: [Deprecated]: syz.2.6831 (pid 26592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.035733][T26592] Use struct sctp_sack_info instead [ 617.058416][T26592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6831'. [ 617.384615][T26612] loop2: detected capacity change from 0 to 512 [ 617.415634][T26604] loop6: detected capacity change from 0 to 512 [ 617.441505][T26604] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 617.450435][T26612] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 617.473211][T26612] EXT4-fs (loop2): orphan cleanup on readonly fs [ 617.572438][T26612] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 617.750749][T26612] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 617.895235][T26612] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.6839: Failed to acquire dquot type 1 [ 618.049405][T26612] loop2: lost filesystem error report for type 5 error -5 [ 618.054544][T26612] EXT4-fs (loop2): Remounting filesystem read-only [ 618.068356][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 618.068375][ C1] EXT4-fs (loop2): initial error at time 1786127566: ext4_acquire_dquot:7041 [ 618.068395][ C1] EXT4-fs (loop2): last error at time 1786127566: ext4_acquire_dquot:7041 [ 618.307576][T26620] loop6: detected capacity change from 0 to 8192 [ 618.383674][T26620] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.405391][T26612] EXT4-fs (loop2): 1 truncate cleaned up [ 618.446042][T26612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.663844][T26626] IPv6: NLM_F_REPLACE set, but no existing node found! [ 619.332634][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.353492][T26633] sctp: [Deprecated]: syz.0.6845 (pid 26633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.353492][T26633] Use struct sctp_sack_info instead [ 619.428014][T26633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6845'. [ 620.378060][T26656] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6865'. [ 620.638695][T26670] sctp: [Deprecated]: syz.6.6860 (pid 26670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.638695][T26670] Use struct sctp_sack_info instead [ 620.755890][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6860'. [ 622.764295][T26686] syz_tun: entered allmulticast mode [ 623.019909][T26703] FAULT_INJECTION: forcing a failure. [ 623.019909][T26703] name failslab, interval 1, probability 0, space 0, times 0 [ 623.032776][T26703] CPU: 0 UID: 0 PID: 26703 Comm: syz.6.6869 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 623.032934][T26703] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 623.032946][T26703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.033044][T26703] Call Trace: [ 623.033054][T26703] [ 623.033116][T26703] __dump_stack+0x1d/0x30 [ 623.033142][T26703] dump_stack_lvl+0x95/0xd0 [ 623.033170][T26703] dump_stack+0x15/0x1b [ 623.033196][T26703] should_fail_ex+0x25e/0x270 [ 623.033268][T26703] ? audit_log_d_path+0x8d/0x150 [ 623.033312][T26703] should_failslab+0x8c/0xb0 [ 623.033339][T26703] __kmalloc_cache_noprof+0x7b/0x3d0 [ 623.033372][T26703] ? audit_log_d_path+0x8d/0x150 [ 623.033430][T26703] ? audit_log_n_string+0x17e/0x2c0 [ 623.033472][T26703] audit_log_d_path+0x8d/0x150 [ 623.033510][T26703] audit_log_d_path_exe+0x42/0x70 [ 623.033624][T26703] audit_log_task+0x1e8/0x240 [ 623.033738][T26703] audit_seccomp+0x6a/0x110 [ 623.033842][T26703] __seccomp_filter+0x905/0x1370 [ 623.033911][T26703] ? do_getname+0x1af/0x1c0 [ 623.033943][T26703] ? kmem_cache_free+0xca/0x380 [ 623.033978][T26703] ? do_getname+0x1af/0x1c0 [ 623.034088][T26703] __secure_computing+0x7d/0x150 [ 623.034121][T26703] do_syscall_64+0xd4/0x3c0 [ 623.034225][T26703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.034253][T26703] RIP: 0033:0x7fd117e7e90e [ 623.034279][T26703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 623.034353][T26703] RSP: 002b:00007fd116916fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 623.034386][T26703] RAX: ffffffffffffffda RBX: 00007fd1169176c0 RCX: 00007fd117e7e90e [ 623.034406][T26703] RDX: 000000000000000f RSI: 00007fd1169170a0 RDI: 0000000000000006 [ 623.034424][T26703] RBP: 00007fd116917090 R08: 0000000000000000 R09: 0000000000000000 [ 623.034439][T26703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.034458][T26703] R13: 00007fd118146038 R14: 00007fd118145fa0 R15: 00007ffe9cbf27e8 [ 623.034511][T26703] [ 623.078765][ T28] audit: type=1326 audit(1786127570.986:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117ebe0d9 code=0x7ffc0000 [ 623.669449][T26713] loop6: detected capacity change from 0 to 512 [ 623.774863][T26713] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 623.883891][T26713] EXT4-fs (loop6): orphan cleanup on readonly fs [ 623.927833][T26721] FAULT_INJECTION: forcing a failure. [ 623.927833][T26721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.960755][T26713] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 623.964098][T26723] sctp: [Deprecated]: syz.1.6877 (pid 26723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.964098][T26723] Use struct sctp_sack_info instead [ 623.974035][ T28] audit: type=1326 audit(1786127570.986:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd117e7e90e code=0x7ffc0000 [ 623.989517][T26721] CPU: 1 UID: 0 PID: 26721 Comm: syz.2.6876 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 623.989633][T26721] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 623.989664][T26721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.989708][T26721] Call Trace: [ 623.989730][T26721] [ 623.989760][T26721] __dump_stack+0x1d/0x30 [ 623.989849][T26721] dump_stack_lvl+0x95/0xd0 [ 623.990060][T26721] dump_stack+0x15/0x1b [ 623.990123][T26721] should_fail_ex+0x25e/0x270 [ 623.990229][T26721] should_fail+0xb/0x20 [ 623.990381][T26721] should_fail_usercopy+0x1a/0x20 [ 623.990483][T26721] _copy_from_user+0x1c/0xb0 [ 623.990548][T26721] do_ipv6_setsockopt+0x127/0x2040 [ 623.990710][T26721] ? _parse_integer+0x27/0x40 [ 623.990805][T26721] ? kstrtoull+0x111/0x140 [ 623.990889][T26721] ? __rcu_read_unlock+0x4e/0x70 [ 623.991043][T26721] ? avc_has_perm_noaudit+0xa3/0x120 [ 623.991127][T26721] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 623.991263][T26721] ipv6_setsockopt+0x59/0x130 [ 623.991353][T26721] tcp_setsockopt+0x98/0xb0 [ 623.991425][T26721] sock_common_setsockopt+0x69/0x80 [ 623.991544][T26721] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 623.991651][T26721] __sys_setsockopt+0x184/0x200 [ 623.991771][T26721] __x64_sys_setsockopt+0x64/0x80 [ 623.991956][T26721] x64_sys_call+0x2327/0x3020 [ 623.992037][T26721] do_syscall_64+0x136/0x3c0 [ 623.992165][T26721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.992290][T26721] RIP: 0033:0x7fe38162e0d9 [ 623.992330][T26721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.992391][T26721] RSP: 002b:00007fe380087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 623.992493][T26721] RAX: ffffffffffffffda RBX: 00007fe3818b5fa0 RCX: 00007fe38162e0d9 [ 623.992537][T26721] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 623.992578][T26721] RBP: 00007fe380087090 R08: 0000000000000048 R09: 0000000000000000 [ 623.992627][T26721] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 623.992670][T26721] R13: 00007fe3818b6038 R14: 00007fe3818b5fa0 R15: 00007ffcfaed6bf8 [ 623.992734][T26721] [ 624.159004][T26724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6877'. [ 624.177293][T26713] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 624.248850][T26713] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.6873: Failed to acquire dquot type 1 [ 624.293359][T26713] loop6: lost filesystem error report for type 5 error -5 [ 624.302841][T26713] EXT4-fs (loop6): Remounting filesystem read-only [ 624.310105][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 624.310130][ C0] EXT4-fs (loop6): initial error at time 1786127572: ext4_acquire_dquot:7041 [ 624.310160][ C0] EXT4-fs (loop6): last error at time 1786127572: ext4_acquire_dquot:7041 [ 624.432980][T26713] EXT4-fs (loop6): 1 truncate cleaned up [ 624.439058][ T5665] Bluetooth: hci0: Frame reassembly failed (-84) [ 624.446957][T26713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.510871][ T28] audit: type=1326 audit(1786127570.986:7928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd117e7e90e code=0x7ffc0000 [ 624.572690][T16982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.624664][ T28] audit: type=1326 audit(1786127570.986:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fd117ebe0d9 code=0x7ffc0000 [ 624.733530][ T28] audit: type=1326 audit(1786127570.986:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd117e7e90e code=0x7ffc0000 [ 624.852345][ T28] audit: type=1326 audit(1786127571.186:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd117e7e90e code=0x7ffc0000 [ 624.976154][ T28] audit: type=1326 audit(1786127571.186:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd117e7e90e code=0x7ffc0000 [ 625.069140][ T28] audit: type=1326 audit(1786127571.196:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.6.6869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117ebe0d9 code=0x7ffc0000 [ 625.516791][T26764] sctp: [Deprecated]: syz.4.6889 (pid 26764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.516791][T26764] Use struct sctp_sack_info instead [ 625.610946][T26764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6889'. [ 625.712395][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6892'. [ 625.721524][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6892'. [ 625.730488][T26769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6892'. [ 625.780891][T26773] loop4: detected capacity change from 0 to 8192 [ 626.190399][T26798] sctp: [Deprecated]: syz.6.6903 (pid 26798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.190399][T26798] Use struct sctp_sack_info instead [ 626.245413][T26798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6903'. [ 626.325866][T26806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6905'. [ 626.336237][T26805] netlink: 'syz.4.6905': attribute type 10 has an invalid length. [ 626.348294][T26805] dummy0: entered promiscuous mode [ 626.353713][T26805] dummy0: entered allmulticast mode [ 626.360057][T26805] team0: Port device dummy0 added [ 626.399448][T26811] loop6: detected capacity change from 0 to 764 [ 626.503663][T20622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 626.504565][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 627.180750][T26833] sctp: [Deprecated]: syz.2.6916 (pid 26833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.180750][T26833] Use struct sctp_sack_info instead [ 627.251768][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6916'. [ 627.380542][T26847] netlink: 'syz.0.6921': attribute type 3 has an invalid length. [ 627.856914][T26868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6925'. [ 627.972844][T26854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6924'. [ 628.603631][T26889] sctp: [Deprecated]: syz.0.6932 (pid 26889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.603631][T26889] Use struct sctp_sack_info instead [ 629.032467][T26905] loop4: detected capacity change from 0 to 512 [ 629.075154][T26905] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.6938: Unrecognised inode hash code 255 [ 629.201753][T26905] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6938: Corrupt directory, running e2fsck is recommended [ 629.335746][T26905] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 629.361782][T26905] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6938: corrupted in-inode xattr: invalid ea_ino [ 629.406685][T26905] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 629.442883][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 629.458673][ C1] EXT4-fs (loop4): initial error at time 1786127577: ext4_iget_extra_inode:5180: inode 15 [ 629.468964][ C1] EXT4-fs (loop4): last error at time 1786127577: ext4_iget_extra_inode:5180: inode 15 [ 629.525149][T26905] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6938: couldn't read orphan inode 15 (err -117) [ 629.552836][T26905] loop4: lost filesystem error report for type 5 error -117 [ 629.559644][T26905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.747966][T26905] EXT4-fs error (device loop4): __ext4_remount:6844: comm syz.4.6938: Abort forced by user [ 629.788832][T26905] EXT4-fs (loop4): Remounting filesystem read-only [ 629.823474][T26920] loop6: detected capacity change from 0 to 512 [ 629.829854][T26905] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 629.878031][T26920] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 630.081819][T26930] __nla_validate_parse: 2 callbacks suppressed [ 630.081840][T26930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6943'. [ 630.105236][T26932] sctp: [Deprecated]: syz.0.6946 (pid 26932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.105236][T26932] Use struct sctp_sack_info instead [ 630.122796][T26932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6946'. [ 630.580833][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.718419][T26938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6945'. [ 630.954486][T26948] loop2: detected capacity change from 0 to 512 [ 630.961416][T26948] EXT4-fs: Ignoring removed i_version option [ 630.968333][T26948] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 631.193928][T26948] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 631.208283][T26948] __quota_error: 1 callbacks suppressed [ 631.208302][T26948] Quota error (device loop2): write_blk: dquota write failed [ 631.221374][T26948] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 631.230487][T26948] Quota error (device loop2): write_blk: dquota write failed [ 631.272816][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 631.279319][ C0] EXT4-fs (loop2): initial error at time 1786127579: ext4_mb_generate_buddy:1317 [ 631.288509][ C0] EXT4-fs (loop2): last error at time 1786127579: ext4_mb_generate_buddy:1317 [ 631.338886][T26948] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 631.364392][T26948] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.6954: Failed to acquire dquot type 1 [ 631.375949][T26948] loop2: lost filesystem error report for type 5 error -28 [ 631.376290][T26948] EXT4-fs (loop2): 1 truncate cleaned up [ 631.390035][T26948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.404234][T26948] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.6954: iget: bad i_size value: 360287970189639690 [ 631.417162][ T28] audit: type=1400 audit(1786127579.376:7935): avc: denied { write } for pid=26947 comm="syz.2.6954" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.787592][T26972] sctp: [Deprecated]: syz.1.6961 (pid 26972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.787592][T26972] Use struct sctp_sack_info instead [ 631.870817][T26972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6961'. [ 631.881357][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.902705][T26975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6963'. [ 631.921016][T26978] loop6: detected capacity change from 0 to 512 [ 631.962506][T26978] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 632.312477][T26994] loop2: detected capacity change from 0 to 512 [ 632.331602][T26994] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 632.476386][T27000] loop2: detected capacity change from 0 to 1024 [ 632.564301][T27000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.770227][T27000] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6971'. [ 632.783171][T27012] sctp: [Deprecated]: syz.6.6976 (pid 27012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.783171][T27012] Use struct sctp_sack_info instead [ 632.812528][T27012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6976'. [ 632.815769][T27009] loop4: detected capacity change from 0 to 512 [ 632.832432][ T28] audit: type=1400 audit(1786127580.796:7936): avc: denied { write } for pid=26999 comm="syz.2.6971" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 632.920707][T27009] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 633.003744][T27009] EXT4-fs (loop4): orphan cleanup on readonly fs [ 633.080052][T27009] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 633.131042][T27018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6977'. [ 633.140234][T27009] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 633.196869][T27009] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.6974: Failed to acquire dquot type 1 [ 633.261512][T27009] loop4: lost filesystem error report for type 5 error -5 [ 633.262993][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 633.276652][ C0] EXT4-fs (loop4): initial error at time 1786127581: ext4_acquire_dquot:7041 [ 633.285489][ C0] EXT4-fs (loop4): last error at time 1786127581: ext4_acquire_dquot:7041 [ 633.312009][T27009] EXT4-fs (loop4): Remounting filesystem read-only [ 633.341420][T27009] EXT4-fs (loop4): 1 truncate cleaned up [ 633.348944][T27009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 633.464088][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 633.481681][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.514168][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.659787][T27039] sctp: [Deprecated]: syz.4.6987 (pid 27039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.659787][T27039] Use struct sctp_sack_info instead [ 633.778223][T27039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6987'. [ 633.801605][T27044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6989'. [ 633.960012][T27053] FAULT_INJECTION: forcing a failure. [ 633.960012][T27053] name failslab, interval 1, probability 0, space 0, times 0 [ 634.069625][T27053] CPU: 1 UID: 0 PID: 27053 Comm: syz.4.6993 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 634.069718][T27053] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 634.069731][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.069747][T27053] Call Trace: [ 634.069756][T27053] [ 634.069765][T27053] __dump_stack+0x1d/0x30 [ 634.069837][T27053] dump_stack_lvl+0x95/0xd0 [ 634.069864][T27053] dump_stack+0x15/0x1b [ 634.069947][T27053] should_fail_ex+0x25e/0x270 [ 634.070034][T27053] should_failslab+0x8c/0xb0 [ 634.070063][T27053] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 634.070092][T27053] ? sk_prot_alloc+0x3f/0x180 [ 634.070155][T27053] ? sk_prot_alloc+0x3f/0x180 [ 634.070201][T27053] sk_prot_alloc+0x3f/0x180 [ 634.070277][T27053] sk_alloc+0x34/0x3e0 [ 634.070412][T27053] inet6_create+0x3af/0x860 [ 634.070450][T27053] __sock_create+0x2e5/0x580 [ 634.070550][T27053] sock_create_kern+0x38/0x50 [ 634.070592][T27053] smc_create_clcsk+0x34/0x80 [ 634.070698][T27053] smc_inet_init_sock+0x44/0x50 [ 634.070722][T27053] inet6_create+0x7f2/0x860 [ 634.070783][T27053] __sock_create+0x2e5/0x580 [ 634.070822][T27053] __sys_socket+0xaf/0x180 [ 634.070860][T27053] __x64_sys_socket+0x3f/0x50 [ 634.070919][T27053] x64_sys_call+0x11fc/0x3020 [ 634.070952][T27053] do_syscall_64+0x136/0x3c0 [ 634.071046][T27053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.071076][T27053] RIP: 0033:0x7f71ea84e0d9 [ 634.071164][T27053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.071190][T27053] RSP: 002b:00007f71e92a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 634.071218][T27053] RAX: ffffffffffffffda RBX: 00007f71eaad5fa0 RCX: 00007f71ea84e0d9 [ 634.071333][T27053] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 634.071351][T27053] RBP: 00007f71e92a7090 R08: 0000000000000000 R09: 0000000000000000 [ 634.071369][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.071386][T27053] R13: 00007f71eaad6038 R14: 00007f71eaad5fa0 R15: 00007ffe2138ae28 [ 634.071414][T27053] [ 634.684747][T27068] loop6: detected capacity change from 0 to 512 [ 634.751376][T27068] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 634.759472][T27068] EXT4-fs (loop6): orphan cleanup on readonly fs [ 634.796031][T27066] loop2: detected capacity change from 0 to 512 [ 634.818569][T27068] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 634.828811][T27068] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 634.903071][T27068] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.6996: Failed to acquire dquot type 1 [ 634.951508][T27068] loop6: lost filesystem error report for type 5 error -5 [ 634.952851][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 634.966578][ C1] EXT4-fs (loop6): initial error at time 1786127582: ext4_acquire_dquot:7041 [ 634.975442][ C1] EXT4-fs (loop6): last error at time 1786127582: ext4_acquire_dquot:7041 [ 634.986084][T27068] EXT4-fs (loop6): Remounting filesystem read-only [ 635.014723][T27068] EXT4-fs (loop6): 1 truncate cleaned up [ 635.023086][T27068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.036096][T27082] sctp: [Deprecated]: syz.4.7003 (pid 27082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.036096][T27082] Use struct sctp_sack_info instead [ 635.201480][T16982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.382129][T27098] loop6: detected capacity change from 0 to 1024 [ 635.389167][T27098] EXT4-fs: Ignoring removed bh option [ 635.537305][T27093] __nla_validate_parse: 2 callbacks suppressed [ 635.537326][T27093] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7006'. [ 635.686639][T27098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 635.698964][T27098] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.812900][T27117] sctp: [Deprecated]: syz.2.7017 (pid 27117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.812900][T27117] Use struct sctp_sack_info instead [ 635.854523][T27117] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7017'. [ 635.934168][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7019'. [ 635.947811][T27121] loop4: detected capacity change from 0 to 512 [ 635.959730][T27121] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 636.066924][T27127] loop2: detected capacity change from 0 to 512 [ 636.108828][T27127] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 636.153341][T27127] EXT4-fs (loop2): orphan cleanup on readonly fs [ 636.208767][T27127] __quota_error: 27 callbacks suppressed [ 636.208784][T27127] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 636.263901][T27127] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 636.293065][T27127] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7020: Failed to acquire dquot type 1 [ 636.317620][T27127] loop2: lost filesystem error report for type 5 error -5 [ 636.317928][T27127] EXT4-fs (loop2): Remounting filesystem read-only [ 636.332352][T27127] EXT4-fs (loop2): 1 truncate cleaned up [ 636.333558][T16982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 636.339354][T27127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.607873][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.921185][T27153] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7030'. [ 636.955401][T27155] sctp: [Deprecated]: syz.2.7031 (pid 27155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.955401][T27155] Use struct sctp_sack_info instead [ 637.119212][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7033'. [ 637.340930][T27171] loop2: detected capacity change from 0 to 512 [ 637.425073][T27171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.470942][T27171] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.497585][ T28] audit: type=1400 audit(1786127585.466:7964): avc: denied { write } for pid=27170 comm="syz.2.7039" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.569061][T27171] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:107: comm syz.2.7039: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 637.703605][T27192] sctp: [Deprecated]: syz.4.7045 (pid 27192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.703605][T27192] Use struct sctp_sack_info instead [ 637.841901][T27198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7047'. [ 637.864861][T27196] loop4: detected capacity change from 0 to 512 [ 637.872971][T27171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.883740][T27196] EXT4-fs: Ignoring removed i_version option [ 637.907611][T27196] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 637.941314][T27202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7049'. [ 638.014343][ T5713] Bluetooth: hci0: Frame reassembly failed (-84) [ 638.081185][T27196] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 638.095434][T27196] Quota error (device loop4): write_blk: dquota write failed [ 638.102976][T27196] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 638.112182][T27196] Quota error (device loop4): write_blk: dquota write failed [ 638.119751][T27196] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 638.130330][T27196] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7046: Failed to acquire dquot type 1 [ 638.141677][T27196] loop4: lost filesystem error report for type 5 error -28 [ 638.171447][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 638.189665][ C0] EXT4-fs (loop4): initial error at time 1786127586: ext4_mb_generate_buddy:1317 [ 638.203046][ C0] EXT4-fs (loop4): last error at time 1786127586: ext4_acquire_dquot:7041 [ 638.377650][T27196] EXT4-fs (loop4): 1 truncate cleaned up [ 638.398230][T27196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.436221][ T28] audit: type=1400 audit(1786127586.386:7965): avc: denied { write } for pid=27195 comm="syz.4.7046" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 638.462185][T27196] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.7046: iget: bad i_size value: 360287970189639690 [ 638.723599][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.737636][T27221] loop6: detected capacity change from 0 to 8192 [ 640.019964][T27221] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 640.045971][T20622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 640.873915][T27237] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7060'. [ 640.928859][T27242] loop2: detected capacity change from 0 to 128 [ 641.360145][T27252] sctp: [Deprecated]: syz.2.7066 (pid 27252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.360145][T27252] Use struct sctp_sack_info instead [ 641.922006][T27262] loop4: detected capacity change from 0 to 8192 [ 641.959390][T27262] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 642.294511][T27281] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7075'. [ 642.713281][T27288] loop2: detected capacity change from 0 to 512 [ 642.719965][T27288] EXT4-fs: Ignoring removed i_version option [ 642.734638][T27288] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 642.787387][T27292] sctp: [Deprecated]: syz.0.7080 (pid 27292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.787387][T27292] Use struct sctp_sack_info instead [ 642.868279][T27288] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 642.893713][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 642.902832][ C1] EXT4-fs (loop2): initial error at time 1786127590: ext4_mb_generate_buddy:1317 [ 642.915830][ C1] EXT4-fs (loop2): last error at time 1786127590: ext4_mb_generate_buddy:1317 [ 643.008687][T27288] Quota error (device loop2): write_blk: dquota write failed [ 643.016652][T27272] loop6: detected capacity change from 0 to 512 [ 643.027841][T27288] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 643.037079][T27288] Quota error (device loop2): write_blk: dquota write failed [ 643.044541][T27288] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 643.054510][T27288] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7078: Failed to acquire dquot type 1 [ 643.065887][T27288] loop2: lost filesystem error report for type 5 error -28 [ 643.068222][T27288] EXT4-fs (loop2): 1 truncate cleaned up [ 643.081669][T27288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.095878][T27287] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.7078: iget: bad i_size value: 360287970189639690 [ 643.111777][ T28] audit: type=1400 audit(1786127591.056:7966): avc: denied { write } for pid=27286 comm="syz.2.7078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.232045][T27297] loop4: detected capacity change from 0 to 8192 [ 643.258908][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.271310][T27297] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 643.313456][T27305] sctp: [Deprecated]: syz.0.7093 (pid 27305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.313456][T27305] Use struct sctp_sack_info instead [ 643.508133][T27272] EXT4-fs (loop6): 1 orphan inode deleted [ 643.514900][T27272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.527363][T27272] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.862405][T27272] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.042729][T27333] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7092'. [ 644.075861][T27336] loop2: detected capacity change from 0 to 512 [ 644.088794][T27337] loop6: detected capacity change from 0 to 512 [ 644.162154][T27336] EXT4-fs: Ignoring removed i_version option [ 644.173132][T27337] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 644.199897][T27336] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 644.245673][T27342] sctp: [Deprecated]: syz.6.7097 (pid 27342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.245673][T27342] Use struct sctp_sack_info instead [ 644.502792][T27336] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 644.531925][T27336] Quota error (device loop2): write_blk: dquota write failed [ 644.552861][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 644.559365][ C1] EXT4-fs (loop2): initial error at time 1786127592: ext4_mb_generate_buddy:1317 [ 644.568561][ C1] EXT4-fs (loop2): last error at time 1786127592: ext4_mb_generate_buddy:1317 [ 644.587568][T27336] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 644.612652][T27336] Quota error (device loop2): write_blk: dquota write failed [ 644.620108][T27336] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 644.629945][T27336] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7094: Failed to acquire dquot type 1 [ 644.641253][T27336] loop2: lost filesystem error report for type 5 error -28 [ 644.665437][T27336] EXT4-fs (loop2): 1 truncate cleaned up [ 644.692183][T27336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.706549][ T28] audit: type=1400 audit(1786127592.656:7967): avc: denied { write } for pid=27334 comm="syz.2.7094" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 644.981060][T27336] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.7094: iget: bad i_size value: 360287970189639690 [ 645.213627][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.258652][T27383] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7110'. [ 645.373865][T27392] sctp: [Deprecated]: syz.4.7115 (pid 27392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.373865][T27392] Use struct sctp_sack_info instead [ 645.446403][T27392] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7115'. [ 646.345941][T27413] loop6: detected capacity change from 0 to 8192 [ 646.387965][T27413] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.849150][T27433] sctp: [Deprecated]: syz.4.7131 (pid 27433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.849150][T27433] Use struct sctp_sack_info instead [ 646.920207][T27433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7131'. [ 647.148169][T27441] loop4: detected capacity change from 0 to 8192 [ 647.157430][T27441] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 647.508357][T27453] loop6: detected capacity change from 0 to 512 [ 647.581347][T27453] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 648.119628][T27470] sctp: [Deprecated]: syz.4.7144 (pid 27470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.119628][T27470] Use struct sctp_sack_info instead [ 648.171015][T27470] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7144'. [ 648.549165][T27483] loop6: detected capacity change from 0 to 8192 [ 648.584621][T27483] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 649.226100][T27507] sctp: [Deprecated]: syz.6.7159 (pid 27507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 649.226100][T27507] Use struct sctp_sack_info instead [ 649.326862][T27507] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7159'. [ 649.860419][T27520] loop6: detected capacity change from 0 to 512 [ 649.911136][T27520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.923786][T27520] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.132817][ T28] audit: type=1400 audit(1786127598.116:7968): avc: denied { write } for pid=27519 comm="syz.6.7163" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 650.143443][T27520] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:107: comm syz.6.7163: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 650.155490][T27524] loop2: detected capacity change from 0 to 8192 [ 650.232292][T27524] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 650.494008][T27543] sctp: [Deprecated]: syz.1.7171 (pid 27543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.494008][T27543] Use struct sctp_sack_info instead [ 650.557106][T27543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7171'. [ 650.710186][T27520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.980133][T27567] sctp: [Deprecated]: syz.1.7183 (pid 27567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.980133][T27567] Use struct sctp_sack_info instead [ 651.068507][T27574] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7183'. [ 651.092031][T27570] loop4: detected capacity change from 0 to 512 [ 651.129286][T27570] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 651.208226][T27579] loop4: detected capacity change from 0 to 128 [ 651.365018][T27579] syz.4.7185: attempt to access beyond end of device [ 651.365018][T27579] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 651.611233][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7190'. [ 652.214872][T27608] loop6: detected capacity change from 0 to 512 [ 652.259717][T27612] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7196'. [ 652.268177][T27608] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 652.482838][T27624] sctp: [Deprecated]: syz.6.7198 (pid 27624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.482838][T27624] Use struct sctp_sack_info instead [ 652.503478][T27624] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7198'. [ 652.649901][T27628] loop6: detected capacity change from 0 to 512 [ 652.658913][T27627] loop2: detected capacity change from 0 to 1024 [ 652.710044][T27627] EXT4-fs: Ignoring removed bh option [ 652.715987][T27628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.857458][T27628] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.892944][T27627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 652.912192][T27628] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.7202: corrupted xattr block 33: invalid checksum [ 652.946471][T27628] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 652.971169][T27627] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.005546][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7205'. [ 653.033113][T27628] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.7202: corrupted xattr block 33: invalid checksum [ 653.034300][ T28] audit: type=1400 audit(1786127601.026:7969): avc: denied { write } for pid=27626 comm="syz.6.7202" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 653.126734][T27628] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 653.142276][ T28] audit: type=1400 audit(1786127601.126:7970): avc: denied { unlink } for pid=27626 comm="syz.6.7202" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 653.170257][T27628] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.7202: corrupted xattr block 33: invalid checksum [ 653.184043][T27628] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 653.185682][T27628] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -74) [ 653.331065][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 653.360958][T27628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.531183][T27651] loop4: detected capacity change from 0 to 512 [ 654.119687][T27662] sctp: [Deprecated]: syz.4.7212 (pid 27662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.119687][T27662] Use struct sctp_sack_info instead [ 654.200888][T27664] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7213'. [ 654.317211][T27662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7212'. [ 655.781462][T27688] loop4: detected capacity change from 0 to 512 [ 655.811423][T27688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.824149][T27688] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.963415][T27688] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.7221: corrupted xattr block 33: invalid checksum [ 655.992755][T27688] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 656.001967][T27688] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.7221: corrupted xattr block 33: invalid checksum [ 656.016006][ T28] audit: type=1400 audit(1786127603.986:7971): avc: denied { write } for pid=27687 comm="syz.4.7221" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 656.041813][T27699] IPv6: NLM_F_REPLACE set, but no existing node found! [ 656.093205][T27688] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 656.275002][T27688] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.7221: corrupted xattr block 33: invalid checksum [ 656.324213][T27706] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7226'. [ 656.325680][T27688] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 656.333650][T27688] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -74) [ 656.406244][T27710] loop6: detected capacity change from 0 to 128 [ 656.736279][T27688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.007510][T27710] Set syz1 is full, maxelem 65536 reached [ 657.088641][T27710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7228'. [ 662.006296][T27761] lo speed is unknown, defaulting to 1000 [ 662.587507][T27794] loop2: detected capacity change from 0 to 1024 [ 662.657497][T27794] EXT4-fs: Ignoring removed bh option [ 662.791928][T27794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 662.827507][T27794] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.159492][T27761] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.192058][T27761] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.230021][T27761] bridge_slave_0: entered allmulticast mode [ 663.259454][T27761] bridge_slave_0: entered promiscuous mode [ 663.305867][T27761] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.351054][T27761] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.364063][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 663.382244][T27761] bridge_slave_1: entered allmulticast mode [ 663.418241][T27761] bridge_slave_1: entered promiscuous mode [ 663.506644][T27761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.551401][T27761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.565768][T27827] sctp: [Deprecated]: syz.2.7261 (pid 27827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.565768][T27827] Use struct sctp_sack_info instead [ 663.584696][T27761] team0: Port device team_slave_0 added [ 663.591877][T27761] team0: Port device team_slave_1 added [ 663.672790][T27827] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7261'. [ 663.767070][T27761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.810184][T27761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.921730][T27761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.932965][T27839] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7264'. [ 664.017832][T27761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.020872][T27845] loop4: detected capacity change from 0 to 128 [ 664.075715][T27761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.162682][T27761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.541004][T27761] hsr_slave_0: entered promiscuous mode [ 664.564851][T27761] hsr_slave_1: entered promiscuous mode [ 664.601590][T27761] debugfs: 'hsr0' already exists in 'hsr' [ 664.640815][T27761] Cannot create hsr debugfs directory [ 664.669639][T27871] sctp: [Deprecated]: syz.4.7275 (pid 27871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 664.669639][T27871] Use struct sctp_sack_info instead [ 664.723288][T27872] bridge1: entered allmulticast mode [ 664.737404][T27873] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7275'. [ 665.403555][T27890] netlink: zone id is out of range [ 665.408742][T27890] netlink: zone id is out of range [ 665.413874][T27890] netlink: zone id is out of range [ 665.419102][T27890] netlink: zone id is out of range [ 665.424335][T27890] netlink: zone id is out of range [ 665.430175][T27890] netlink: zone id is out of range [ 665.435322][T27890] netlink: zone id is out of range [ 665.440555][T27890] netlink: zone id is out of range [ 665.445751][T27890] netlink: zone id is out of range [ 665.450888][T27890] netlink: zone id is out of range [ 665.473786][T27890] netlink: 'syz.0.7281': attribute type 2 has an invalid length. [ 665.526868][T27895] IPv6: NLM_F_REPLACE set, but no existing node found! [ 665.715460][T27761] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.971380][T27890] 0: entered promiscuous mode [ 665.979838][T27901] loop2: detected capacity change from 0 to 512 [ 665.986716][T27901] EXT4-fs: Ignoring removed i_version option [ 665.993358][T27901] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 666.038549][T27761] team0: Port device netdevsim2 removed [ 666.045411][T27761] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.188790][T27907] sctp: [Deprecated]: syz.0.7286 (pid 27907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 666.188790][T27907] Use struct sctp_sack_info instead [ 666.222349][T27761] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.238449][T27901] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 666.252696][T27901] Quota error (device loop2): write_blk: dquota write failed [ 666.260203][T27901] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 666.269285][T27901] Quota error (device loop2): write_blk: dquota write failed [ 666.276735][T27901] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 666.307448][T27907] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7286'. [ 666.325789][T27901] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7284: Failed to acquire dquot type 1 [ 666.337327][T27901] loop2: lost filesystem error report for type 5 error -28 [ 666.337866][T27901] EXT4-fs (loop2): 1 truncate cleaned up [ 666.351272][T27901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.368507][T27901] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.7284: iget: bad i_size value: 360287970189639690 [ 666.369485][ T28] audit: type=1400 audit(1786127614.336:7972): avc: denied { write } for pid=27900 comm="syz.2.7284" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.593520][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.683910][T27761] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.048465][T27761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 667.127507][T27761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.135466][T27761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 667.155326][T27761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.262062][T27761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 667.290381][T27939] sctp: [Deprecated]: syz.4.7298 (pid 27939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.290381][T27939] Use struct sctp_sack_info instead [ 667.318072][T27761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.325941][T27761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.345420][T27761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.377490][T27939] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7298'. [ 667.707599][T27957] loop4: detected capacity change from 0 to 512 [ 667.726769][T27957] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 667.742225][T27761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.979582][T27761] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.135912][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.143107][ T5704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.173367][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.180504][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.255709][T27981] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7307'. [ 668.369844][ T28] audit: type=1400 audit(1786127616.346:7973): avc: denied { read } for pid=27984 comm="syz.1.7309" name="event4" dev="devtmpfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 668.439168][ T28] audit: type=1400 audit(1786127616.346:7974): avc: denied { open } for pid=27984 comm="syz.1.7309" path="/dev/input/event4" dev="devtmpfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 668.509682][T27994] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7312'. [ 668.786389][T27761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.692886][T28047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7321'. [ 669.756742][T27761] veth0_vlan: entered promiscuous mode [ 669.843975][T28055] FAULT_INJECTION: forcing a failure. [ 669.843975][T28055] name failslab, interval 1, probability 0, space 0, times 0 [ 669.945055][T28055] CPU: 1 UID: 0 PID: 28055 Comm: syz.4.7323 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 669.945173][T28055] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 669.945185][T28055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.945271][T28055] Call Trace: [ 669.945280][T28055] [ 669.945291][T28055] __dump_stack+0x1d/0x30 [ 669.945323][T28055] dump_stack_lvl+0x95/0xd0 [ 669.945352][T28055] dump_stack+0x15/0x1b [ 669.945421][T28055] should_fail_ex+0x25e/0x270 [ 669.945461][T28055] should_failslab+0x8c/0xb0 [ 669.945492][T28055] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 669.945522][T28055] ? __alloc_skb+0x2db/0x6f0 [ 669.945625][T28055] ? __alloc_skb+0x2db/0x6f0 [ 669.945670][T28055] ? security_inode_alloc+0x37/0x100 [ 669.945706][T28055] __alloc_skb+0x2db/0x6f0 [ 669.945744][T28055] ? __alloc_skb+0x205/0x6f0 [ 669.945842][T28055] alloc_skb_with_frags+0x7e/0x3d0 [ 669.945880][T28055] ? selinux_file_open+0x2e6/0x330 [ 669.945909][T28055] sock_alloc_send_pskb+0x44d/0x500 [ 669.945946][T28055] tun_get_user+0x96c/0x2820 [ 669.946006][T28055] ? _parse_integer_limit+0x177/0x1a0 [ 669.946043][T28055] ? _parse_integer+0x27/0x40 [ 669.946079][T28055] ? ref_tracker_alloc+0x1eb/0x2f0 [ 669.946182][T28055] tun_chr_write_iter+0x15a/0x210 [ 669.946291][T28055] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 669.946329][T28055] vfs_write+0x57d/0x990 [ 669.946359][T28055] ksys_write+0xdc/0x1a0 [ 669.946386][T28055] __x64_sys_write+0x40/0x50 [ 669.946477][T28055] x64_sys_call+0x27e1/0x3020 [ 669.946510][T28055] do_syscall_64+0x136/0x3c0 [ 669.946591][T28055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.946617][T28055] RIP: 0033:0x7f71ea80e90e [ 669.946639][T28055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 669.946677][T28055] RSP: 002b:00007f71e9285fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 669.946705][T28055] RAX: ffffffffffffffda RBX: 00007f71e92866c0 RCX: 00007f71ea80e90e [ 669.946724][T28055] RDX: 0000000000000d81 RSI: 0000200000002740 RDI: 00000000000000c8 [ 669.946743][T28055] RBP: 00007f71e9286090 R08: 0000000000000000 R09: 0000000000000000 [ 669.946764][T28055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.946778][T28055] R13: 00007f71eaad6128 R14: 00007f71eaad6090 R15: 00007ffe2138ae28 [ 669.946806][T28055] [ 669.948246][T27761] veth1_vlan: entered promiscuous mode [ 671.474447][T27761] veth0_macvtap: entered promiscuous mode [ 671.493819][ T5715] Bluetooth: hci0: Frame reassembly failed (-84) [ 671.583002][T27761] veth1_macvtap: entered promiscuous mode [ 671.779713][T27761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.855939][T28084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7333'. [ 672.122157][T27761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.333040][ T5715] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.723076][ T5724] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.753478][ T5724] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.066098][ T5704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.527119][T28107] loop6: detected capacity change from 0 to 8192 [ 673.616399][T20622] Bluetooth: hci0: command 0x1003 tx timeout [ 673.622504][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 673.660639][T28107] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 676.301328][T28152] loop4: detected capacity change from 0 to 512 [ 676.309850][T28152] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 676.318064][T28152] EXT4-fs (loop4): orphan cleanup on readonly fs [ 676.339086][T28152] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 676.480970][T28152] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 676.601104][T28152] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7353: Failed to acquire dquot type 1 [ 676.685610][ T5715] Bluetooth: hci0: Frame reassembly failed (-84) [ 676.716699][T28152] loop4: lost filesystem error report for type 5 error -5 [ 676.722819][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 676.736504][ C0] EXT4-fs (loop4): initial error at time 1786127624: ext4_acquire_dquot:7041 [ 676.745340][ C0] EXT4-fs (loop4): last error at time 1786127624: ext4_acquire_dquot:7041 [ 676.813470][T28152] EXT4-fs (loop4): Remounting filesystem read-only [ 676.847925][T28152] EXT4-fs (loop4): 1 truncate cleaned up [ 676.871378][T28152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.970523][T28160] siw: device registration error -23 [ 677.039581][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.058109][T28160] net_ratelimit: 98 callbacks suppressed [ 677.058130][T28160] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 677.083856][T28158] lo speed is unknown, defaulting to 1000 [ 677.255319][T28164] loop4: detected capacity change from 0 to 8192 [ 677.275294][T28164] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 677.435558][T28172] loop2: detected capacity change from 0 to 512 [ 677.484627][T28172] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 678.103915][T28180] loop2: detected capacity change from 0 to 1024 [ 678.129656][T28180] EXT4-fs: Ignoring removed bh option [ 678.199704][T28180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 678.229404][T28180] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.530868][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 678.803906][T20622] Bluetooth: hci0: command 0x1003 tx timeout [ 678.810272][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 681.409884][T28221] loop2: detected capacity change from 0 to 8192 [ 681.617815][T28221] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 681.789743][T28229] loop4: detected capacity change from 0 to 1024 [ 681.832580][T28229] EXT4-fs: Ignoring removed bh option [ 681.953420][T28229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 681.981000][T28229] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.341401][ T28] audit: type=1326 audit(1786127630.326:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 682.462665][ T28] audit: type=1326 audit(1786127630.326:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 682.567186][T28242] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7381'. [ 682.586837][ T28] audit: type=1326 audit(1786127630.326:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 682.766922][ T28] audit: type=1326 audit(1786127630.326:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 682.795588][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 682.849445][ T28] audit: type=1326 audit(1786127630.326:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 682.929051][ T28] audit: type=1326 audit(1786127630.326:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 683.031625][T28252] loop6: detected capacity change from 0 to 512 [ 683.042711][ T28] audit: type=1326 audit(1786127630.356:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 683.068267][ T28] audit: type=1326 audit(1786127630.356:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 683.119929][T28252] EXT4-fs: Ignoring removed i_version option [ 683.226866][T28252] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 683.236069][ T28] audit: type=1326 audit(1786127630.486:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 683.261712][ T28] audit: type=1326 audit(1786127630.486:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28241 comm="syz.0.7381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 683.512571][T28252] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 683.527080][T28252] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.7383: Failed to acquire dquot type 1 [ 683.538334][T28252] loop6: lost filesystem error report for type 5 error -28 [ 683.555558][T28252] EXT4-fs (loop6): 1 truncate cleaned up [ 683.584538][T28252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.663212][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.274603][T28244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7380'. [ 685.371405][T28252] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.7383: iget: bad i_size value: 360287970189639690 [ 685.909871][T27761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.056297][T28279] loop4: detected capacity change from 0 to 512 [ 686.103122][T28279] EXT4-fs: Ignoring removed i_version option [ 686.126939][T28279] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 686.179942][T28279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 686.194211][T28279] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7390: Failed to acquire dquot type 1 [ 686.205460][T28279] loop4: lost filesystem error report for type 5 error -28 [ 686.225395][T28279] EXT4-fs (loop4): 1 truncate cleaned up [ 686.259274][T28279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.350022][T28279] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.7390: iget: bad i_size value: 360287970189639690 [ 686.452865][T28300] loop2: detected capacity change from 0 to 512 [ 686.460135][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.543400][T28300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.656168][T28300] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.143178][T28316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=28316 comm=syz.4.7401 [ 687.408201][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.832390][ T5603] Bluetooth: hci0: Frame reassembly failed (-84) [ 687.915132][T28333] loop2: detected capacity change from 0 to 1024 [ 687.922140][T28333] EXT4-fs: Ignoring removed bh option [ 688.681176][T28333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 688.722866][T28333] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.062198][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 689.062216][ T28] audit: type=1326 audit(1786127637.046:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.132058][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 689.143068][ T28] audit: type=1326 audit(1786127637.046:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.252826][ T28] audit: type=1326 audit(1786127637.046:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.308956][ T28] audit: type=1326 audit(1786127637.046:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.385546][ T28] audit: type=1326 audit(1786127637.046:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.442804][ T28] audit: type=1326 audit(1786127637.046:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.512938][T28363] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 689.525320][ T28] audit: type=1326 audit(1786127637.226:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.592812][ T28] audit: type=1326 audit(1786127637.236:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.685027][ T28] audit: type=1326 audit(1786127637.236:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71ea80e90e code=0x7ffc0000 [ 689.756574][ T28] audit: type=1326 audit(1786127637.236:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28355 comm="syz.4.7413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ea84e0d9 code=0x7ffc0000 [ 689.789086][T28363] bond1 (unregistering): Released all slaves [ 689.877632][T20622] Bluetooth: hci0: command 0x1003 tx timeout [ 689.883907][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 690.181591][T28384] loop2: detected capacity change from 0 to 1764 [ 690.196642][T28384] iso9660: Bad value for 'map' [ 690.640874][T28402] FAULT_INJECTION: forcing a failure. [ 690.640874][T28402] name failslab, interval 1, probability 0, space 0, times 0 [ 690.669646][T28402] CPU: 0 UID: 0 PID: 28402 Comm: syz.6.7426 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 690.669684][T28402] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 690.669697][T28402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.669737][T28402] Call Trace: [ 690.669745][T28402] [ 690.669757][T28402] __dump_stack+0x1d/0x30 [ 690.669787][T28402] dump_stack_lvl+0x95/0xd0 [ 690.669814][T28402] dump_stack+0x15/0x1b [ 690.669882][T28402] should_fail_ex+0x25e/0x270 [ 690.669921][T28402] should_failslab+0x8c/0xb0 [ 690.669945][T28402] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 690.670038][T28402] ? skb_clone+0x151/0x1f0 [ 690.670063][T28402] ? skb_clone+0x151/0x1f0 [ 690.670116][T28402] skb_clone+0x151/0x1f0 [ 690.670155][T28402] __netlink_deliver_tap+0x2be/0x510 [ 690.670187][T28402] netlink_unicast+0x654/0x680 [ 690.670215][T28402] netlink_sendmsg+0x5be/0x6f0 [ 690.670256][T28402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.670373][T28402] ____sys_sendmsg+0x532/0x580 [ 690.670403][T28402] ___sys_sendmsg+0x195/0x1e0 [ 690.670517][T28402] __x64_sys_sendmsg+0xd4/0x160 [ 690.670572][T28402] x64_sys_call+0x194c/0x3020 [ 690.670611][T28402] do_syscall_64+0x136/0x3c0 [ 690.670699][T28402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.670727][T28402] RIP: 0033:0x7f1cc9ebe0d9 [ 690.670817][T28402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.670836][T28402] RSP: 002b:00007f1cc88f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.670857][T28402] RAX: ffffffffffffffda RBX: 00007f1cca146090 RCX: 00007f1cc9ebe0d9 [ 690.670874][T28402] RDX: 0000000024040884 RSI: 0000200000000040 RDI: 0000000000000003 [ 690.670891][T28402] RBP: 00007f1cc88f6090 R08: 0000000000000000 R09: 0000000000000000 [ 690.670908][T28402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.670924][T28402] R13: 00007f1cca146128 R14: 00007f1cca146090 R15: 00007ffe7e0ebbf8 [ 690.670993][T28402] [ 692.385803][T28425] loop2: detected capacity change from 0 to 128 [ 693.108921][T28437] loop4: detected capacity change from 0 to 8192 [ 693.154920][T28437] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 693.338092][T28446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28446 comm=syz.0.7437 [ 693.839645][T28477] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7441'. [ 694.188988][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 694.189008][ T28] audit: type=1326 audit(1786127642.176:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 694.466311][ T28] audit: type=1326 audit(1786127642.176:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 694.495845][ T28] audit: type=1326 audit(1786127642.206:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 694.649588][ T28] audit: type=1326 audit(1786127642.206:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 695.238821][T28503] loop6: detected capacity change from 0 to 128 [ 695.251129][ T28] audit: type=1326 audit(1786127642.206:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 695.444089][ T28] audit: type=1326 audit(1786127642.216:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 695.503023][T28501] loop4: detected capacity change from 0 to 8192 [ 695.649548][T28501] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 695.743849][T28499] loop2: detected capacity change from 0 to 128 [ 695.756343][ T28] audit: type=1326 audit(1786127642.216:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 695.781879][ T28] audit: type=1326 audit(1786127642.216:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 695.807453][ T28] audit: type=1326 audit(1786127642.276:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 695.832853][ T28] audit: type=1326 audit(1786127642.326:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28489 comm="syz.0.7445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 696.434251][T28499] syz.2.7447: attempt to access beyond end of device [ 696.434251][T28499] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 696.456192][T28499] syz.2.7447: attempt to access beyond end of device [ 696.456192][T28499] loop2: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 696.469927][T28499] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 696.481389][T28499] syz.2.7447: attempt to access beyond end of device [ 696.481389][T28499] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 697.555221][T28520] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7454'. [ 697.857172][T28523] loop6: detected capacity change from 0 to 512 [ 697.922086][T28523] EXT4-fs: Ignoring removed i_version option [ 698.001219][T28523] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 698.192521][T28523] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 698.222847][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 698.229408][ C1] EXT4-fs (loop6): initial error at time 1786127646: ext4_mb_generate_buddy:1317 [ 698.238583][ C1] EXT4-fs (loop6): last error at time 1786127646: ext4_mb_generate_buddy:1317 [ 698.346002][T28523] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.7456: Failed to acquire dquot type 1 [ 698.466972][T28523] loop6: lost filesystem error report for type 5 error -28 [ 698.471103][T28523] EXT4-fs (loop6): 1 truncate cleaned up [ 698.512399][T28523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.532319][ T5700] Bluetooth: hci0: Frame reassembly failed (-84) [ 698.599300][T28522] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.7456: iget: bad i_size value: 360287970189639690 [ 698.739865][T27761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.888744][T28547] FAULT_INJECTION: forcing a failure. [ 698.888744][T28547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.933619][T28547] CPU: 0 UID: 0 PID: 28547 Comm: syz.2.7464 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 698.933658][T28547] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 698.933675][T28547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.933694][T28547] Call Trace: [ 698.933703][T28547] [ 698.933713][T28547] __dump_stack+0x1d/0x30 [ 698.933745][T28547] dump_stack_lvl+0x95/0xd0 [ 698.933782][T28547] dump_stack+0x15/0x1b [ 698.933806][T28547] should_fail_ex+0x25e/0x270 [ 698.933864][T28547] should_fail+0xb/0x20 [ 698.933899][T28547] should_fail_usercopy+0x1a/0x20 [ 698.933942][T28547] _copy_from_user+0x1c/0xb0 [ 698.934039][T28547] ___sys_sendmsg+0xc1/0x1e0 [ 698.934104][T28547] __x64_sys_sendmsg+0xd4/0x160 [ 698.934143][T28547] x64_sys_call+0x194c/0x3020 [ 698.934175][T28547] do_syscall_64+0x136/0x3c0 [ 698.934217][T28547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.934321][T28547] RIP: 0033:0x7fe38162e0d9 [ 698.934342][T28547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.934383][T28547] RSP: 002b:00007fe380087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.934411][T28547] RAX: ffffffffffffffda RBX: 00007fe3818b5fa0 RCX: 00007fe38162e0d9 [ 698.934430][T28547] RDX: 0000000004004804 RSI: 0000200000000140 RDI: 0000000000000004 [ 698.934446][T28547] RBP: 00007fe380087090 R08: 0000000000000000 R09: 0000000000000000 [ 698.934459][T28547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.934524][T28547] R13: 00007fe3818b6038 R14: 00007fe3818b5fa0 R15: 00007ffcfaed6bf8 [ 698.934551][T28547] [ 699.262398][T28551] loop6: detected capacity change from 0 to 1024 [ 699.323306][T28551] EXT4-fs: Ignoring removed bh option [ 699.600318][T28551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 699.623075][T28551] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.694849][T28583] loop4: detected capacity change from 0 to 256 [ 699.898875][T28583] vfat: Bad value for 'utf8' [ 700.178941][T27761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 700.582987][T20622] Bluetooth: hci0: command 0x1003 tx timeout [ 700.589223][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 701.439983][T28602] loop2: detected capacity change from 0 to 512 [ 701.453894][T28604] FAULT_INJECTION: forcing a failure. [ 701.453894][T28604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.516018][T28604] CPU: 1 UID: 0 PID: 28604 Comm: syz.4.7481 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 701.516125][T28604] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 701.516137][T28604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 701.516155][T28604] Call Trace: [ 701.516163][T28604] [ 701.516173][T28604] __dump_stack+0x1d/0x30 [ 701.516280][T28604] dump_stack_lvl+0x95/0xd0 [ 701.516306][T28604] dump_stack+0x15/0x1b [ 701.516372][T28604] should_fail_ex+0x25e/0x270 [ 701.516412][T28604] should_fail+0xb/0x20 [ 701.516454][T28604] should_fail_usercopy+0x1a/0x20 [ 701.516494][T28604] _copy_to_user+0x20/0xa0 [ 701.516523][T28604] simple_read_from_buffer+0xb5/0x130 [ 701.516594][T28604] proc_fail_nth_read+0x10e/0x150 [ 701.516621][T28604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 701.516651][T28604] vfs_read+0x18e/0x7c0 [ 701.516742][T28604] ? __rcu_read_unlock+0x4e/0x70 [ 701.516774][T28604] ? __fget_files+0x184/0x1c0 [ 701.516808][T28604] ? mutex_lock+0x57/0x90 [ 701.516839][T28604] ksys_read+0xdc/0x1a0 [ 701.516915][T28604] __x64_sys_read+0x40/0x50 [ 701.516949][T28604] x64_sys_call+0x2886/0x3020 [ 701.516981][T28604] do_syscall_64+0x136/0x3c0 [ 701.517100][T28604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.517130][T28604] RIP: 0033:0x7f71ea80e90e [ 701.517152][T28604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 701.517174][T28604] RSP: 002b:00007f71e92a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 701.517351][T28604] RAX: ffffffffffffffda RBX: 00007f71e92a76c0 RCX: 00007f71ea80e90e [ 701.517370][T28604] RDX: 000000000000000f RSI: 00007f71e92a70a0 RDI: 0000000000000004 [ 701.517388][T28604] RBP: 00007f71e92a7090 R08: 0000000000000000 R09: 0000000000000000 [ 701.517423][T28604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.517481][T28604] R13: 00007f71eaad6038 R14: 00007f71eaad5fa0 R15: 00007ffe2138ae28 [ 701.517507][T28604] [ 701.752905][T28602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.767023][T28602] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.906151][T28602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.112473][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 702.112490][ T28] audit: type=1400 audit(1786127650.096:8112): avc: denied { map } for pid=28600 comm="syz.2.7479" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 702.199712][T28629] ipip0: entered allmulticast mode [ 702.311684][T28637] FAULT_INJECTION: forcing a failure. [ 702.311684][T28637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.337184][T28637] CPU: 0 UID: 0 PID: 28637 Comm: syz.2.7490 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 702.337231][T28637] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 702.337243][T28637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.337258][T28637] Call Trace: [ 702.337267][T28637] [ 702.337278][T28637] __dump_stack+0x1d/0x30 [ 702.337384][T28637] dump_stack_lvl+0x95/0xd0 [ 702.337413][T28637] dump_stack+0x15/0x1b [ 702.337437][T28637] should_fail_ex+0x25e/0x270 [ 702.337478][T28637] should_fail+0xb/0x20 [ 702.337610][T28637] should_fail_usercopy+0x1a/0x20 [ 702.337652][T28637] _copy_from_user+0x1c/0xb0 [ 702.337679][T28637] ___sys_sendmsg+0xc1/0x1e0 [ 702.337723][T28637] __x64_sys_sendmsg+0xd4/0x160 [ 702.337778][T28637] x64_sys_call+0x194c/0x3020 [ 702.337810][T28637] do_syscall_64+0x136/0x3c0 [ 702.337848][T28637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.337955][T28637] RIP: 0033:0x7fe38162e0d9 [ 702.338030][T28637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.338055][T28637] RSP: 002b:00007fe380066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.338141][T28637] RAX: ffffffffffffffda RBX: 00007fe3818b6090 RCX: 00007fe38162e0d9 [ 702.338174][T28637] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 702.338290][T28637] RBP: 00007fe380066090 R08: 0000000000000000 R09: 0000000000000000 [ 702.338308][T28637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.338325][T28637] R13: 00007fe3818b6128 R14: 00007fe3818b6090 R15: 00007ffcfaed6bf8 [ 702.338350][T28637] [ 702.587056][T28646] FAULT_INJECTION: forcing a failure. [ 702.587056][T28646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.631224][T28646] CPU: 0 UID: 0 PID: 28646 Comm: syz.1.7495 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 702.631269][T28646] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 702.631281][T28646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.631298][T28646] Call Trace: [ 702.631356][T28646] [ 702.631367][T28646] __dump_stack+0x1d/0x30 [ 702.631397][T28646] dump_stack_lvl+0x95/0xd0 [ 702.631425][T28646] dump_stack+0x15/0x1b [ 702.631452][T28646] should_fail_ex+0x25e/0x270 [ 702.631498][T28646] should_fail+0xb/0x20 [ 702.631586][T28646] should_fail_usercopy+0x1a/0x20 [ 702.631624][T28646] _copy_from_user+0x1c/0xb0 [ 702.631652][T28646] ___sys_sendmsg+0xc1/0x1e0 [ 702.631697][T28646] __x64_sys_sendmsg+0xd4/0x160 [ 702.631821][T28646] x64_sys_call+0x194c/0x3020 [ 702.631877][T28646] do_syscall_64+0x136/0x3c0 [ 702.631917][T28646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.631950][T28646] RIP: 0033:0x7fa0c523e0d9 [ 702.632001][T28646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.632024][T28646] RSP: 002b:00007fa0c3c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.632049][T28646] RAX: ffffffffffffffda RBX: 00007fa0c54c5fa0 RCX: 00007fa0c523e0d9 [ 702.632068][T28646] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 702.632086][T28646] RBP: 00007fa0c3c97090 R08: 0000000000000000 R09: 0000000000000000 [ 702.632103][T28646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.632196][T28646] R13: 00007fa0c54c6038 R14: 00007fa0c54c5fa0 R15: 00007ffe07d69128 [ 702.632223][T28646] [ 703.166527][T28660] sctp: [Deprecated]: syz.2.7498 (pid 28660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.166527][T28660] Use struct sctp_sack_info instead [ 703.291678][T28660] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.696455][T28670] FAULT_INJECTION: forcing a failure. [ 704.696455][T28670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.791834][T28670] CPU: 1 UID: 0 PID: 28670 Comm: syz.4.7501 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 704.791889][T28670] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 704.791900][T28670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.791917][T28670] Call Trace: [ 704.791989][T28670] [ 704.791996][T28670] __dump_stack+0x1d/0x30 [ 704.792026][T28670] dump_stack_lvl+0x95/0xd0 [ 704.792054][T28670] dump_stack+0x15/0x1b [ 704.792101][T28670] should_fail_ex+0x25e/0x270 [ 704.792194][T28670] should_fail+0xb/0x20 [ 704.792223][T28670] should_fail_usercopy+0x1a/0x20 [ 704.792255][T28670] _copy_from_user+0x1c/0xb0 [ 704.792337][T28670] ___sys_sendmsg+0xc1/0x1e0 [ 704.792357][T28670] ? terminate_walk+0x1d5/0x200 [ 704.792418][T28670] __sys_sendmmsg+0x185/0x320 [ 704.792457][T28670] __x64_sys_sendmmsg+0x57/0x70 [ 704.792495][T28670] x64_sys_call+0x27aa/0x3020 [ 704.792528][T28670] do_syscall_64+0x136/0x3c0 [ 704.792560][T28670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.792581][T28670] RIP: 0033:0x7f71ea84e0d9 [ 704.792651][T28670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.792672][T28670] RSP: 002b:00007f71e92a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 704.792693][T28670] RAX: ffffffffffffffda RBX: 00007f71eaad5fa0 RCX: 00007f71ea84e0d9 [ 704.792712][T28670] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 704.792730][T28670] RBP: 00007f71e92a7090 R08: 0000000000000000 R09: 0000000000000000 [ 704.792752][T28670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.792829][T28670] R13: 00007f71eaad6038 R14: 00007f71eaad5fa0 R15: 00007ffe2138ae28 [ 704.792857][T28670] [ 705.084159][T28669] loop6: detected capacity change from 0 to 512 [ 705.307194][T28669] EXT4-fs: Ignoring removed i_version option [ 705.323386][T28669] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 705.578823][T28686] FAULT_INJECTION: forcing a failure. [ 705.578823][T28686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.757926][T28686] CPU: 1 UID: 0 PID: 28686 Comm: syz.1.7507 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 705.757969][T28686] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 705.757981][T28686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.757998][T28686] Call Trace: [ 705.758032][T28686] [ 705.758043][T28686] __dump_stack+0x1d/0x30 [ 705.758072][T28686] dump_stack_lvl+0x95/0xd0 [ 705.758098][T28686] dump_stack+0x15/0x1b [ 705.758192][T28686] should_fail_ex+0x25e/0x270 [ 705.758227][T28686] should_fail+0xb/0x20 [ 705.758287][T28686] should_fail_usercopy+0x1a/0x20 [ 705.758326][T28686] _copy_from_user+0x1c/0xb0 [ 705.758354][T28686] ___sys_sendmsg+0xc1/0x1e0 [ 705.758393][T28686] __x64_sys_sendmsg+0xd4/0x160 [ 705.758420][T28686] x64_sys_call+0x194c/0x3020 [ 705.758451][T28686] do_syscall_64+0x136/0x3c0 [ 705.758491][T28686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.758576][T28686] RIP: 0033:0x7fa0c523e0d9 [ 705.758597][T28686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.758620][T28686] RSP: 002b:00007fa0c3c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.758640][T28686] RAX: ffffffffffffffda RBX: 00007fa0c54c5fa0 RCX: 00007fa0c523e0d9 [ 705.758734][T28686] RDX: 0000000004008044 RSI: 00002000000050c0 RDI: 0000000000000004 [ 705.758747][T28686] RBP: 00007fa0c3c97090 R08: 0000000000000000 R09: 0000000000000000 [ 705.758760][T28686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.758783][T28686] R13: 00007fa0c54c6038 R14: 00007fa0c54c5fa0 R15: 00007ffe07d69128 [ 705.758804][T28686] [ 706.033231][T28669] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 706.062803][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 706.069297][ C1] EXT4-fs (loop6): initial error at time 1786127654: ext4_mb_generate_buddy:1317 [ 706.078483][ C1] EXT4-fs (loop6): last error at time 1786127654: ext4_mb_generate_buddy:1317 [ 706.407080][T28669] Quota error (device loop6): write_blk: dquota write failed [ 706.515276][T28669] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 706.600652][T28669] Quota error (device loop6): write_blk: dquota write failed [ 706.812837][T28669] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 706.998124][T28669] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.7500: Failed to acquire dquot type 1 [ 707.298235][T28669] loop6: lost filesystem error report for type 5 error -28 [ 707.524907][T28706] loop2: detected capacity change from 0 to 1024 [ 707.592469][T28669] EXT4-fs (loop6): 1 truncate cleaned up [ 707.751192][T28669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.760052][T28706] EXT4-fs: Ignoring removed bh option [ 707.799208][T27761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.827893][T28716] FAULT_INJECTION: forcing a failure. [ 707.827893][T28716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.841212][T28716] CPU: 0 UID: 0 PID: 28716 Comm: syz.4.7517 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 707.841257][T28716] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 707.841269][T28716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.841287][T28716] Call Trace: [ 707.841321][T28716] [ 707.841333][T28716] __dump_stack+0x1d/0x30 [ 707.841426][T28716] dump_stack_lvl+0x95/0xd0 [ 707.841487][T28716] dump_stack+0x15/0x1b [ 707.841509][T28716] should_fail_ex+0x25e/0x270 [ 707.841549][T28716] should_fail+0xb/0x20 [ 707.841582][T28716] should_fail_usercopy+0x1a/0x20 [ 707.841649][T28716] _copy_from_user+0x1c/0xb0 [ 707.841677][T28716] inet6_ioctl+0xf1/0x190 [ 707.841715][T28716] sock_do_ioctl+0x73/0x230 [ 707.841784][T28716] sock_ioctl+0x439/0x610 [ 707.841882][T28716] ? mutex_lock+0x57/0x90 [ 707.841915][T28716] ? __pfx_sock_ioctl+0x10/0x10 [ 707.841945][T28716] __se_sys_ioctl+0xce/0x140 [ 707.841973][T28716] __x64_sys_ioctl+0x43/0x50 [ 707.841999][T28716] x64_sys_call+0x1563/0x3020 [ 707.842090][T28716] do_syscall_64+0x136/0x3c0 [ 707.842190][T28716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.842220][T28716] RIP: 0033:0x7f71ea84e0d9 [ 707.842241][T28716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.842272][T28716] RSP: 002b:00007f71e92a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.842300][T28716] RAX: ffffffffffffffda RBX: 00007f71eaad5fa0 RCX: 00007f71ea84e0d9 [ 707.842381][T28716] RDX: 00002000000002c0 RSI: 000000000000890b RDI: 0000000000000003 [ 707.842399][T28716] RBP: 00007f71e92a7090 R08: 0000000000000000 R09: 0000000000000000 [ 707.842417][T28716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.842440][T28716] R13: 00007f71eaad6038 R14: 00007f71eaad5fa0 R15: 00007ffe2138ae28 [ 707.842467][T28716] [ 707.844092][T28712] FAULT_INJECTION: forcing a failure. [ 707.844092][T28712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.124970][T28706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 708.210369][T28706] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.270237][T28712] CPU: 0 UID: 0 PID: 28712 Comm: syz.1.7514 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 708.270286][T28712] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 708.270298][T28712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.270321][T28712] Call Trace: [ 708.270327][T28712] [ 708.270335][T28712] __dump_stack+0x1d/0x30 [ 708.270363][T28712] dump_stack_lvl+0x95/0xd0 [ 708.270392][T28712] dump_stack+0x15/0x1b [ 708.270504][T28712] should_fail_ex+0x25e/0x270 [ 708.270557][T28712] should_fail_alloc_page+0xf2/0x100 [ 708.270591][T28712] __alloc_frozen_pages_noprof+0x108/0x350 [ 708.270647][T28712] alloc_pages_mpol+0xa9/0x1d0 [ 708.270683][T28712] folio_alloc_mpol_noprof+0x39/0x80 [ 708.270776][T28712] shmem_get_folio_gfp+0x3ff/0xd90 [ 708.270820][T28712] shmem_fallocate+0x5ef/0x8f0 [ 708.270869][T28712] vfs_fallocate+0x3ac/0x400 [ 708.270897][T28712] __x64_sys_fallocate+0x7a/0xd0 [ 708.270947][T28712] x64_sys_call+0x298e/0x3020 [ 708.270980][T28712] do_syscall_64+0x136/0x3c0 [ 708.271020][T28712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.271089][T28712] RIP: 0033:0x7fa0c523e0d9 [ 708.271108][T28712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.271127][T28712] RSP: 002b:00007fa0c3c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 708.271146][T28712] RAX: ffffffffffffffda RBX: 00007fa0c54c5fa0 RCX: 00007fa0c523e0d9 [ 708.271160][T28712] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 708.271172][T28712] RBP: 00007fa0c52d5024 R08: 0000000000000000 R09: 0000000000000000 [ 708.271260][T28712] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000 [ 708.271277][T28712] R13: 00007fa0c54c6038 R14: 00007fa0c54c5fa0 R15: 00007ffe07d69128 [ 708.271303][T28712] [ 708.497197][T28729] netlink: 194236 bytes leftover after parsing attributes in process `syz.6.7520'. [ 708.631682][T28729] netlink: zone id is out of range [ 708.637556][T24837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 708.673979][T28729] netlink: zone id is out of range [ 708.705153][T28729] netlink: get zone limit has 8 unknown bytes [ 709.107792][ T28] audit: type=1326 audit(1786127657.026:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 709.228604][T28740] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7525'. [ 709.390668][T28745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7524'. [ 709.422293][ T28] audit: type=1326 audit(1786127657.026:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 709.943270][ T28] audit: type=1326 audit(1786127657.026:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 709.943775][T28748] loop4: detected capacity change from 0 to 512 [ 710.063727][T28748] EXT4-fs: Ignoring removed i_version option [ 710.118129][ T28] audit: type=1326 audit(1786127657.036:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 710.212282][T28752] FAULT_INJECTION: forcing a failure. [ 710.212282][T28752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.351986][T28752] CPU: 1 UID: 0 PID: 28752 Comm: syz.6.7527 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 710.352032][T28752] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 710.352044][T28752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.352061][T28752] Call Trace: [ 710.352071][T28752] [ 710.352081][T28752] __dump_stack+0x1d/0x30 [ 710.352193][T28752] dump_stack_lvl+0x95/0xd0 [ 710.352217][T28752] dump_stack+0x15/0x1b [ 710.352238][T28752] should_fail_ex+0x25e/0x270 [ 710.352303][T28752] should_fail+0xb/0x20 [ 710.352333][T28752] should_fail_usercopy+0x1a/0x20 [ 710.352421][T28752] _copy_from_user+0x1c/0xb0 [ 710.352483][T28752] ___sys_sendmsg+0xc1/0x1e0 [ 710.352623][T28752] ? terminate_walk+0x1d5/0x200 [ 710.352701][T28752] __sys_sendmmsg+0x185/0x320 [ 710.352739][T28752] __x64_sys_sendmmsg+0x57/0x70 [ 710.352846][T28752] x64_sys_call+0x27aa/0x3020 [ 710.352899][T28752] do_syscall_64+0x136/0x3c0 [ 710.353060][T28752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.353105][T28752] RIP: 0033:0x7f1cc9ebe0d9 [ 710.353121][T28752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.353176][T28752] RSP: 002b:00007f1cc8917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 710.353197][T28752] RAX: ffffffffffffffda RBX: 00007f1cca145fa0 RCX: 00007f1cc9ebe0d9 [ 710.353212][T28752] RDX: 0000000000000001 RSI: 00002000000196c0 RDI: 0000000000000004 [ 710.353231][T28752] RBP: 00007f1cc8917090 R08: 0000000000000000 R09: 0000000000000000 [ 710.353248][T28752] R10: 000000000400c010 R11: 0000000000000246 R12: 0000000000000001 [ 710.353265][T28752] R13: 00007f1cca146038 R14: 00007f1cca145fa0 R15: 00007ffe7e0ebbf8 [ 710.353292][T28752] [ 710.568720][ T28] audit: type=1326 audit(1786127657.046:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 710.710186][ T28] audit: type=1326 audit(1786127657.046:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 710.822798][T28748] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 710.860296][ T28] audit: type=1326 audit(1786127657.046:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 710.992849][ T28] audit: type=1326 audit(1786127657.046:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 711.104408][ T28] audit: type=1326 audit(1786127657.046:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 711.288551][T28756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7530'. [ 711.298023][ T28] audit: type=1326 audit(1786127657.176:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28739 comm="syz.6.7525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc9ebe0d9 code=0x7ffc0000 [ 711.579915][T28748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 711.594352][T28748] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7526: Failed to acquire dquot type 1 [ 711.605702][T28748] loop4: lost filesystem error report for type 5 error -28 [ 711.647586][T28748] EXT4-fs (loop4): 1 truncate cleaned up [ 711.661019][T28748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.824490][T28748] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.7526: iget: bad i_size value: 360287970189639690 [ 711.845361][T28771] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7534'. [ 712.171514][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.446138][T28784] loop4: detected capacity change from 0 to 512 [ 712.463159][T28784] EXT4-fs: Ignoring removed i_version option [ 712.476154][T28784] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 712.515952][T28784] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 712.530864][T28784] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7537: Failed to acquire dquot type 1 [ 712.536154][T28793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7541'. [ 712.542988][T28784] loop4: lost filesystem error report for type 5 error -28 [ 712.572944][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 712.590115][ C1] EXT4-fs (loop4): initial error at time 1786127660: ext4_mb_generate_buddy:1317 [ 712.600853][ C1] EXT4-fs (loop4): last error at time 1786127660: ext4_acquire_dquot:7041 [ 712.642746][T28784] EXT4-fs (loop4): 1 truncate cleaned up [ 712.652907][T28784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.700436][T28784] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.7537: iget: bad i_size value: 360287970189639690 [ 712.980000][T28796] lo speed is unknown, defaulting to 1000 [ 713.293499][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.379763][T28814] loop6: detected capacity change from 0 to 1024 [ 713.431943][T28814] EXT4-fs: Ignoring removed orlov option [ 713.562697][T28814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.902475][T27761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.136727][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 714.136746][ T28] audit: type=1326 audit(1786127662.126:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 714.151064][T28843] loop6: detected capacity change from 0 to 1024 [ 714.231707][ T28] audit: type=1326 audit(1786127662.176:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3815ee90e code=0x7ffc0000 [ 714.294411][ T28] audit: type=1326 audit(1786127662.176:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 714.359886][T28843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.405301][ T28] audit: type=1326 audit(1786127662.186:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 714.462693][ T28] audit: type=1326 audit(1786127662.186:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 714.546164][ T28] audit: type=1326 audit(1786127662.186:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 714.587005][T28852] FAULT_INJECTION: forcing a failure. [ 714.587005][T28852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.590131][T27761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.632981][ T28] audit: type=1326 audit(1786127662.186:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 714.644199][T28852] CPU: 0 UID: 0 PID: 28852 Comm: syz.1.7559 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 714.644323][T28852] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 714.644367][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.644422][T28852] Call Trace: [ 714.644458][T28852] [ 714.644488][T28852] __dump_stack+0x1d/0x30 [ 714.644562][T28852] dump_stack_lvl+0x95/0xd0 [ 714.644640][T28852] dump_stack+0x15/0x1b [ 714.644713][T28852] should_fail_ex+0x25e/0x270 [ 714.644810][T28852] should_fail+0xb/0x20 [ 714.644892][T28852] should_fail_usercopy+0x1a/0x20 [ 714.645026][T28852] _copy_from_user+0x1c/0xb0 [ 714.645127][T28852] __tun_chr_ioctl+0x144/0x14e0 [ 714.645422][T28852] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 714.645522][T28852] tun_chr_ioctl+0x27/0x40 [ 714.645611][T28852] __se_sys_ioctl+0xce/0x140 [ 714.645654][T28852] __x64_sys_ioctl+0x43/0x50 [ 714.645816][T28852] x64_sys_call+0x1563/0x3020 [ 714.645908][T28852] do_syscall_64+0x136/0x3c0 [ 714.646017][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.646140][T28852] RIP: 0033:0x7fa0c523e0d9 [ 714.646192][T28852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.646252][T28852] RSP: 002b:00007fa0c3c97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.646315][T28852] RAX: ffffffffffffffda RBX: 00007fa0c54c5fa0 RCX: 00007fa0c523e0d9 [ 714.646375][T28852] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 714.646486][T28852] RBP: 00007fa0c3c97090 R08: 0000000000000000 R09: 0000000000000000 [ 714.646527][T28852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.646572][T28852] R13: 00007fa0c54c6038 R14: 00007fa0c54c5fa0 R15: 00007ffe07d69128 [ 714.646641][T28852] [ 715.992779][ T28] audit: type=1326 audit(1786127662.196:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 718.273179][ T28] audit: type=1326 audit(1786127662.196:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 718.395523][ T28] audit: type=1326 audit(1786127662.196:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28838 comm="syz.2.7556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe38162e0d9 code=0x7ffc0000 [ 718.909328][T28878] tmpfs: Bad value for 'mpol' [ 719.191650][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 719.191669][ T28] audit: type=1326 audit(1786127667.176:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.0.7569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 719.223989][T28888] loop4: detected capacity change from 0 to 512 [ 719.248832][T28888] EXT4-fs: Ignoring removed i_version option [ 719.281965][T28888] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 719.327011][ T28] audit: type=1326 audit(1786127667.176:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.0.7569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 719.354954][T28888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 719.369564][T28888] Quota error (device loop4): write_blk: dquota write failed [ 719.376978][T28888] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 719.386151][T28888] Quota error (device loop4): write_blk: dquota write failed [ 719.388844][ T28] audit: type=1326 audit(1786127667.176:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.0.7569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 719.393655][T28888] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 719.393712][T28888] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7564: Failed to acquire dquot type 1 [ 719.494582][T28888] loop4: lost filesystem error report for type 5 error -28 [ 719.495833][T28888] EXT4-fs (loop4): 1 truncate cleaned up [ 719.510130][T28888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.623312][T28888] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.7564: iget: bad i_size value: 360287970189639690 [ 719.672847][T28906] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7573'. [ 720.000975][ T28] audit: type=1326 audit(1786127667.176:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.0.7569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 721.022777][ T28] audit: type=1326 audit(1786127667.176:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.0.7569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 721.058908][T23390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.097574][ T28] audit: type=1326 audit(1786127667.186:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.0.7569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff4f135e0d9 code=0x7ffc0000 [ 721.446967][T28922] veth5: entered promiscuous mode [ 722.052879][ C1] ================================================================== [ 722.061160][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 722.068433][ C1] [ 722.070805][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 722.078903][ C1] wq_worker_tick+0x64/0x240 [ 722.083545][ C1] sched_tick+0xbc/0x1f0 [ 722.087863][ C1] update_process_times+0x15e/0x190 [ 722.093105][ C1] tick_nohz_handler+0x227/0x380 [ 722.098086][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 722.103335][ C1] hrtimer_interrupt+0x257/0x810 [ 722.108322][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 722.114303][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 722.120078][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 722.126116][ C1] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 722.131917][ C1] hrtimer_run_softirq+0x270/0x290 [ 722.137184][ C1] handle_softirqs+0xb9/0x280 [ 722.141902][ C1] do_softirq+0x45/0x60 [ 722.146123][ C1] __local_bh_enable_ip+0x70/0x80 [ 722.151210][ C1] __alloc_skb+0x6b1/0x6f0 [ 722.155782][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 722.161621][ C1] process_scheduled_works+0x4d4/0x9a0 [ 722.167142][ C1] worker_thread+0x569/0x750 [ 722.171777][ C1] kthread+0x221/0x270 [ 722.175883][ C1] ret_from_fork+0x146/0x330 [ 722.180795][ C1] ret_from_fork_asm+0x1a/0x30 [ 722.185610][ C1] [ 722.188017][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 722.196135][ C1] wq_worker_tick+0x64/0x240 [ 722.200786][ C1] sched_tick+0xbc/0x1f0 [ 722.205080][ C1] update_process_times+0x15e/0x190 [ 722.210338][ C1] tick_nohz_handler+0x227/0x380 [ 722.215342][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 722.220584][ C1] hrtimer_interrupt+0x257/0x810 [ 722.225557][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 722.231495][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 722.237292][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 722.243347][ C1] ktime_get+0xa4/0x240 [ 722.247721][ C1] gate_timer_func+0xda/0x1d0 [ 722.252807][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 722.258056][ C1] hrtimer_run_softirq+0xde/0x290 [ 722.263305][ C1] handle_softirqs+0xb9/0x280 [ 722.268402][ C1] do_softirq+0x45/0x60 [ 722.272599][ C1] __local_bh_enable_ip+0x70/0x80 [ 722.277659][ C1] __alloc_skb+0x6b1/0x6f0 [ 722.282330][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 722.288117][ C1] process_scheduled_works+0x4d4/0x9a0 [ 722.293648][ C1] worker_thread+0x569/0x750 [ 722.298281][ C1] kthread+0x221/0x270 [ 722.302493][ C1] ret_from_fork+0x146/0x330 [ 722.307226][ C1] ret_from_fork_asm+0x1a/0x30 [ 722.312486][ C1] [ 722.314840][ C1] value changed: 0x000000000124f800 -> 0x0000000001251f10 [ 722.321986][ C1] [ 722.324445][ C1] Reported by Kernel Concurrency Sanitizer on: [ 722.330729][ C1] CPU: 1 UID: 0 PID: 27954 Comm: kworker/u8:1 Tainted: G S W syzkaller #0 PREEMPT(lazy) [ 722.341889][ C1] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 722.347659][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.357749][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 722.364564][ C1] ==================================================================