last executing test programs: 14m18.755785811s ago: executing program 32 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 13m57.674080627s ago: executing program 33 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x80) 13m22.474504412s ago: executing program 34 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@i_version}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x292, &(0x7f0000000d80)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x81, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) unshare(0x26020480) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 13m7.374182175s ago: executing program 35 (id=1292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12m59.64597798s ago: executing program 36 (id=1310): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe(0x0) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x220, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x3, 0xd0}, 0x0, &(0x7f0000000040), 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = getpid() process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0xb72}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) 12m45.620524347s ago: executing program 37 (id=1349): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000d1a7000100feffffff000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m58.246030394s ago: executing program 38 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@i_version}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x292, &(0x7f0000000d80)="$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") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x81, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 11m55.604064878s ago: executing program 39 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000340)={0x8, 0x9b6, 0x8, 0x40, 0xce7, 0x6}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000000)={0x5, 0x43df, 0xdd80, 0x100, 0x2, 0x4, 0x6}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) tkill(0x0, 0xb) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @void}, 0x10) 5m16.203533075s ago: executing program 40 (id=4475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000400)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000300113b8b50f99badea6b2cbb3fd95da50918369cbd0", 0x32) 2m14.933927557s ago: executing program 41 (id=5194): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x2010, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x18, 0x0, 0x3, 0x3, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x7}, [@generic="16"]}, 0x18}, 0x1, 0x0, 0x0, 0x24004400}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='!'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4008744b, &(0x7f0000000180)) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) fallocate(r1, 0x8, 0x2d, 0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x1, @mcast1, 0xfffffffa}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x74) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) 2m6.44995071s ago: executing program 6 (id=5265): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x40) flistxattr(r4, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x61d3, 0x40000, 0x2, 0x228}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r3], 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="74836a608a879c0f4933e2980e3c27227b44c5f674d374f685a7252ac48df7cbdb6cb4b24ef98291b83a501c8237790fe9dd1ab86749497a19e5823d8a30793254456ddc653c653fa808d834a5eb7d4d59ffb92952f1066a00bce07815b7b6d48a1722932d00dbdee09c36353b3109cdf5e573402fe43eed02728bedac7695eecc6592553d856ef5c81f3ac1aae42258794c093e644c10232030162346daaed7eb5035eeedc50977abe7153d2a693ed4a3808361052bbbd83cdd05d314de0d22a343bc438fb7d6cf3e96986d06662f1005a21a1a92a75cc0b9e59032f9cdeccd2d0ce9961ac063991b8adade53529e42a66e71cfe2898c62fea7a35048348ed3c1558f7dccf1d57ec1e04dce785f2b7d53a725bee3285c34c39c4bcfc7e78de0e2056ee113473335dff60475785116916d1f140a093a98912ab97185763da02e09aff786dabac1ecb508f44c729831afccd8127a432236ca799e232e24d6a432401121373560729431c07d280d5ddca29f8b090ba9fb342c0472dd41254696804d890335594dc908892b5b4141817d074e3d18f60fcc88a09d01167ebc34abe1fa88ad479b255fed991086555f6715611b75281c919e08295d7dce5a94354de0d3f9ab6a0ca20a76060b23caf7c18bf50d5cc1035f292394bf1be8640588918f692827dfdc1e4095c2b468a80b722b69e350e66c88c222bf1c357b3867d162e5e1d90777223b7dac6b9bd8fca2ee2019dbe35f7eb9f4562dd0d761adf16f1c2659aea0fe284602a4c188fae98d28f6bbe8c9928ecaa3ab282e4eb4480f8d26b1e38df368d808dc037350d13fd898638c1ffb13005709a6340fa4dec43307c7a53236399d02e03280fe5b37326b4bf920770607950aa957f73b56eb42b50428b80f533d57042b8cec67548f60789e557f5e68426b7ea3c7e2ed0c68e571bbb4d14dbb1a7e32750c30a97535bc6a398204e0b4b20038a2905fa97a899c0c153b9f783e08561d6d7ce9c593b20a8c9d0342c64639db4e4a900de891f9cf418caf585a9fb1fe88cd1febb3fadc934827e10adc73668c2bec4161c6d9d8af83b94916ba183fd4319139cea73173a5a2a5a50665643a0ca3de14b989706eecdbb010c45c9826ef368fc494c468446813208021c973c933a58507bc8a51baf3b77af624c8d15fad4e2d3cc7b2092c089baed0cd1f545cd6f1646bdaab17a11a74666c24e2af78dff22c8767155c7257235e851a4d57f51cc65e14f51c4a2afe1af92cdc25e5e71bdd3dde36ed40cb6393cc9696d7235e47929dbdb6a5d9d9059e19cd5e2e55ee1c25408f7deae259db7da26b81aa60365da1694085cfcda459930e6cc31501ece761aa36c12027a297f9e8b7da2b8149b251519a805ba3d5d850221e50ccc97b93281753193943d23b50be93fe957395c0ca116ebcedca7998c7f408dc938aba02b18ad9da724c2e3716981a658ce235d1723aba974c768c07dbef8678ff11cf46afae541ac5ac3a65ae67a51d201d9c8619592484afadcd4af0a4b0ea4af052a551e61bca70f2fac665e2e4d974ae3ee76f71ed58fc2e4194d9fd94b1a627cc7e116f11d67683144308947f4707422d31d4485a573e760963c74085dec9ed551d63c802d57e1633b82711b514a5b873b2be89660d84a188dbf1b97d7a23cb8b364f6ea031077718b19d01a6ed5942564525cb749e21c9a68ce245489db7e4fd383ed3e93ee006ff10a58c2fe3c91d97f790b8a271180c69589c21a0c72e68d84eddde3e01d5eb034e77a5a27cb80e34fa36f0fa4125a22944f60590e1b9b0f1c836d64217322286e3d24af8e991458af3a542ea8354fbe83a4d513893a39539523eef23802bff8019a5de324cbf39ec1e913fbb3cacbf7c7cf15ebfffbdd11c24543845d87e8b401671d2ae8d5db07d7e929248e1a348a17d80aff99ef1b3836f79a93f958a70d4e33a7f04fa15e1336f5c26289b46e470eff41958dce02e3163c199dd1ec083df1c8447624e529320fba36b848d27390aeb331d357de60465c2e0fb501916b1aa238ac1869dce80a17d9bba484c48a8928c170925889cd2224872ad328afb9321c9eb676096f5ad01c39652c906880b04190ad16855c9b03875356fef8fb2e470fc2432b878ea8daf6beb9b94e4dbaef0a1674403d1d2a72b593ac56de5237e7da7e662863b41f00e9332775c11e4d67c19f23e0d0eea7d2cec9ddb030baaf793e223052c6315ed478aa4d8707f2400d7d03bc32fff163acc1536e459f4807efacd3a855c55725392e635c3f432a2f724080a7aae411718b32f096c6dba2ed280b8169b1486812685f6aa34418b0b1777afd3c0f8030be528e31db140ee48814a1f56993678f97cb54abde61d8dcc8ecdcfc13531ac3fa53972e2be36f47f22ff6fce17f6a92c24ecd533ce544d47584683211e732dc49bffb3ecac90becf5dec9a2197512dcaca04f791cc04710105f7e80a704629834bca658c9928471cbcc32b2abfe50e0d3d63f7fe9b7c74313abf62b6a2addb4476c3ffd98ccc9c5bf3608da20d315d1428ed5025af648eafc90b5fec2fff3e1f3e284c661bb53c17e3e722a62122d62b8274bda4404d1b17144f2f04c3cc5bccee3b2568e2da456a284e4f76de40e70d4a34020530257e96a9c2f1d2ca661605641bc9bd78da275529dbf65203633f86a20b5971f3efc1b5160dcd0a4f2eb81bba79c3e6ceb46c8b8b301d8e050cb73df803b922d9edecadc4fd3c7d1598f44a16a0098202be9c180ca53fa26fc28f5dbd23cb052a9fda3d219f7f1fc8b5e85db094657f7263dfbe1b3c80022518890ff80b5bd91547d7a3404ce0b37974315cfc2dc6906eebc5f5e0227c2f6cbf98bda4466dd11026508026a8f7485f3ccb1273ff43f24fb49325db5e4a243d3f7c5ce6f35eb922d81544ed807897c896ce2f36705ffd58396022d093f6c74cc5f5eb2102bf9f2f213e471cfdf1f30f76ec8764f7a92d94cf00ff88107462bc3cb6e87c5926c0fdc6b5f45bcab6937ab0128f39a46fc8721548fd1451a9535905a70613f74d401989bffed243cd3560114ebcb38ea93474fe9ab948f930d236b244a562451d9c564dd86d635c6ce0bd0522f10a0d399e7bcd6e6ba89138c2da6b0b47dcfdd6cc773561943d15afb950b1d9a710ec2c3772e4ceacbddab61a344e360ee2a63e99c0fe6ef635cb0f40fa29246e37db290c1a038f59ee5fa379eaf26ead1146eaacaefbb753c3b0e3b16118ff3df617292c0705a6727f96770e3f0869effe493311469dfceb6c5f7f68976a04175b99df0b4ae0a8723188a210e9f66098332e022b02ca3a651ab99d660d764940b6868e59c7773efb0b4827b0d91d8429ea5bf545aa08013abfeac6160f97802cab7b32b38d9922a954e96cc4c5d7c43a7c89ca1e2d00c51208733dd8539724e62f5f5e69f556a1a3e5f4e9ee57363dd0317132e9829015ae0878fdf49e917f32e088ad00779cb801bcb2d34b21a5126d260c126ac3fa64182e9a640228f1707063a5bb4ea79f8b8b703367b31d8f387cb2695d1f27349ae5ba8ae40649ec6af188a68c0c4e2c8af927535a154db2661c71f0fd02fa07b154572addb912df3c844e1bc9ed6b4b14c4f802525374f075bc61c11c53cce143c812ffb53fc32766198464c8a574255b1727ec61a5812079fc23b773f4532284e9bf113c1b841b525dc6f9be7017c7bf1b8896e90925a633ee8724579f7f18f765a4029186eda52ff8292e4d44fa3d2edc99090e03568bf466200a35548ca3de102acd80355a9407fbabdb8722588d2396a5ff3b899e488346e9eeff8e8b349dbea0d6e8f86543bea1c8db9ec7b882909ebf7cdab930547afb8b0748abc72c9013cb72464dfb33354b1295d584800cf87869d7edbd07d0f88468b1e6d5d8679d5dce3d68c7c46b4cec0a5b9ed21ec1ede3deeb5c1bb98d92cd36a643e35a279aed569334181a70a37029ab8e79d0697359e58fecb7241e26188125e84123cde051d9a8bca2044e9786a88ef88e379a8e00a2c91ae98efa3649c0c2fe88a4e31c91e3372d5ccea58eb1d74cc48ef8e37b7248628b270df2c864a4b1a66d6ccf1b83cb6c484a2224e42905b0505fa5268a77fb1b10d08f57952e415c3f94e2f6299a3b1972a66e5aa34f000016803534160f99ccdd6a2cbb2c3b29ad078aec93f33d4f436549ffe88939cc7747c605c930a906c787c115ea6da9fcbd2148cfbabd4f88", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r6}, 0x38) 2m3.235681687s ago: executing program 6 (id=5277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = getpid() r2 = syz_open_procfs$userns(r1, &(0x7f0000000200)) setns(r2, 0x80) 2m2.638646342s ago: executing program 6 (id=5279): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) 2m2.494099716s ago: executing program 6 (id=5281): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @ptr]}, {0x0, [0x0, 0x61, 0x3e]}}, &(0x7f0000000100)=""/4084, 0x3d, 0xff4, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007", @ANYRES32, @ANYBLOB="00000000e000d1a7000100feffffff000000000008"], 0x38}}, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m2.28964232s ago: executing program 6 (id=5282): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000340)=[{0x0}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) 2m1.962047298s ago: executing program 42 (id=5285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) shutdown(r0, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m1.138128158s ago: executing program 6 (id=5289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) setns(r1, 0x80) 2m0.63396144s ago: executing program 43 (id=5289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) setns(r1, 0x80) 1m40.269985509s ago: executing program 5 (id=5357): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1m36.540475828s ago: executing program 5 (id=5369): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x40) flistxattr(r4, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x61d3, 0x40000, 0x2, 0x228}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r3], 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r6}, 0x38) 1m35.63413362s ago: executing program 5 (id=5375): socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000003c0)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00\xfa\x85\x81~\x8dlgn\xf6m\x7fQ\x82R\x00\xf7\xe4]\x83\xe6\xd6\xe1@\xcfj\x02\xf5\x1a\xf0\xacZf\xff\xec\x00\x8c]\xe1\xb1n\xa5A\xe4@\xd35\x89\x7f\xb5\xe8q\xe8\x9c\xe86\xf4\xe0\x1e\x82\xba\xfe/P+\v9\xc5\x84\xe25d\xceN\x03\xb7\xa0\x8a\xfd\xa9\x03o\x1d\x18\xe6\xdc\x97~s\x1eY\xbe\xae58\xad\xdbs\xcb}\xb0Z\x19\xb2\x8dD\xe8\xef\xb28\xdb5\xfc\x86\xfa\x91\x8aj\xd1\x90\xd1hk\xa5\xf8-\xd8\x82\xc4\x01h\xc1v\xf9\xb8\xb5\xd8\r\xddI\x9b\fk\xb11\x92\xb1\" \xc9\xe2{s\xd9R\x85\xae\xee\x98>)\xdd\xd4\xdb\"H\x83\xcag\x99Tk\x87\x05\x80\xd9\x8cZ\xdaj\xed\x1e\xcaa\x0f\x93t\b\xbc\x1c\xf2\xa6\xa9K\x8ai\xb62\x86\xaf=\xcb\xa3\x83B|I\x15\xb2\x9c\xbf\a\xd8\r\x0e!\xbf\xc5\xa0X\x1f\xcc;m\xd3\xb1\x1bQ\xbe.\xf5\x1e\xc5\xb3s\xd9\xb6p\x9f\x03', 0x5) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x20004000) 1m35.152384772s ago: executing program 5 (id=5380): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) r5 = semget(0x1, 0x4, 0x39c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x3140040, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\x00', 0x0, 0x808010, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) semop(r5, &(0x7f0000000000)=[{0x1, 0x8003, 0x1000}, {0x3, 0xf800, 0x1800}], 0x2) semop(r5, &(0x7f0000000040)=[{0x2, 0xbbdd}], 0x1) unshare(0x8000000) r7 = semget$private(0x0, 0x4, 0x421) semtimedop(r7, &(0x7f00000002c0)=[{0x3, 0x4, 0x1800}, {0x0, 0x25b0, 0x1000}], 0x2aaaac3a, 0x0) unshare(0x2c010880) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000300)) 1m34.789936461s ago: executing program 5 (id=5383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 1m32.963155714s ago: executing program 5 (id=5395): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xffff46ff}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b01", 0x7a}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x3, 0x1, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdb5f250c001100180001801400020076657468305f746f5f626f6e64000000180003800400010010000380"], 0x44}}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async) read(r4, &(0x7f0000001400)=""/4076, 0xfffffeea) capset(&(0x7f0000000000)={0x20080522}, 0x0) (async) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) (async) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) (async) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250d010000080005000600000055e85fe74fcc3dec74ebe8400058a41a5c279d5e90075744fabe92f9e9aba6f1174dee1ab9d229f8b91f7451c114127b98eaf9caabf7d2c50dfbf3ebdc894a6a8f4af46579bc5ec6362ed7f67607aba4d386e5a27e7d48f5073361666d36dda5040b9084d75f6a6e80"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) (async) mlockall(0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m32.962886434s ago: executing program 44 (id=5395): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xffff46ff}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b01", 0x7a}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x3, 0x1, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdb5f250c001100180001801400020076657468305f746f5f626f6e64000000180003800400010010000380"], 0x44}}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) (async) read(r4, &(0x7f0000001400)=""/4076, 0xfffffeea) capset(&(0x7f0000000000)={0x20080522}, 0x0) (async) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) (async) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) (async) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250d010000080005000600000055e85fe74fcc3dec74ebe8400058a41a5c279d5e90075744fabe92f9e9aba6f1174dee1ab9d229f8b91f7451c114127b98eaf9caabf7d2c50dfbf3ebdc894a6a8f4af46579bc5ec6362ed7f67607aba4d386e5a27e7d48f5073361666d36dda5040b9084d75f6a6e80"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) (async) mlockall(0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 1m24.702040852s ago: executing program 4 (id=5427): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa2, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x4e22, @multicast1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12345678}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x87654321}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) 1m23.887084512s ago: executing program 4 (id=5428): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x80000) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 1m23.818441854s ago: executing program 4 (id=5429): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x40) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x18800, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x40044c4) sendmsg$can_raw(r4, 0x0, 0x20008890) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x5c1, 0x0, 0x4) ioctl$PTP_CLOCK_GETCAPS(r1, 0x43403d0e, &(0x7f0000000440)) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmmsg$inet(r5, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='>;', 0x2}], 0x1}}], 0x1, 0x40090) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 1m23.315676946s ago: executing program 4 (id=5433): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) semget(0x1, 0x4, 0x39c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x3140040, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\x00', 0x0, 0x808010, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m21.923637289s ago: executing program 4 (id=5440): socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000003c0)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00\xfa\x85\x81~\x8dlgn\xf6m\x7fQ\x82R\x00\xf7\xe4]\x83\xe6\xd6\xe1@\xcfj\x02\xf5\x1a\xf0\xacZf\xff\xec\x00\x8c]\xe1\xb1n\xa5A\xe4@\xd35\x89\x7f\xb5\xe8q\xe8\x9c\xe86\xf4\xe0\x1e\x82\xba\xfe/P+\v9\xc5\x84\xe25d\xceN\x03\xb7\xa0\x8a\xfd\xa9\x03o\x1d\x18\xe6\xdc\x97~s\x1eY\xbe\xae58\xad\xdbs\xcb}\xb0Z\x19\xb2\x8dD\xe8\xef\xb28\xdb5\xfc\x86\xfa\x91\x8aj\xd1\x90\xd1hk\xa5\xf8-\xd8\x82\xc4\x01h\xc1v\xf9\xb8\xb5\xd8\r\xddI\x9b\fk\xb11\x92\xb1\" \xc9\xe2{s\xd9R\x85\xae\xee\x98>)\xdd\xd4\xdb\"H\x83\xcag\x99Tk\x87\x05\x80\xd9\x8cZ\xdaj\xed\x1e\xcaa\x0f\x93t\b\xbc\x1c\xf2\xa6\xa9K\x8ai\xb62\x86\xaf=\xcb\xa3\x83B|I\x15\xb2\x9c\xbf\a\xd8\r\x0e!\xbf\xc5\xa0X\x1f\xcc;m\xd3\xb1\x1bQ\xbe.\xf5\x1e\xc5\xb3s\xd9\xb6p\x9f\x03', 0x5) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf25000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x20004000) 1m20.502023003s ago: executing program 4 (id=5442): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x40) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x18800, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x40044c4) sendmsg$can_raw(r4, 0x0, 0x20008890) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x5c1, 0x0, 0x4) ioctl$PTP_CLOCK_GETCAPS(r1, 0x43403d0e, &(0x7f0000000440)) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmmsg$inet(r5, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='>;', 0x2}], 0x1}}], 0x1, 0x40090) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 1m19.82888098s ago: executing program 45 (id=5442): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x40) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x18800, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x40044c4) sendmsg$can_raw(r4, 0x0, 0x20008890) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x5c1, 0x0, 0x4) ioctl$PTP_CLOCK_GETCAPS(r1, 0x43403d0e, &(0x7f0000000440)) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmmsg$inet(r5, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='>;', 0x2}], 0x1}}], 0x1, 0x40090) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 31.743905174s ago: executing program 8 (id=5601): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') pread64(r0, &(0x7f0000000000)=""/153, 0x99, 0x19a55d1a) bind$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.526315999s ago: executing program 8 (id=5604): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100", @ANYRES32, @ANYBLOB='D\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008807}, 0x20060000) syz_genetlink_get_family_id$nfc(0x0, r2) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x60, 0x0, "1cdc0dca1d9f68846960e56d"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) (fail_nth: 2) 30.354557017s ago: executing program 8 (id=5609): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 28.873180443s ago: executing program 8 (id=5620): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) semget(0x1, 0x4, 0x39c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 26.744144154s ago: executing program 8 (id=5624): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080080003"], 0xb4}}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 26.274418445s ago: executing program 8 (id=5628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x54, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040) 26.274314455s ago: executing program 46 (id=5628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x54, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040) 22.987666785s ago: executing program 2 (id=5649): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x202) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r3, 0x29, 0xfb, 0x53, 0x83, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x7800, 0x700, 0xe3de, 0x20cfe}}) lstat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000280)) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000380)) 22.839238928s ago: executing program 2 (id=5651): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(r3, 0x0, 0x0, 0x1da1ac15) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2fde502b8", 0x71}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466b12d", 0x3e}], 0x4}}], 0x1, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c8442", 0x18}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048f", 0x4b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f92176de044693fa090b97bcadedd59b7e509e0d60017b6a", 0xe2}], 0x1}}], 0x2, 0x4000900) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8915, &(0x7f00000000c0)={{0x2, 0x4e20, @empty}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @multicast2}, 'sit0\x00'}) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x119000) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/57) 21.766327804s ago: executing program 2 (id=5652): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6"], 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000002f00)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x4, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x2, 0xe000, {0x11, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000088, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x3}}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0x9}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000000000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a03fffffffc0800084000000001140000001100010000000000000000000100bf5e92602670ec0f26000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xdb4}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r5) 21.048082511s ago: executing program 2 (id=5656): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) semget(0x1, 0x4, 0x39c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19.406768471s ago: executing program 2 (id=5663): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x6, 0x7a12, 0x0, 0x1000, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000040)="45a59d4e33351f671648868ca8b3e30037b37d53dbcc42eb15044c117271def7e9ff9319ede119c791fa5b45e2bf617b5bd462bff1320e09684d8e6f67af3c957c4b37f232317c491b3c5f65750eabcf71c9c2b47484d20e11cd466ae7415b4ba3ce86c5e56ec855dd88e03656b59752d451e5a226d63e793ee6cece7ceea96d01c2564d962451d7470be4050ed9d90846deeed75f533f3eaea33e806d60aecabb2c3d9f4b7d9b48faf262ac3a34ed206f922cc7ccaa2e5565be0230383c99dd0017ea08d866c9dd2fee00e6651e6c15751d33693a125004c7ddc3e1b945", 0xde) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$dupfd(r2, 0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20008844) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000005500)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000487000000"], 0x50) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) 15.122032514s ago: executing program 2 (id=5673): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000801) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = io_uring_setup(0x3a5f, &(0x7f0000000180)={0x0, 0x8274, 0x80, 0xffffffff, 0x806, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="9fa40100180000000000000034000000340000000300000000000000000000030000000003000000020000000020000081de00000000000105000000100000040100000000000012020000000061e141580515f93f1d102850f137d6e9cfa328"], 0x0, 0x4f, 0x0, 0x1, 0x8}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7ff, 0x6, 0xe, 0x6}]}) ioprio_set$pid(0x3, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) sendfile(r7, r7, 0x0, 0x252c000000000000) 15.121845964s ago: executing program 47 (id=5673): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000801) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = io_uring_setup(0x3a5f, &(0x7f0000000180)={0x0, 0x8274, 0x80, 0xffffffff, 0x806, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="9fa40100180000000000000034000000340000000300000000000000000000030000000003000000020000000020000081de00000000000105000000100000040100000000000012020000000061e141580515f93f1d102850f137d6e9cfa328"], 0x0, 0x4f, 0x0, 0x1, 0x8}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7ff, 0x6, 0xe, 0x6}]}) ioprio_set$pid(0x3, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) sendfile(r7, r7, 0x0, 0x252c000000000000) 3.530329945s ago: executing program 3 (id=5719): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket(0x10, 0x803, 0x0) socket(0x28, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.547151128s ago: executing program 3 (id=5727): socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000003c0)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00\xfa\x85\x81~\x8dlgn\xf6m\x7fQ\x82R\x00\xf7\xe4]\x83\xe6\xd6\xe1@\xcfj\x02\xf5\x1a\xf0\xacZf\xff\xec\x00\x8c]\xe1\xb1n\xa5A\xe4@\xd35\x89\x7f\xb5\xe8q\xe8\x9c\xe86\xf4\xe0\x1e\x82\xba\xfe/P+\v9\xc5\x84\xe25d\xceN\x03\xb7\xa0\x8a\xfd\xa9\x03o\x1d\x18\xe6\xdc\x97~s\x1eY\xbe\xae58\xad\xdbs\xcb}\xb0Z\x19\xb2\x8dD\xe8\xef\xb28\xdb5\xfc\x86\xfa\x91\x8aj\xd1\x90\xd1hk\xa5\xf8-\xd8\x82\xc4\x01h\xc1v\xf9\xb8\xb5\xd8\r\xddI\x9b\fk\xb11\x92\xb1\" \xc9\xe2{s\xd9R\x85\xae\xee\x98>)\xdd\xd4\xdb\"H\x83\xcag\x99Tk\x87\x05\x80\xd9\x8cZ\xdaj\xed\x1e\xcaa\x0f\x93t\b\xbc\x1c\xf2\xa6\xa9K\x8ai\xb62\x86\xaf=\xcb\xa3\x83B|I\x15\xb2\x9c\xbf\a\xd8\r\x0e!\xbf\xc5\xa0X\x1f\xcc;m\xd3\xb1\x1bQ\xbe.\xf5\x1e\xc5\xb3s\xd9\xb6p\x9f\x03', 0x5) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x20004000) 2.48229187s ago: executing program 9 (id=5728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='2-0:1.0', 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xb6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x93}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x197}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x2, 0x1, 0x6, 0x0, 0xcf, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x40, 0x3, 0x69a, 0x1890a035]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000020) 2.448299411s ago: executing program 9 (id=5729): socket$netlink(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x8000000000000000, 0x2, 0x2) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x2, 0x400}, 0x10200, 0x37, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x480, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x0, 0x800000003, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4ae, &(0x7f0000000580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 2.430391751s ago: executing program 3 (id=5730): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) (fail_nth: 2) 2.219096516s ago: executing program 0 (id=5731): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) 2.218745626s ago: executing program 3 (id=5732): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6"], 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000002f00)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x4, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x2, 0xe000, {0x11, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000088, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x3}}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0x9}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000000000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a03fffffffc0800084000000001140000001100010000000000000000000100bf5e92602670ec0f26000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xdb4}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) timer_delete(r5) socket(0x10, 0x2, 0x0) 1.982248982s ago: executing program 0 (id=5733): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18, 0x4000000}, 0x4000000) 1.971235792s ago: executing program 7 (id=5734): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x98}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a00)="d32d1ff9f7", 0x5}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x20}, 0x40000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1.882382444s ago: executing program 0 (id=5735): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x1ff, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r4, &(0x7f0000000ec0)=""/4096, 0x1000) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210027bd7022fbdab34f3959408e1af5eb57dd25040000000800040001000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x440c5}, 0xc810) 1.794221197s ago: executing program 9 (id=5737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket(0x10, 0x803, 0x0) socket(0x28, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.794039647s ago: executing program 0 (id=5738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 2) 1.779820047s ago: executing program 1 (id=5739): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb8d, 0x932f}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.682049599s ago: executing program 0 (id=5740): socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000003c0)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00\xfa\x85\x81~\x8dlgn\xf6m\x7fQ\x82R\x00\xf7\xe4]\x83\xe6\xd6\xe1@\xcfj\x02\xf5\x1a\xf0\xacZf\xff\xec\x00\x8c]\xe1\xb1n\xa5A\xe4@\xd35\x89\x7f\xb5\xe8q\xe8\x9c\xe86\xf4\xe0\x1e\x82\xba\xfe/P+\v9\xc5\x84\xe25d\xceN\x03\xb7\xa0\x8a\xfd\xa9\x03o\x1d\x18\xe6\xdc\x97~s\x1eY\xbe\xae58\xad\xdbs\xcb}\xb0Z\x19\xb2\x8dD\xe8\xef\xb28\xdb5\xfc\x86\xfa\x91\x8aj\xd1\x90\xd1hk\xa5\xf8-\xd8\x82\xc4\x01h\xc1v\xf9\xb8\xb5\xd8\r\xddI\x9b\fk\xb11\x92\xb1\" \xc9\xe2{s\xd9R\x85\xae\xee\x98>)\xdd\xd4\xdb\"H\x83\xcag\x99Tk\x87\x05\x80\xd9\x8cZ\xdaj\xed\x1e\xcaa\x0f\x93t\b\xbc\x1c\xf2\xa6\xa9K\x8ai\xb62\x86\xaf=\xcb\xa3\x83B|I\x15\xb2\x9c\xbf\a\xd8\r\x0e!\xbf\xc5\xa0X\x1f\xcc;m\xd3\xb1\x1bQ\xbe.\xf5\x1e\xc5\xb3s\xd9\xb6p\x9f\x03', 0x5) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x20004000) 1.515759293s ago: executing program 1 (id=5741): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x40) flistxattr(r2, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x61d3, 0x40000, 0x2, 0x228}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r1], 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$eJzs3d9rXFUeAPDvnWSStJ1u0t3C/njZbtvdLpTOZLKk0IVlW/ZhF9aC2D+gxmQaQyaZkJnUJBRM/wUVLfggIvjki6DvRcRXfRH1QXzxSRAtFRF8GJk7kzZNMklImkzNfD5wuPfcO5nvORnu+c6cSe4JoGudioiViOiLiGcjYrB1PGmVuNwsjcfdv3drvFGSqNevfZek5xv1WPMzDcdazzkQEc/8N+K5ZGPc6tLy9Fi5XJpv1Qu1mblCdWn5wtTM2GRpsjQ7Mjx6abR4sVgsPra+vvRj7venP7j8rzeeeuvjt99bXEzW9HdtP3ZrZZNjza5nI7fmWG9E/H+vwZ4QPa3+9HW6IexKJiJ+GxGn0+t/MHrSVxMAOMzq9cGoD66tAwCHXePzfy6STL41F5CLTCafb87hnYyjmXKlWjt/o7IwOxHpHNZQZDM3psql4dbc2VBkk0a9mO4/rI+sq/8jIk5ExCv9R9J6frxSnujkGx8A6GLH1uX/H/qb+R8AOOQGOt0AAODAyf8A0H3kfwDoPvI/AHQf+R8Auo/8DwDdR/4HgK7y9NWrjVJfvf/1xM2lhenKzQsTpep0fmZhPD9emZ/LT1Yqk+k9e2a2e75ypTJ3MWYXFgu1UrVWqC4tX5+pLMzWrqf39b5eyh5IrwCArZz4890vkohY+eeRtMSatRzkajjcMp1uANAxPZ1uANAxVvuC7uUzPrDJEr1rZNv/idCd3cc09wCdde6P5v+hW8nB0L3M/0P3Mv8P3ateT6z5DwBdZjdz/Jf34X0I0Dlbf/+/xS1C9vD9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPza5dKSZPKttcBzkcnk8xHHI2IossmNqXJpOCJ+ExGf92f7G/VipxsNAOxR5puktf7XucGzufVn+5Kf+tNtRLzw+rXXFsdqtfli4/j3D47X7rSOj3Si/QDAdlbz9GoeX3X/3q3x1XKQ7fn2SnNx0Y3xe6M33Q5ENiKO3k9a9abG+5WexxB/5XZE/GGz+EnkIo4MtVY+XR+/Efv4/sePh/Ezj8TPpOea28bv4nePoS3Qbe5eaS5ovvH6y8SpdLv59T+QjlB71378yzwY/3rajH+ndtrHjwb/1zb+7Yg/9W4+/qzGT9rEP7vD+F9Xvny53bn6mxHnNs0/ySOxCrWZuUJ1afnC1MzYZGmyNDsyPHpptHixWCwW0jnqwupM9Ub/fvWzF7fq/9E28Qe26f9fd9j/rz75z4d/2SL+389s/vqf3CJ+Iyf+bYfx3znz/vPtzjXiT7Tp/3av//kdxr/76bs/7/ChAMABqC4tT4+Vy6V5O3b2c6fvyWiGnZ3udHpkAvbbw4u+0y0BAAAAAAAAAAAAAADaOYh/J+p0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi8fgkAAP//ZCDc4A==") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0xa, 0xa, 0x209, 0x40, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r4}, 0x38) 1.442234715s ago: executing program 7 (id=5742): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x2, 0x80000, @local}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) (async) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800) (async) sendfile(r2, r3, &(0x7f0000000000)=0x54b9118e, 0x7626) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.349941327s ago: executing program 7 (id=5743): r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 1.332669238s ago: executing program 0 (id=5744): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/4086, 0xff6}, {0x0}], 0x2}, 0x8000}], 0x2, 0x10002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_MPU={0x8, 0xe, 0x1b}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040084) 1.315294608s ago: executing program 3 (id=5745): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.22998569s ago: executing program 7 (id=5746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbf8, 0x7, 0xb6b, 0x800c1, 0x2, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7ff, 0x3, 0x63d, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x881, 0x79b, 0x5, 0x1, 0x7e, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x7, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xf, 0x84, 0x100, 0x5, 0x252, 0x81, 0xfffffff8, 0x4, 0xa0006, 0x7, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x5, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x82, 0x42, 0x7ff, 0x4, 0x4, 0x401, 0x66cd, 0x1000000a, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) lstat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000980)) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffff7f0000000000670008000800", @ANYBLOB="882ef6"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0xfffffffa, 0x4, 0x0, 0x8}, 0x10) 991.847296ms ago: executing program 7 (id=5747): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$inet6(0xa, 0x5, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0], 0x48}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x100000001, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0xb4, 0x0, 0x1ff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000300", @ANYRES64=r1], 0x0) 904.815998ms ago: executing program 9 (id=5748): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 819.23799ms ago: executing program 1 (id=5749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 589.260475ms ago: executing program 1 (id=5750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000037000701feffffffffffffff017c"], 0x20}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r1, 0x10, 0x800, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x20, 0x0, 0x0, 0x8, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x7, 0x80, 0x8, 0x6, 0x0, 0x5, 0x0, 0x100000200b}, 0x0, 0x3ffffffffe, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mkdir(0x0, 0x190) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0xfffffffffffffd33, 0x0}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r4 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa85c7b0d7fb6fee2, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x802, 0x4ef6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x1107000, 0x800, 0x5}, 0xffffffffffffff52) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x85, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x10000005}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}) 375.967371ms ago: executing program 3 (id=5751): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x60, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x11, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227, 0x40110}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 310.354042ms ago: executing program 9 (id=5752): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x2000, 0x45}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48841}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newrule={0xb4, 0x20, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x20, 0xd, 0x62, 0x0, 0x0, 0x5, 0x5218024e24dfafc4}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x800}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x9}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4c0c4) r3 = socket$inet(0x2, 0x2, 0x80000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0xd, 0x1ab, 0x0, 0x82, 0x19, 0x3}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000580)={r4, 0x1000}, 0x8) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.allow\x00', 0x2, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000010) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r6) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xdc, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "eda4096d40e945bc1a1e5371c30c6808"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4473c2bc00c30a64ee3bc61ab154e539"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "66b0655faa23ca894e20b7d07f651bc3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "80f7d81df3afaffdc3975659d8ea57dbc79b180739df61a82ba2a68ea86ccd44"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4ff354d9e4badfec455ea6cd9db1b2e69251d64219df76e3d0d598bc060126bd"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000000}, 0x41) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1a8, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3d}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r11 = getpgid(0x0) process_vm_writev(r11, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/72, 0x48}, {&(0x7f0000000c80)=""/41, 0x29}], 0x2, &(0x7f0000000dc0)=[{&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/6, 0x6}], 0x2, 0x0) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000e00)) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, r12, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x54}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x48}}, 0x80) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001000), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0xa0100900}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r13, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$phonet_pipe(0x23, 0x5, 0x2) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f0000001100)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001140)=0x2c) 194.446145ms ago: executing program 1 (id=5753): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) 171.583426ms ago: executing program 9 (id=5754): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9ab7, 0x0) (fail_nth: 2) 131.979457ms ago: executing program 7 (id=5755): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000380)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xffffffffffffffe9}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xba82}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) lsetxattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='security.apparmor\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000005, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x4, 0xff, 0x6, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, &(0x7f0000000340)={0xf720, 0x4, 0xa, 0x8, 0x8, 0xd, 0x7, 0x8}, &(0x7f0000000380)={0x80000000, 0x8, 0x2, 0xac, 0x1000, 0x5, 0x1, 0x7}, &(0x7f0000000540)={r3, r4+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x6]}, 0x8}) (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000040)=ANY=[@ANYBLOB='nfs=nostale_ro,dos1xfloppy,dots,nocase,dots,nodots,errors=continue,nodots,nodots,sys_immutable,flush,fmask=00000000000000000000003,dots,dots,dntn,dots,\x00'], 0x1, 0x23d, &(0x7f0000000a40)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000110) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) (async) eventfd2(0x1, 0x80000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 0s ago: executing program 1 (id=5756): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6"], 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000002f00)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x4, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x2, 0xe000, {0x11, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000088, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x3}}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102, 0x9}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000000000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a03fffffffc0800084000000001140000001100010000000000000000000100bf5e92602670ec0f26000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xdb4}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r5) socket(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): FP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 900.054372][T23649] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 900.056152][T23659] ,cpuset=/,mems_allowed=0 [ 900.056185][T23659] CPU: 1 UID: 0 PID: 23659 Comm: syz.2.5506 Not tainted syzkaller #0 PREEMPT(lazy) [ 900.056210][T23659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 900.056225][T23659] Call Trace: [ 900.056262][T23659] [ 900.056301][T23659] __dump_stack+0x1d/0x30 [ 900.056408][T23659] dump_stack_lvl+0x95/0xd0 [ 900.056489][T23659] dump_stack+0x15/0x1b [ 900.056554][T23659] warn_alloc+0x145/0x1c0 [ 900.056693][T23659] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 900.056889][T23659] ? avc_has_perm_noaudit+0xa3/0x120 [ 900.056986][T23659] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 900.057099][T23659] __vmalloc_noprof+0xa4/0xf0 [ 900.057187][T23659] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 900.057299][T23659] bpf_prog_alloc_no_stats+0x47/0x390 [ 900.057389][T23659] ? bpf_prog_alloc+0x2a/0x150 [ 900.057573][T23659] bpf_prog_alloc+0x3c/0x150 [ 900.057740][T23659] bpf_prog_load+0x54b/0x1100 [ 900.057883][T23659] ? avc_has_perm_noaudit+0xa3/0x120 [ 900.058048][T23659] __sys_bpf+0xbae/0xc30 [ 900.058194][T23659] __x64_sys_bpf+0x69/0x80 [ 900.058303][T23659] x64_sys_call+0x10cb/0x3020 [ 900.058399][T23659] do_syscall_64+0x136/0x3c0 [ 900.058484][T23659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.058558][T23659] RIP: 0033:0x7f7a810ade99 [ 900.058657][T23659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.058721][T23659] RSP: 002b:00007f7a7fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.058793][T23659] RAX: ffffffffffffffda RBX: 00007f7a81335fa0 RCX: 00007f7a810ade99 [ 900.058844][T23659] RDX: 0000000000000090 RSI: 0000200000000200 RDI: 0000000000000005 [ 900.058887][T23659] RBP: 00007f7a7fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 900.058960][T23659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.059011][T23659] R13: 00007f7a81336038 R14: 00007f7a81335fa0 R15: 00007ffeee577308 [ 900.059085][T23659] [ 900.059114][T23659] Mem-Info: [ 900.715318][T23650] loop7: detected capacity change from 0 to 128 [ 900.745693][T23649] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.781063][T23662] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 900.787819][T23662] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 900.795248][T23662] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 900.802059][T23662] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 900.809413][T23662] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 900.816218][T23662] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 900.824802][T23662] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 900.831550][T23662] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 900.838882][T23662] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 900.845653][T23662] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 900.990257][T23662] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 901.010179][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.036472][T23662] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 901.067997][T23662] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 901.074810][T23662] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 901.082502][T23662] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 901.090642][T23650] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 901.093254][T23659] active_anon:13143 inactive_anon:0 isolated_anon:0 [ 901.093254][T23659] active_file:0 inactive_file:24895 isolated_file:0 [ 901.093254][T23659] unevictable:0 dirty:306 writeback:0 [ 901.093254][T23659] slab_reclaimable:3984 slab_unreclaimable:25848 [ 901.093254][T23659] mapped:33386 shmem:3311 pagetables:1433 [ 901.093254][T23659] sec_pagetables:0 bounce:0 [ 901.093254][T23659] kernel_misc_reclaimable:0 [ 901.093254][T23659] free:1863555 free_pcp:4951 free_cma:0 [ 901.104226][T23662] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 901.147314][T23659] Node 0 active_anon:52572kB inactive_anon:0kB active_file:0kB inactive_file:99580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133544kB dirty:1224kB writeback:0kB shmem:13244kB kernel_stack:4448kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 901.147462][T23659] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.156560][T23157] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.184445][T23659] lowmem_reserve[]: 0 2878 7857 7857 [ 901.184488][T23659] Node 0 DMA32 free:2944132kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947656kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 901.266383][T23650] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.280580][T23662] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 901.284408][T23659] lowmem_reserve[]: 0 0 4978 4978 [ 901.292434][T23659] Node 0 Normal free:4494496kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52804kB inactive_anon:0kB active_file:0kB inactive_file:99580kB unevictable:0kB writepending:1340kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:16092kB local_pcp:15500kB free_cma:0kB [ 901.325325][T23659] lowmem_reserve[]: 0 0 0 [ 901.325413][T23662] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 901.325371][T23659] 0 [ 901.325448][T23659] Node 0 [ 901.333829][T23667] syzkaller0: entered promiscuous mode [ 901.337009][T23659] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 901.355676][T23667] syzkaller0: entered allmulticast mode [ 901.360206][T23659] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944132kB [ 901.381888][T23659] Node 0 Normal: 163*4kB (U) 396*8kB (UME) 415*16kB (UME) 377*32kB (UME) 130*64kB (UME) 57*128kB (UM) 48*256kB (UM) 36*512kB (UME) 16*1024kB (UME) 9*2048kB (UME) 1072*4096kB (UM) = 4494588kB [ 901.430570][T23659] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 901.444214][T23659] 28174 total pagecache pages [ 901.449946][T23659] 0 pages in swap cache [ 901.457958][T23659] Free swap = 124996kB [ 901.462220][T23659] Total swap = 124996kB [ 901.466998][T23659] 2097051 pages RAM [ 901.470837][T23659] 0 pages HighMem/MovableOnly [ 901.475620][T23659] 81738 pages reserved [ 901.535321][T22164] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.541821][T23680] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 901.576817][ T28] audit: type=1400 audit(2000000692.845:1246): avc: denied { create } for pid=23669 comm="syz.9.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 901.680905][ T28] audit: type=1400 audit(2000000692.965:1247): avc: denied { write } for pid=23664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.749448][ T28] audit: type=1400 audit(2000000693.035:1248): avc: denied { write } for pid=23691 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.771838][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5510'. [ 901.798244][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.842820][T23687] hsr_slave_1 (unregistering): left promiscuous mode [ 901.899812][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5515'. [ 901.917036][T23694] loop3: detected capacity change from 0 to 8192 [ 901.928759][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5515'. [ 901.938185][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5515'. [ 902.121894][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.219045][ T28] audit: type=1400 audit(2000000693.505:1249): avc: denied { write } for pid=23696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.616946][ T28] audit: type=1400 audit(2000000693.905:1250): avc: denied { write } for pid=23719 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.014915][T23734] loop7: detected capacity change from 0 to 2048 [ 903.070727][T23737] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 903.088936][T23737] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 903.107473][T23737] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 903.159516][T23734] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 903.173503][T23737] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 903.180849][T23737] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 903.187584][T23737] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 903.195610][T23743] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 903.202426][T23743] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 903.209843][T23743] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 903.216550][T23743] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 903.223924][T23743] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 903.230662][T23743] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 903.267857][T23734] syzkaller0: entered promiscuous mode [ 903.276975][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.295534][T23734] syzkaller0: entered allmulticast mode [ 903.343631][T23752] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 903.361449][ T28] audit: type=1400 audit(2000000694.635:1251): avc: denied { write } for pid=23738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.385064][T23752] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 903.392971][T23752] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 903.401308][T23752] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 903.416664][T23752] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 903.425460][ T28] audit: type=1400 audit(2000000694.645:1252): avc: denied { write } for pid=23756 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.454834][T23752] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 903.469861][ T28] audit: type=1400 audit(2000000694.645:1253): avc: denied { setopt } for pid=23754 comm="syz.2.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 903.566834][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5524'. [ 903.579620][T23766] FAULT_INJECTION: forcing a failure. [ 903.579620][T23766] name failslab, interval 1, probability 0, space 0, times 0 [ 903.592262][T23766] CPU: 0 UID: 0 PID: 23766 Comm: syz.3.5527 Not tainted syzkaller #0 PREEMPT(lazy) [ 903.592291][T23766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 903.592310][T23766] Call Trace: [ 903.592320][T23766] [ 903.592367][T23766] __dump_stack+0x1d/0x30 [ 903.592394][T23766] dump_stack_lvl+0x95/0xd0 [ 903.592448][T23766] dump_stack+0x15/0x1b [ 903.592475][T23766] should_fail_ex+0x25e/0x270 [ 903.592511][T23766] should_failslab+0x8c/0xb0 [ 903.592576][T23766] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 903.592605][T23766] ? __alloc_skb+0x2db/0x6f0 [ 903.592642][T23766] ? __alloc_skb+0x2db/0x6f0 [ 903.592752][T23766] __alloc_skb+0x2db/0x6f0 [ 903.592785][T23766] ? __alloc_skb+0x205/0x6f0 [ 903.592819][T23766] netlink_alloc_large_skb+0xbf/0xf0 [ 903.592930][T23766] netlink_sendmsg+0x40c/0x6f0 [ 903.592962][T23766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.592999][T23766] ____sys_sendmsg+0x532/0x580 [ 903.593113][T23766] ___sys_sendmsg+0x195/0x1e0 [ 903.593228][T23766] __x64_sys_sendmsg+0xd4/0x160 [ 903.593336][T23766] x64_sys_call+0x194c/0x3020 [ 903.593438][T23766] do_syscall_64+0x136/0x3c0 [ 903.593476][T23766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.593500][T23766] RIP: 0033:0x7f97075bde99 [ 903.593518][T23766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.593539][T23766] RSP: 002b:00007f9706017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.593641][T23766] RAX: ffffffffffffffda RBX: 00007f9707845fa0 RCX: 00007f97075bde99 [ 903.593657][T23766] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 903.593671][T23766] RBP: 00007f9706017090 R08: 0000000000000000 R09: 0000000000000000 [ 903.593701][T23766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.593773][T23766] R13: 00007f9707846038 R14: 00007f9707845fa0 R15: 00007ffcfa660648 [ 903.593798][T23766] [ 903.610625][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 903.646134][T23768] loop9: detected capacity change from 0 to 1024 [ 903.649775][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 903.655603][T23768] EXT4-fs: Ignoring removed orlov option [ 903.659229][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5528'. [ 903.706481][T23761] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 903.866940][T23768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.891033][ T28] audit: type=1400 audit(2000000695.175:1254): avc: denied { write } for pid=23769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.951681][T23768] netlink: 'syz.9.5529': attribute type 2 has an invalid length. [ 903.966197][ T28] audit: type=1400 audit(2000000695.255:1255): avc: denied { write } for pid=23786 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.999923][T23157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.239686][T23815] loop8: detected capacity change from 0 to 128 [ 904.344022][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.793378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.446040][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.520168][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.538317][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.547351][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.086388][T23827] loop3: detected capacity change from 0 to 128 [ 906.140350][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.152797][T23827] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 906.168817][T23827] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.345019][T23834] loop9: detected capacity change from 0 to 164 [ 906.639454][T23841] loop8: detected capacity change from 0 to 128 [ 906.719103][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.727387][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.235188][T23834] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 907.333420][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.203212][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.335863][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.373004][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 908.373098][ T28] audit: type=1400 audit(2000000699.535:1258): avc: denied { write } for pid=23824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 908.808818][T23852] loop7: detected capacity change from 0 to 128 [ 908.844350][T23852] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 908.857880][T23852] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.021608][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 909.252368][T23865] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 909.294348][T23867] loop2: detected capacity change from 0 to 128 [ 909.308177][T23867] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 909.320691][T23867] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.333237][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.334248][ T28] audit: type=1400 audit(2000000700.225:1259): avc: denied { write } for pid=23851 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.343104][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.375528][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.383701][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.392299][T23865] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 909.427228][T23865] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 909.452830][T23872] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 909.463860][T23865] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 909.471237][T23865] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 909.478017][T23865] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 909.522542][T23871] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 909.529295][T23871] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 909.536765][T23871] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 909.543515][T23871] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 909.550913][T23871] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 909.618573][T23871] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 909.643705][T23865] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 909.677322][T23865] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 909.705298][T23865] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 909.724898][T23865] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 909.737754][T23865] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 909.756572][T23865] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 909.803381][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 909.815237][ T28] audit: type=1400 audit(2000000701.025:1260): avc: denied { write } for pid=23873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.870475][ T28] audit: type=1400 audit(2000000701.065:1261): avc: denied { write } for pid=23894 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.038991][ T28] audit: type=1400 audit(2000000701.325:1262): avc: denied { write } for pid=23903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.085293][ T28] audit: type=1400 audit(2000000701.375:1263): avc: denied { write } for pid=23914 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.128946][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 910.236103][ T28] audit: type=1400 audit(2000000701.525:1264): avc: denied { write } for pid=23917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.292347][ T28] audit: type=1400 audit(2000000701.565:1265): avc: denied { write } for pid=23928 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.319290][T22123] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.402014][T22671] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.420002][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 910.465756][T22164] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.523158][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5542'. [ 910.532388][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5542'. [ 910.569694][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5542'. [ 910.635097][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5547'. [ 910.784389][ T28] audit: type=1400 audit(2000000702.075:1266): avc: denied { write } for pid=23932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.818290][T23960] tipc: Cannot configure node identity twice [ 910.824576][T23960] tipc: Enabling of bearer rejected, failed to enable media [ 910.855784][ T28] audit: type=1400 audit(2000000702.145:1267): avc: denied { write } for pid=23965 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.916983][T23968] loop7: detected capacity change from 0 to 128 [ 911.351582][T23975] FAULT_INJECTION: forcing a failure. [ 911.351582][T23975] name failslab, interval 1, probability 0, space 0, times 0 [ 911.395538][ T9686] net_ratelimit: 2 callbacks suppressed [ 911.395555][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.410039][T23975] CPU: 1 UID: 0 PID: 23975 Comm: syz.7.5552 Not tainted syzkaller #0 PREEMPT(lazy) [ 911.410143][T23975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 911.410170][T23975] Call Trace: [ 911.410179][T23975] [ 911.410189][T23975] __dump_stack+0x1d/0x30 [ 911.410246][T23975] dump_stack_lvl+0x95/0xd0 [ 911.410272][T23975] dump_stack+0x15/0x1b [ 911.410295][T23975] should_fail_ex+0x25e/0x270 [ 911.410383][T23975] should_failslab+0x8c/0xb0 [ 911.410414][T23975] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 911.410444][T23975] ? __alloc_skb+0x2db/0x6f0 [ 911.410489][T23975] ? __alloc_skb+0x2db/0x6f0 [ 911.410588][T23975] __alloc_skb+0x2db/0x6f0 [ 911.410626][T23975] ? __alloc_skb+0x205/0x6f0 [ 911.410716][T23975] netlink_alloc_large_skb+0xbf/0xf0 [ 911.410822][T23975] netlink_sendmsg+0x40c/0x6f0 [ 911.410941][T23975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.411037][T23975] ____sys_sendmsg+0x532/0x580 [ 911.411145][T23975] ___sys_sendmsg+0x195/0x1e0 [ 911.411259][T23975] __x64_sys_sendmsg+0xd4/0x160 [ 911.411311][T23975] x64_sys_call+0x194c/0x3020 [ 911.411380][T23975] do_syscall_64+0x136/0x3c0 [ 911.411409][T23975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.411475][T23975] RIP: 0033:0x7fe6465fde99 [ 911.411494][T23975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.411514][T23975] RSP: 002b:00007fe645057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.411535][T23975] RAX: ffffffffffffffda RBX: 00007fe646885fa0 RCX: 00007fe6465fde99 [ 911.411559][T23975] RDX: 0000000004000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 911.411578][T23975] RBP: 00007fe645057090 R08: 0000000000000000 R09: 0000000000000000 [ 911.411596][T23975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.411613][T23975] R13: 00007fe646886038 R14: 00007fe646885fa0 R15: 00007ffc7b288538 [ 911.411637][T23975] [ 911.609242][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.617863][T23976] syzkaller0: create flow: hash 655372714 index 2 [ 911.669997][T23984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.681597][T23984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.759194][T23977] syzkaller0: delete flow: hash 655372714 index 2 [ 911.777778][ T7080] syzkaller0: tun_net_xmit 76 [ 911.783127][ T7080] syzkaller0: tun_net_xmit 48 [ 911.792742][T23994] FAULT_INJECTION: forcing a failure. [ 911.792742][T23994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.806531][T23994] CPU: 1 UID: 0 PID: 23994 Comm: syz.8.5555 Not tainted syzkaller #0 PREEMPT(lazy) [ 911.806597][T23994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 911.806615][T23994] Call Trace: [ 911.806624][T23994] [ 911.806645][T23994] __dump_stack+0x1d/0x30 [ 911.806677][T23994] dump_stack_lvl+0x95/0xd0 [ 911.806707][T23994] dump_stack+0x15/0x1b [ 911.806734][T23994] should_fail_ex+0x25e/0x270 [ 911.806919][T23994] should_fail+0xb/0x20 [ 911.806984][T23994] should_fail_usercopy+0x1a/0x20 [ 911.807027][T23994] _copy_to_user+0x20/0xa0 [ 911.807052][T23994] simple_read_from_buffer+0xb5/0x130 [ 911.807080][T23994] proc_fail_nth_read+0x10e/0x150 [ 911.807151][T23994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 911.807182][T23994] vfs_read+0x18e/0x7c0 [ 911.807206][T23994] ? __rcu_read_unlock+0x4e/0x70 [ 911.807288][T23994] ? __fget_files+0x184/0x1c0 [ 911.807401][T23994] ? mutex_lock+0x57/0x90 [ 911.807445][T23994] ksys_read+0xdc/0x1a0 [ 911.807469][T23994] __x64_sys_read+0x40/0x50 [ 911.807495][T23994] x64_sys_call+0x2886/0x3020 [ 911.807586][T23994] do_syscall_64+0x136/0x3c0 [ 911.807623][T23994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.807694][T23994] RIP: 0033:0x7f4e355ee6ce [ 911.807711][T23994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 911.807730][T23994] RSP: 002b:00007f4e34086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 911.807751][T23994] RAX: ffffffffffffffda RBX: 00007f4e340876c0 RCX: 00007f4e355ee6ce [ 911.807774][T23994] RDX: 000000000000000f RSI: 00007f4e340870a0 RDI: 0000000000000004 [ 911.807792][T23994] RBP: 00007f4e34087090 R08: 0000000000000000 R09: 0000000000000000 [ 911.807828][T23994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.807878][T23994] R13: 00007f4e358b6038 R14: 00007f4e358b5fa0 R15: 00007fffcb7d8228 [ 911.807964][T23994] [ 911.883920][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.013106][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.024668][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.136773][T24013] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5560'. [ 912.278181][T24016] tipc: Cannot configure node identity twice [ 912.285033][T24016] tipc: Enabling of bearer rejected, failed to enable media [ 912.337525][T24030] loop8: detected capacity change from 0 to 512 [ 912.350678][T24030] EXT4-fs: dax option not supported [ 912.357089][T24032] loop3: detected capacity change from 0 to 128 [ 912.432667][T24035] loop3: detected capacity change from 0 to 2048 [ 912.444017][T24030] loop8: detected capacity change from 0 to 4096 [ 912.469300][T24030] EXT4-fs: Invalid want_extra_isize 3 [ 912.586068][T24047] tipc: Cannot configure node identity twice [ 912.619958][T24035] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 912.649333][T24047] tipc: Enabling of bearer rejected, failed to enable media [ 912.835414][T24035] syzkaller0: entered promiscuous mode [ 912.841042][T24035] syzkaller0: entered allmulticast mode [ 912.886321][T24061] loop7: detected capacity change from 0 to 128 [ 912.960463][T24061] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 913.041051][T24067] loop8: detected capacity change from 0 to 128 [ 913.257605][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.395846][T24061] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.648138][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.784640][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.832200][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 914.832218][ T28] audit: type=1400 audit(2000000706.115:1274): avc: denied { write } for pid=24056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.401655][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.577825][T24081] FAULT_INJECTION: forcing a failure. [ 915.577825][T24081] name failslab, interval 1, probability 0, space 0, times 0 [ 915.590719][T24081] CPU: 1 UID: 0 PID: 24081 Comm: syz.3.5569 Not tainted syzkaller #0 PREEMPT(lazy) [ 915.590748][T24081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 915.590763][T24081] Call Trace: [ 915.590770][T24081] [ 915.590779][T24081] __dump_stack+0x1d/0x30 [ 915.590811][T24081] dump_stack_lvl+0x95/0xd0 [ 915.590900][T24081] dump_stack+0x15/0x1b [ 915.590920][T24081] should_fail_ex+0x25e/0x270 [ 915.591014][T24081] should_failslab+0x8c/0xb0 [ 915.591046][T24081] __kmalloc_noprof+0xd4/0x4a0 [ 915.591076][T24081] ? iovec_from_user+0x84/0x200 [ 915.591098][T24081] ? iovec_from_user+0x84/0x200 [ 915.591173][T24081] ? avc_has_perm+0x101/0x190 [ 915.591205][T24081] iovec_from_user+0x84/0x200 [ 915.591228][T24081] __import_iovec+0xf3/0x530 [ 915.591257][T24081] ? lockref_put_return+0xf7/0x130 [ 915.591353][T24081] import_iovec+0x60/0x80 [ 915.591383][T24081] ___sys_sendmsg+0x160/0x1e0 [ 915.591428][T24081] ? terminate_walk+0x1d5/0x200 [ 915.591604][T24081] __sys_sendmmsg+0x185/0x320 [ 915.591654][T24081] __x64_sys_sendmmsg+0x57/0x70 [ 915.591742][T24081] x64_sys_call+0x27aa/0x3020 [ 915.591852][T24081] do_syscall_64+0x136/0x3c0 [ 915.591879][T24081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.592008][T24081] RIP: 0033:0x7f97075bde99 [ 915.592030][T24081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.592056][T24081] RSP: 002b:00007f9705ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 915.592148][T24081] RAX: ffffffffffffffda RBX: 00007f9707846090 RCX: 00007f97075bde99 [ 915.592163][T24081] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 915.592182][T24081] RBP: 00007f9705ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 915.592196][T24081] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 915.592281][T24081] R13: 00007f9707846128 R14: 00007f9707846090 R15: 00007ffcfa660648 [ 915.592331][T24081] [ 915.710025][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.904093][T24088] FAULT_INJECTION: forcing a failure. [ 915.904093][T24088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.006290][T24088] CPU: 0 UID: 0 PID: 24088 Comm: syz.8.5572 Not tainted syzkaller #0 PREEMPT(lazy) [ 916.006330][T24088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 916.006346][T24088] Call Trace: [ 916.006354][T24088] [ 916.006440][T24088] __dump_stack+0x1d/0x30 [ 916.006471][T24088] dump_stack_lvl+0x95/0xd0 [ 916.006553][T24088] dump_stack+0x15/0x1b [ 916.006576][T24088] should_fail_ex+0x25e/0x270 [ 916.006674][T24088] should_fail+0xb/0x20 [ 916.006707][T24088] should_fail_usercopy+0x1a/0x20 [ 916.006746][T24088] _copy_from_user+0x1c/0xb0 [ 916.006767][T24088] ipv6_flowlabel_opt+0xa3/0x1af0 [ 916.006806][T24088] ? selinux_file_open+0x2e6/0x330 [ 916.006828][T24088] ? lockref_put_return+0xf7/0x130 [ 916.006859][T24088] ? __rcu_read_unlock+0x4e/0x70 [ 916.006912][T24088] ? __rcu_read_unlock+0x4e/0x70 [ 916.006992][T24088] ? terminate_walk+0x1d5/0x200 [ 916.007065][T24088] ? lock_sock_nested+0x84/0x110 [ 916.007094][T24088] do_ipv6_setsockopt+0xaed/0x2040 [ 916.007121][T24088] ? kstrtoull+0x111/0x140 [ 916.007152][T24088] ? avc_has_perm_noaudit+0xa3/0x120 [ 916.007229][T24088] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 916.007279][T24088] ipv6_setsockopt+0x59/0x130 [ 916.007310][T24088] udpv6_setsockopt+0x89/0xa0 [ 916.007338][T24088] sock_common_setsockopt+0x69/0x80 [ 916.007401][T24088] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 916.007429][T24088] __sys_setsockopt+0x184/0x200 [ 916.007469][T24088] __x64_sys_setsockopt+0x64/0x80 [ 916.007544][T24088] x64_sys_call+0x2327/0x3020 [ 916.007578][T24088] do_syscall_64+0x136/0x3c0 [ 916.007613][T24088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.007641][T24088] RIP: 0033:0x7f4e3562de99 [ 916.007658][T24088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.007734][T24088] RSP: 002b:00007f4e34087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 916.007755][T24088] RAX: ffffffffffffffda RBX: 00007f4e358b5fa0 RCX: 00007f4e3562de99 [ 916.007771][T24088] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 916.007788][T24088] RBP: 00007f4e34087090 R08: 0000000000000020 R09: 0000000000000000 [ 916.007857][T24088] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 916.007870][T24088] R13: 00007f4e358b6038 R14: 00007f4e358b5fa0 R15: 00007fffcb7d8228 [ 916.007891][T24088] [ 916.272353][T24092] tipc: Started in network mode [ 916.281008][T24092] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 916.299232][T24092] tipc: Enabling of bearer rejected, failed to enable media [ 916.319763][T24095] loop8: detected capacity change from 0 to 128 [ 916.388276][ T28] audit: type=1400 audit(2000000707.665:1275): avc: denied { read } for pid=24068 comm="syz.9.5568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 916.434507][T24098] loop2: detected capacity change from 0 to 128 [ 916.530133][ T28] audit: type=1400 audit(2000000707.815:1276): avc: denied { write } for pid=24086 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.576421][T22164] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 916.605505][ T28] audit: type=1400 audit(2000000707.895:1277): avc: denied { read } for pid=24104 comm="syz.8.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 916.625320][T24109] loop2: detected capacity change from 0 to 1024 [ 916.646076][T24109] EXT4-fs: Ignoring removed orlov option [ 916.687201][ T28] audit: type=1400 audit(2000000707.955:1278): avc: denied { getopt } for pid=24110 comm="syz.7.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 916.739700][ T28] audit: type=1400 audit(2000000708.025:1279): avc: denied { write } for pid=24107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.879304][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.887186][ T28] audit: type=1400 audit(2000000708.065:1280): avc: denied { write } for pid=24128 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.936665][T24109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.974553][ T28] audit: type=1400 audit(2000000708.265:1281): avc: denied { write } for pid=24132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.027647][T24109] netlink: 'syz.2.5577': attribute type 2 has an invalid length. [ 917.061085][ T28] audit: type=1400 audit(2000000708.305:1282): avc: denied { write } for pid=24148 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.127189][T24150] loop9: detected capacity change from 0 to 128 [ 917.368691][T22123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.545330][T24158] netlink: 'syz.3.5584': attribute type 1 has an invalid length. [ 917.595271][ T7071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.771068][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.797279][T24158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.832691][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.864462][ T28] audit: type=1400 audit(2000000709.155:1283): avc: denied { write } for pid=24153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.939584][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.064140][T24174] loop7: detected capacity change from 0 to 128 [ 918.110528][T24180] syzkaller0: entered promiscuous mode [ 918.147401][T24180] syzkaller0: entered allmulticast mode [ 918.324843][T24186] loop7: detected capacity change from 0 to 512 [ 918.338898][T24186] EXT4-fs: Ignoring removed i_version option [ 918.402533][T24186] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 918.446477][T24186] EXT4-fs (loop7): 1 truncate cleaned up [ 918.452582][T24186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.481582][T24192] tipc: Cannot configure node identity twice [ 918.487940][T24192] tipc: Enabling of bearer rejected, failed to enable media [ 918.636593][T22164] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.686171][T24199] netlink: 'syz.8.5594': attribute type 1 has an invalid length. [ 918.764223][T24201] loop8: detected capacity change from 0 to 2048 [ 919.056826][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.173824][T24217] loop9: detected capacity change from 0 to 128 [ 919.205077][T24216] loop7: detected capacity change from 0 to 128 [ 919.420114][T24201] FAT-fs (loop8): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 919.678090][T24216] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 919.693771][T24216] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.351614][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.383478][T24201] syzkaller0: entered promiscuous mode [ 921.076153][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.076414][T24201] syzkaller0: entered allmulticast mode [ 921.085355][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.108419][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 921.108447][ T28] audit: type=1400 audit(2000000712.395:1287): avc: denied { write } for pid=24175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.364334][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.400228][T24226] loop9: detected capacity change from 0 to 128 [ 921.431330][ T28] audit: type=1400 audit(2000000712.715:1288): avc: denied { write } for pid=24229 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.456371][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5599'. [ 921.479137][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5599'. [ 921.558129][T24236] netlink: 'syz.3.5599': attribute type 2 has an invalid length. [ 921.615141][T24236] netlink: 'syz.3.5599': attribute type 8 has an invalid length. [ 921.615164][T24236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5599'. [ 921.841418][T24248] FAULT_INJECTION: forcing a failure. [ 921.841418][T24248] name failslab, interval 1, probability 0, space 0, times 0 [ 921.841447][T24248] CPU: 1 UID: 0 PID: 24248 Comm: syz.8.5604 Not tainted syzkaller #0 PREEMPT(lazy) [ 921.841523][T24248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 921.841558][T24248] Call Trace: [ 921.841570][T24248] [ 921.841578][T24248] __dump_stack+0x1d/0x30 [ 921.841604][T24248] dump_stack_lvl+0x95/0xd0 [ 921.841625][T24248] dump_stack+0x15/0x1b [ 921.841674][T24248] should_fail_ex+0x25e/0x270 [ 921.841723][T24248] should_failslab+0x8c/0xb0 [ 921.841812][T24248] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 921.841931][T24248] ? __alloc_skb+0x2db/0x6f0 [ 921.841969][T24248] ? __alloc_skb+0x2db/0x6f0 [ 921.842046][T24248] ? __rcu_read_unlock+0x4e/0x70 [ 921.842083][T24248] __alloc_skb+0x2db/0x6f0 [ 921.842115][T24248] ? __alloc_skb+0x205/0x6f0 [ 921.842196][T24248] pfkey_sendmsg+0xd1/0x970 [ 921.842302][T24248] ? avc_has_perm+0x101/0x190 [ 921.842333][T24248] ? selinux_socket_sendmsg+0x2e2/0x410 [ 921.842395][T24248] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 921.842428][T24248] ____sys_sendmsg+0x532/0x580 [ 921.842532][T24248] ___sys_sendmsg+0x195/0x1e0 [ 921.842585][T24248] __x64_sys_sendmsg+0xd4/0x160 [ 921.842624][T24248] x64_sys_call+0x194c/0x3020 [ 921.842661][T24248] do_syscall_64+0x136/0x3c0 [ 921.842695][T24248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.842721][T24248] RIP: 0033:0x7f4e3562de99 [ 921.842737][T24248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.842818][T24248] RSP: 002b:00007f4e34087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.842849][T24248] RAX: ffffffffffffffda RBX: 00007f4e358b5fa0 RCX: 00007f4e3562de99 [ 921.842867][T24248] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 921.842886][T24248] RBP: 00007f4e34087090 R08: 0000000000000000 R09: 0000000000000000 [ 921.842935][T24248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.842950][T24248] R13: 00007f4e358b6038 R14: 00007f4e358b5fa0 R15: 00007fffcb7d8228 [ 921.842975][T24248] [ 921.882245][T24250] tipc: Cannot configure node identity twice [ 921.882400][T24250] tipc: Enabling of bearer rejected, failed to enable media [ 921.958055][T24259] FAULT_INJECTION: forcing a failure. [ 921.958055][T24259] name failslab, interval 1, probability 0, space 0, times 0 [ 921.958106][T24259] CPU: 1 UID: 0 PID: 24259 Comm: syz.3.5605 Not tainted syzkaller #0 PREEMPT(lazy) [ 921.958215][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 921.958229][T24259] Call Trace: [ 921.958235][T24259] [ 921.958245][T24259] __dump_stack+0x1d/0x30 [ 921.958277][T24259] dump_stack_lvl+0x95/0xd0 [ 921.958348][T24259] dump_stack+0x15/0x1b [ 921.958446][T24259] should_fail_ex+0x25e/0x270 [ 921.958487][T24259] should_failslab+0x8c/0xb0 [ 921.958523][T24259] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 921.958556][T24259] ? __alloc_skb+0x2db/0x6f0 [ 921.958669][T24259] ? __alloc_skb+0x2db/0x6f0 [ 921.958705][T24259] ? avc_has_perm+0x101/0x190 [ 921.958732][T24259] __alloc_skb+0x2db/0x6f0 [ 921.958770][T24259] ? __alloc_skb+0x205/0x6f0 [ 921.958879][T24259] netlink_alloc_large_skb+0xbf/0xf0 [ 921.958982][T24259] netlink_sendmsg+0x40c/0x6f0 [ 921.959044][T24259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.959097][T24259] ____sys_sendmsg+0x532/0x580 [ 921.959194][T24259] ___sys_sendmsg+0x195/0x1e0 [ 921.959246][T24259] __x64_sys_sendmsg+0xd4/0x160 [ 921.959377][T24259] x64_sys_call+0x194c/0x3020 [ 921.959469][T24259] do_syscall_64+0x136/0x3c0 [ 921.959504][T24259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.959535][T24259] RIP: 0033:0x7f97075bde99 [ 921.959556][T24259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.959592][T24259] RSP: 002b:00007f9706017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.959613][T24259] RAX: ffffffffffffffda RBX: 00007f9707845fa0 RCX: 00007f97075bde99 [ 921.959651][T24259] RDX: 0000000004000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 921.959670][T24259] RBP: 00007f9706017090 R08: 0000000000000000 R09: 0000000000000000 [ 921.959711][T24259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.959749][T24259] R13: 00007f9707846038 R14: 00007f9707845fa0 R15: 00007ffcfa660648 [ 921.959825][T24259] [ 921.993472][ T28] audit: type=1400 audit(2000000713.275:1289): avc: denied { write } for pid=24235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.027360][T24263] loop3: detected capacity change from 0 to 2048 [ 922.045727][T24263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.045816][T24263] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.069801][ T28] audit: type=1400 audit(2000000713.365:1290): avc: denied { write } for pid=24260 comm="syz.3.5606" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 922.072479][ T28] audit: type=1400 audit(2000000713.365:1291): avc: denied { ioctl } for pid=24260 comm="syz.3.5606" path="/38/file0/file1" dev="loop3" ino=15 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.078551][ T28] audit: type=1400 audit(2000000713.365:1292): avc: denied { write } for pid=24264 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.101195][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.267683][ T28] audit: type=1400 audit(2000000713.555:1293): avc: denied { write } for pid=24271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.318554][ T28] audit: type=1400 audit(2000000713.605:1294): avc: denied { write } for pid=24282 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.361655][T22164] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 922.457686][T24288] loop3: detected capacity change from 0 to 1024 [ 922.681659][ T28] audit: type=1400 audit(2000000713.965:1295): avc: denied { write } for pid=24286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.690052][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.793205][T24300] file system registered [ 922.822119][T24288] EXT4-fs: Ignoring removed orlov option [ 922.857313][ T28] audit: type=1400 audit(2000000714.085:1296): avc: denied { write } for pid=24299 comm="syz.7.5608" name="functions" dev="configfs" ino=39132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 923.006029][T24288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.079798][T24288] netlink: 'syz.3.5607': attribute type 2 has an invalid length. [ 923.146094][T22164] ffs_data_put(): freeing [ 923.151964][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.171494][T24327] loop7: detected capacity change from 0 to 128 [ 923.273123][T24334] loop9: detected capacity change from 0 to 128 [ 923.353422][ T7052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.364904][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.512546][T24339] FAULT_INJECTION: forcing a failure. [ 923.512546][T24339] name failslab, interval 1, probability 0, space 0, times 0 [ 923.587593][T24339] CPU: 0 UID: 0 PID: 24339 Comm: syz.2.5614 Not tainted syzkaller #0 PREEMPT(lazy) [ 923.587623][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 923.587636][T24339] Call Trace: [ 923.587644][T24339] [ 923.587656][T24339] __dump_stack+0x1d/0x30 [ 923.587743][T24339] dump_stack_lvl+0x95/0xd0 [ 923.587772][T24339] dump_stack+0x15/0x1b [ 923.587801][T24339] should_fail_ex+0x25e/0x270 [ 923.587937][T24339] should_failslab+0x8c/0xb0 [ 923.587969][T24339] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 923.588070][T24339] ? __alloc_skb+0x2db/0x6f0 [ 923.588102][T24339] ? __alloc_skb+0x2db/0x6f0 [ 923.588159][T24339] ? tcp_current_mss+0x302/0x3e0 [ 923.588201][T24339] __alloc_skb+0x2db/0x6f0 [ 923.588232][T24339] tcp_stream_alloc_skb+0x30/0x320 [ 923.588312][T24339] tcp_sendmsg_locked+0xd2f/0x2c70 [ 923.588338][T24339] ? security_inode_alloc+0x37/0x100 [ 923.588461][T24339] ? __pfx_tcp_sendmsg+0x10/0x10 [ 923.588489][T24339] tcp_sendmsg+0x2f/0x50 [ 923.588513][T24339] inet_sendmsg+0x76/0xd0 [ 923.588543][T24339] ? __pfx_inet_sendmsg+0x10/0x10 [ 923.588640][T24339] ____sys_sendmsg+0x4e8/0x580 [ 923.588678][T24339] ___sys_sendmsg+0x195/0x1e0 [ 923.588728][T24339] __x64_sys_sendmsg+0xd4/0x160 [ 923.588798][T24339] x64_sys_call+0x194c/0x3020 [ 923.588824][T24339] do_syscall_64+0x136/0x3c0 [ 923.588860][T24339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.588998][T24339] RIP: 0033:0x7f7a810ade99 [ 923.589019][T24339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.589042][T24339] RSP: 002b:00007f7a7fb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.589069][T24339] RAX: ffffffffffffffda RBX: 00007f7a81335fa0 RCX: 00007f7a810ade99 [ 923.589089][T24339] RDX: 0000000004004001 RSI: 0000200000000440 RDI: 0000000000000004 [ 923.589109][T24339] RBP: 00007f7a7fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 923.589132][T24339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.589149][T24339] R13: 00007f7a81336038 R14: 00007f7a81335fa0 R15: 00007ffeee577308 [ 923.589170][T24339] [ 924.036016][T24356] FAULT_INJECTION: forcing a failure. [ 924.036016][T24356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.078827][T24356] CPU: 0 UID: 0 PID: 24356 Comm: syz.2.5618 Not tainted syzkaller #0 PREEMPT(lazy) [ 924.078895][T24356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 924.078908][T24356] Call Trace: [ 924.078916][T24356] [ 924.078925][T24356] __dump_stack+0x1d/0x30 [ 924.078957][T24356] dump_stack_lvl+0x95/0xd0 [ 924.078982][T24356] dump_stack+0x15/0x1b [ 924.079012][T24356] should_fail_ex+0x25e/0x270 [ 924.079049][T24356] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 924.079078][T24356] should_fail+0xb/0x20 [ 924.079160][T24356] should_fail_usercopy+0x1a/0x20 [ 924.079201][T24356] _copy_from_user+0x1c/0xb0 [ 924.079229][T24356] ucma_resolve_ip+0x4e/0x360 [ 924.079345][T24356] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 924.079456][T24356] ucma_write+0x1c9/0x260 [ 924.079483][T24356] vfs_writev+0x41e/0x8b0 [ 924.079516][T24356] ? __pfx_ucma_write+0x10/0x10 [ 924.079551][T24356] do_writev+0xe9/0x210 [ 924.079595][T24356] __x64_sys_writev+0x45/0x50 [ 924.079621][T24356] x64_sys_call+0x1c0c/0x3020 [ 924.079647][T24356] do_syscall_64+0x136/0x3c0 [ 924.079718][T24356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.079746][T24356] RIP: 0033:0x7f7a810ade99 [ 924.079767][T24356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.079791][T24356] RSP: 002b:00007f7a7fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 924.079898][T24356] RAX: ffffffffffffffda RBX: 00007f7a81335fa0 RCX: 00007f7a810ade99 [ 924.079921][T24356] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 924.079954][T24356] RBP: 00007f7a7fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 924.079971][T24356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.079984][T24356] R13: 00007f7a81336038 R14: 00007f7a81335fa0 R15: 00007ffeee577308 [ 924.080004][T24356] [ 924.284933][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.331357][T24362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5619'. [ 924.586306][T24376] tipc: Cannot configure node identity twice [ 924.596572][T24376] tipc: Enabling of bearer rejected, failed to enable media [ 924.714981][T24369] syz.2.5619 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 924.795787][T24381] loop7: detected capacity change from 0 to 128 [ 925.094502][T24369] CPU: 0 UID: 0 PID: 24369 Comm: syz.2.5619 Not tainted syzkaller #0 PREEMPT(lazy) [ 925.094537][T24369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 925.094551][T24369] Call Trace: [ 925.094610][T24369] [ 925.094622][T24369] __dump_stack+0x1d/0x30 [ 925.094656][T24369] dump_stack_lvl+0x95/0xd0 [ 925.094683][T24369] dump_stack+0x15/0x1b [ 925.094710][T24369] dump_header+0x80/0x240 [ 925.094821][T24369] oom_kill_process+0x295/0x350 [ 925.094928][T24369] out_of_memory+0x981/0xbc0 [ 925.095031][T24369] try_charge_memcg+0x621/0xa00 [ 925.095052][T24369] ? __rcu_read_unlock+0x4e/0x70 [ 925.095096][T24369] __memcg_kmem_charge_page+0x199/0x3a0 [ 925.095217][T24369] __alloc_frozen_pages_noprof+0x18a/0x350 [ 925.095261][T24369] alloc_pages_mpol+0xa9/0x1d0 [ 925.095369][T24369] alloc_pages_noprof+0x8f/0x140 [ 925.095411][T24369] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 925.095507][T24369] __kvmalloc_node_noprof+0x3a0/0x590 [ 925.095591][T24369] ? futex_hash_allocate+0x192/0x920 [ 925.095617][T24369] ? futex_hash_allocate+0x192/0x920 [ 925.095679][T24369] ? futex_hash_allocate+0x192/0x920 [ 925.095706][T24369] futex_hash_allocate+0x192/0x920 [ 925.095732][T24369] ? cap_task_prctl+0x13f/0x6b0 [ 925.095807][T24369] futex_hash_prctl+0xd8/0xf0 [ 925.095829][T24369] __se_sys_prctl+0x4f4/0x13b0 [ 925.095867][T24369] __x64_sys_prctl+0x67/0x80 [ 925.095902][T24369] x64_sys_call+0x2533/0x3020 [ 925.096007][T24369] do_syscall_64+0x136/0x3c0 [ 925.096043][T24369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.096076][T24369] RIP: 0033:0x7f7a810ade99 [ 925.096097][T24369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.096197][T24369] RSP: 002b:00007f7a7fac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 925.096228][T24369] RAX: ffffffffffffffda RBX: 00007f7a81336180 RCX: 00007f7a810ade99 [ 925.096250][T24369] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 925.096274][T24369] RBP: 00007f7a81143eaf R08: 0000000000000000 R09: 0000000000000000 [ 925.096288][T24369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.096306][T24369] R13: 00007f7a81336218 R14: 00007f7a81336180 R15: 00007ffeee577308 [ 925.096389][T24369] [ 925.097258][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.101950][T24369] memory: usage 307200kB, limit 307200kB, failcnt 146 [ 925.353853][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.363545][T24369] memory+swap: usage 271236kB, limit 9007199254740988kB, failcnt 0 [ 925.374182][T24369] kmem: usage 249992kB, limit 9007199254740988kB, failcnt 0 [ 925.511087][T24369] Memory cgroup stats for /syz2: [ 925.511378][T24369] cache 0 [ 925.520035][T24369] rss 28672 [ 925.530616][T24369] shmem 0 [ 925.540218][T24369] mapped_file 0 [ 925.544073][T24369] dirty 0 [ 925.547069][T24369] writeback 0 [ 925.550455][T24369] workingset_refault_anon 39 [ 925.555551][T24369] workingset_refault_file 0 [ 925.624091][T24396] loop7: detected capacity change from 0 to 128 [ 925.729573][T24369] swap 106496 [ 925.819936][T24369] swapcached 503808 [ 925.919257][T24369] pgpgin 180204 [ 925.991274][T24369] pgpgout 180181 [ 926.038043][T24369] pgfault 229613 [ 926.156934][T24369] pgmajfault 21 [ 926.232296][T24369] inactive_anon 90112 [ 926.255234][T24369] active_anon 0 [ 926.271006][T24369] inactive_file 0 [ 926.283904][T24369] active_file 0 [ 926.302269][T24369] unevictable 0 [ 926.315913][T24369] hierarchical_memory_limit 314572800 [ 926.341738][T24369] hierarchical_memsw_limit 9223372036854771712 [ 926.366158][T24369] total_cache 0 [ 926.384317][T24369] total_rss 28672 [ 926.402376][T24369] total_shmem 0 [ 926.417978][T24369] total_mapped_file 0 [ 926.438120][T24369] total_dirty 0 [ 926.451073][T24369] total_writeback 0 [ 926.468210][T24369] total_workingset_refault_anon 39 [ 926.488704][T24369] total_workingset_refault_file 0 [ 926.502463][T24369] total_swap 106496 [ 926.512674][T24398] loop2: detected capacity change from 0 to 512 [ 926.514229][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.527781][T24369] total_swapcached 503808 [ 926.534266][T23157] ffs_data_put(): freeing [ 926.548571][T24369] total_pgpgin 180204 [ 926.566158][T24398] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 926.647694][T24406] loop3: detected capacity change from 0 to 512 [ 926.677600][T24369] total_pgpgout 180181 [ 926.695438][T24406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.703755][T24369] total_pgfault 229625 [ 926.716717][T24369] total_pgmajfault 28 [ 926.737805][T24406] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 926.747693][T24369] total_inactive_anon 90112 [ 926.759555][T24398] EXT4-fs: error: could not find journal device path [ 926.779552][T24369] total_active_anon 0 [ 926.785440][T24369] total_inactive_file 0 [ 926.832211][T24369] total_active_file 0 [ 926.860530][T24369] total_unevictable 0 [ 926.864629][T24369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2/syz0,task=syz.2.5619,pid=24361,uid=0 [ 926.879858][T24369] Memory cgroup out of memory: Killed process 24361 (syz.2.5619) total-vm:100596kB, anon-rss:5492kB, file-rss:26456kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 926.947355][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 926.947374][ T28] audit: type=1400 audit(2000000718.195:1306): avc: denied { write } for pid=24385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.006945][ T7052] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.077585][ T28] audit: type=1400 audit(2000000718.365:1307): avc: denied { write } for pid=24415 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.135040][T24418] loop2: detected capacity change from 0 to 2048 [ 927.143981][ T7052] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.258762][ T7052] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.357707][ T7052] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.386754][T24418] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 927.457424][T24418] syzkaller0: entered promiscuous mode [ 927.463011][T24418] syzkaller0: entered allmulticast mode [ 927.470006][ T28] audit: type=1400 audit(2000000718.745:1308): avc: denied { write } for pid=24405 comm="syz.3.5635" name="file2" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 927.528296][T24441] loop9: detected capacity change from 0 to 128 [ 927.573751][ T28] audit: type=1400 audit(2000000718.745:1309): avc: denied { open } for pid=24405 comm="syz.3.5635" path="/41/file2" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 927.592775][T24444] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 927.612986][T24438] tipc: Cannot configure node identity twice [ 927.619284][T24438] tipc: Enabling of bearer rejected, failed to enable media [ 927.631489][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.662366][ T28] audit: type=1400 audit(2000000718.745:1310): avc: denied { ioctl } for pid=24405 comm="syz.3.5635" path="/41/file2" dev="tmpfs" ino=241 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 927.739008][ T7052] bridge_slave_1: left allmulticast mode [ 927.741367][ T28] audit: type=1400 audit(2000000718.805:1311): avc: denied { write } for pid=24420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.757521][ T7052] bridge_slave_1: left promiscuous mode [ 927.773037][ T28] audit: type=1400 audit(2000000718.935:1312): avc: denied { write } for pid=24447 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.800571][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.809435][ T7052] bridge_slave_0: left allmulticast mode [ 927.815347][ T7052] bridge_slave_0: left promiscuous mode [ 927.821822][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.822905][T24458] loop2: detected capacity change from 0 to 128 [ 927.839894][T24458] syz.2.5639: attempt to access beyond end of device [ 927.839894][T24458] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 927.856424][T24458] syz.2.5639: attempt to access beyond end of device [ 927.856424][T24458] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 927.874663][T24458] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 927.883430][T24458] syz.2.5639: attempt to access beyond end of device [ 927.883430][T24458] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 927.884768][T24460] loop7: detected capacity change from 0 to 1024 [ 927.904646][T24458] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 927.922131][T24458] syz.2.5639: attempt to access beyond end of device [ 927.922131][T24458] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 927.936708][T24458] syz.2.5639: attempt to access beyond end of device [ 927.936708][T24458] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 927.949003][T24461] program syz.2.5639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.951331][T24458] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 927.963955][T24460] EXT4-fs: Ignoring removed orlov option [ 927.969272][T24458] syz.2.5639: attempt to access beyond end of device [ 927.969272][T24458] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 927.988015][T24458] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 927.999481][T24458] syz.2.5639: attempt to access beyond end of device [ 927.999481][T24458] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 928.016065][T24458] syz.2.5639: attempt to access beyond end of device [ 928.016065][T24458] loop2: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 928.026882][T24460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.031210][T24458] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 928.050992][T24458] syz.2.5639: attempt to access beyond end of device [ 928.050992][T24458] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 928.066581][T24458] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 928.075605][T24458] syz.2.5639: attempt to access beyond end of device [ 928.075605][T24458] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 928.089782][T24458] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 928.100045][T24458] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 928.109336][T24458] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 928.118654][T24458] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 928.120786][T24460] netlink: 'syz.7.5640': attribute type 2 has an invalid length. [ 928.137945][ T7052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.152650][ T7052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.161795][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.163733][ T7052] bond0 (unregistering): Released all slaves [ 928.177471][T22164] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.245400][ T7052] tipc: Left network mode [ 928.376009][ T28] audit: type=1400 audit(2000000719.665:1313): avc: denied { write } for pid=24468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.428349][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5644'. [ 928.487165][ T28] audit: type=1400 audit(2000000719.765:1314): avc: denied { write } for pid=24488 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 928.534510][T24490] loop3: detected capacity change from 0 to 128 [ 928.662100][T24482] loop7: detected capacity change from 0 to 512 [ 928.818581][T24482] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #3: comm syz.7.5644: corrupted inode contents [ 928.836608][T24482] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 928.838053][T24482] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #3: comm syz.7.5644: mark_inode_dirty error [ 928.858967][T24482] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 928.861218][T24482] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #3: comm syz.7.5644: corrupted inode contents [ 928.882826][T24482] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 928.883310][T24482] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.5644: mark_inode_dirty error [ 928.903737][T24482] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 928.904246][T24482] Quota error (device loop7): write_blk: dquota write failed [ 928.913791][ C1] EXT4-fs (loop7): error count since last fsck: 4 [ 928.913941][ C1] EXT4-fs (loop7): initial error at time 2000000720: ext4_do_update_inode:5742: inode 3 [ 928.914141][ C1] EXT4-fs (loop7): last error at time 2000000720: __ext4_ext_dirty:207: inode 3 [ 929.032591][T24501] FAULT_INJECTION: forcing a failure. [ 929.032591][T24501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.045727][T24501] CPU: 1 UID: 0 PID: 24501 Comm: syz.9.5646 Not tainted syzkaller #0 PREEMPT(lazy) [ 929.045759][T24501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 929.045773][T24501] Call Trace: [ 929.045781][T24501] [ 929.045869][T24501] __dump_stack+0x1d/0x30 [ 929.045919][T24501] dump_stack_lvl+0x95/0xd0 [ 929.045989][T24501] dump_stack+0x15/0x1b [ 929.046035][T24501] should_fail_ex+0x25e/0x270 [ 929.046119][T24501] should_fail+0xb/0x20 [ 929.046156][T24501] should_fail_usercopy+0x1a/0x20 [ 929.046218][T24501] _copy_to_iter+0xd2/0xea0 [ 929.046264][T24501] ? eventfd_read+0x265/0x3f0 [ 929.046301][T24501] eventfd_read+0x28b/0x3f0 [ 929.046349][T24501] ? __pfx_eventfd_read+0x10/0x10 [ 929.046443][T24501] __io_read+0x44e/0xbd0 [ 929.046472][T24501] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 929.046587][T24501] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 929.046625][T24501] ? irqentry_exit+0x7d/0x610 [ 929.046715][T24501] ? avc_has_perm_noaudit+0xa3/0x120 [ 929.046748][T24501] io_read+0x4a/0x1b0 [ 929.046771][T24501] __io_issue_sqe+0xfd/0x2e0 [ 929.046794][T24501] io_issue_sqe+0x1e7/0xb80 [ 929.046825][T24501] io_req_task_submit+0x46/0xa0 [ 929.046849][T24501] io_poll_task_func+0x615/0x7e0 [ 929.046919][T24501] ? __pfx_io_poll_task_func+0x10/0x10 [ 929.046952][T24501] tctx_task_work_run+0x2d6/0x500 [ 929.046993][T24501] tctx_task_work+0x3f/0x60 [ 929.047027][T24501] task_work_run+0x130/0x1a0 [ 929.047077][T24501] get_signal+0xdc1/0xf10 [ 929.047177][T24501] ? __wake_up_locked_key+0x3d/0x60 [ 929.047206][T24501] ? _raw_spin_unlock_irq+0x9/0x30 [ 929.047239][T24501] arch_do_signal_or_restart+0x96/0x480 [ 929.047353][T24501] exit_to_user_mode_loop+0x15d/0x8c0 [ 929.047380][T24501] ? ksys_write+0x194/0x1a0 [ 929.047408][T24501] do_syscall_64+0x23c/0x3c0 [ 929.047439][T24501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.047533][T24501] RIP: 0033:0x7fd97159de99 [ 929.047593][T24501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.047633][T24501] RSP: 002b:00007fd96fff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.047656][T24501] RAX: 0000000000000008 RBX: 00007fd971825fa0 RCX: 00007fd97159de99 [ 929.047670][T24501] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 929.047683][T24501] RBP: 00007fd96fff7090 R08: 0000000000000000 R09: 0000000000000000 [ 929.047701][T24501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.047718][T24501] R13: 00007fd971826038 R14: 00007fd971825fa0 R15: 00007ffd001b5968 [ 929.047761][T24501] [ 929.357194][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.403096][ T7080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.455258][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.554215][T24482] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.5644: Failed to acquire dquot type 0 [ 929.565491][T24482] loop7: lost filesystem error report for type 5 error -117 [ 929.572931][ T7052] hsr_slave_0: left promiscuous mode [ 929.614640][T24482] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.5644: corrupted inode contents [ 929.626595][T24482] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 929.627866][ T7052] hsr_slave_1: left promiscuous mode [ 929.642908][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.650355][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.667436][T24511] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5647'. [ 929.678926][T24507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=24507 comm=syz.9.5647 [ 929.692145][T24482] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.5644: mark_inode_dirty error [ 929.830391][T24482] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 929.835667][T24482] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.5644: corrupted inode contents [ 929.856694][T24482] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 929.857242][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.873961][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.898365][T24482] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.5644: mark_inode_dirty error [ 929.923154][ T7052] veth1_macvtap: left promiscuous mode [ 929.929986][ T7052] veth0_macvtap: left promiscuous mode [ 929.936769][ T7052] veth1_vlan: left promiscuous mode [ 929.943965][T24482] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 929.946260][ T7052] veth0_vlan: left promiscuous mode [ 929.961883][T24482] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.5644: corrupted inode contents [ 930.014245][T24482] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 930.030017][T24482] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 930.047807][T24482] loop7: lost filesystem error report for type 5 error -117 [ 930.117799][T24482] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.5644: corrupted inode contents [ 930.156907][T24523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5648'. [ 930.197681][T24482] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 930.197873][T24482] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.5644: mark_inode_dirty error [ 930.218647][ T7052] team0 (unregistering): Port device team_slave_1 removed [ 930.229290][ T7052] team0 (unregistering): Port device team_slave_0 removed [ 930.246408][T24482] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 930.261672][T24482] loop7: lost filesystem error report for type 5 error -117 [ 930.278617][T24482] EXT4-fs (loop7): 1 truncate cleaned up [ 930.361596][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.434469][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.563129][T24482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.579486][T24482] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.607023][T24482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5644'. [ 930.628176][T24482] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #3: comm syz.7.5644: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 930.628176][T24482] [ 930.653079][T24532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5651'. [ 930.668706][T24532] vlan2: entered promiscuous mode [ 930.673891][T24532] gretap0: entered promiscuous mode [ 930.775341][T24421] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.842712][T24543] loop3: detected capacity change from 0 to 128 [ 930.941124][T24421] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.012625][T24421] bridge_slave_0: entered allmulticast mode [ 931.081999][T24421] bridge_slave_0: entered promiscuous mode [ 931.158265][T24421] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.192036][T24421] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.205789][T24482] syz.7.5644 (24482) used greatest stack depth: 8448 bytes left [ 931.246847][T24421] bridge_slave_1: entered allmulticast mode [ 931.310496][T24421] bridge_slave_1: entered promiscuous mode [ 931.506962][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.524183][T22164] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.579596][T24555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.597720][T24421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.610255][T24555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.627792][T24421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.645728][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 931.690256][T24421] team0: Port device team_slave_0 added [ 931.705582][T24421] team0: Port device team_slave_1 added [ 931.710679][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.719724][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.774382][T24559] netlink: 'syz.7.5653': attribute type 2 has an invalid length. [ 931.793645][T24421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.802797][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.883846][T24421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.914022][T24421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.930416][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.994749][T24421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.051804][T24421] hsr_slave_0: entered promiscuous mode [ 932.068291][T24421] hsr_slave_1: entered promiscuous mode [ 932.084079][T24421] debugfs: 'hsr0' already exists in 'hsr' [ 932.101590][T24421] Cannot create hsr debugfs directory [ 932.326624][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 932.326649][ T28] audit: type=1400 audit(2000000723.615:1320): avc: denied { write } for pid=24560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.432152][ T28] audit: type=1400 audit(2000000723.705:1321): avc: denied { write } for pid=24582 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.505796][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 932.625981][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.930232][T24602] loop3: detected capacity change from 0 to 128 [ 933.758650][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.813334][T24605] loop7: detected capacity change from 0 to 128 [ 934.622265][T24606] loop9: detected capacity change from 0 to 128 [ 934.727465][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.902190][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.914435][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.923983][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.748507][ T28] audit: type=1400 audit(2000000727.035:1322): avc: denied { write } for pid=24597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.904033][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.964155][ T28] audit: type=1400 audit(2000000728.185:1323): avc: denied { write } for pid=24616 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.992395][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.085056][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.093788][T24621] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5665'. [ 937.107884][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 937.146216][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.193413][T24421] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 937.230716][T24421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.256766][T24421] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 937.288884][T24421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.329700][T24421] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 937.362806][T24421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.370916][T24421] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 937.386700][T24421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.542164][ T28] audit: type=1400 audit(2000000728.795:1324): avc: denied { write } for pid=24627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.561144][T24421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.577013][T24421] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.590149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.597345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.606678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.613799][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.625672][ T28] audit: type=1400 audit(2000000728.795:1325): avc: denied { write } for pid=24650 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.712563][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 937.752452][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.957038][T24421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.987694][T24675] loop7: detected capacity change from 0 to 2048 [ 938.022403][ T28] audit: type=1400 audit(2000000729.305:1326): avc: denied { write } for pid=24658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.128818][ T28] audit: type=1400 audit(2000000729.415:1327): avc: denied { write } for pid=24684 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.147219][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.176582][ T7060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.216827][T24675] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 938.304006][T24675] syzkaller0: entered promiscuous mode [ 938.311615][T24675] syzkaller0: entered allmulticast mode [ 938.445115][ T28] audit: type=1400 audit(2000000729.705:1328): avc: denied { write } for pid=24692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.446561][T24421] veth0_vlan: entered promiscuous mode [ 938.478612][T24421] veth1_vlan: entered promiscuous mode [ 938.502161][ T28] audit: type=1400 audit(2000000729.785:1329): avc: denied { write } for pid=24708 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.553179][ T28] audit: type=1400 audit(2000000729.835:1330): avc: denied { view } for pid=24705 comm="syz.9.5675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 938.610702][T24421] veth0_macvtap: entered promiscuous mode [ 938.621672][T24421] veth1_macvtap: entered promiscuous mode [ 938.708539][T24421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.751527][T24421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.813135][ T7080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.822790][ T7080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.156952][ T7080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.167551][ T7080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.189293][ T28] audit: type=1400 audit(2000000730.475:1331): avc: denied { write } for pid=24713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.283323][T24730] loop3: detected capacity change from 0 to 128 [ 939.388787][ T7060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.164255][ T28] audit: type=1400 audit(2000000730.765:1332): avc: denied { write } for pid=24729 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.594320][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.648328][ T7060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.681307][T24737] loop9: detected capacity change from 0 to 128 [ 941.167654][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.179737][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.660567][ T7052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.090462][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.099753][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.149265][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.213339][ T28] audit: type=1400 audit(2000000733.495:1333): avc: denied { write } for pid=24741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.269556][ T7060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.381947][T24762] loop1: detected capacity change from 0 to 1024 [ 942.389379][T24762] EXT4-fs: Ignoring removed orlov option [ 942.583974][T24762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 942.684668][T24762] netlink: 'syz.1.5682': attribute type 2 has an invalid length. [ 943.615940][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.675025][T24690] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.682214][T24690] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.689533][T24690] bridge_slave_0: entered allmulticast mode [ 943.696213][T24690] bridge_slave_0: entered promiscuous mode [ 943.703767][T24790] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5685'. [ 943.773363][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 943.773383][ T28] audit: type=1400 audit(2000000735.045:1335): avc: denied { write } for pid=24770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.814277][ T7060] bridge_slave_1: left allmulticast mode [ 943.824295][ T7060] bridge_slave_1: left promiscuous mode [ 943.834691][T24421] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.843944][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.863353][ T7060] bridge_slave_0: left allmulticast mode [ 943.869151][ T7060] bridge_slave_0: left promiscuous mode [ 943.887026][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.901527][ T28] audit: type=1400 audit(2000000735.195:1336): avc: denied { associate } for pid=24796 comm="syz.7.5688" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 944.027450][ T28] audit: type=1400 audit(2000000735.245:1337): avc: denied { write } for pid=24799 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.145566][ T7060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.190037][ T7060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.210862][ T7060] bond0 (unregistering): Released all slaves [ 944.584150][ T28] audit: type=1400 audit(2000000735.865:1338): avc: denied { write } for pid=24804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.622402][T24690] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.630104][T24690] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.642454][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.660488][T24690] bridge_slave_1: entered allmulticast mode [ 944.706024][T24690] bridge_slave_1: entered promiscuous mode [ 944.751868][T24806] tipc: Started in network mode [ 944.758723][T24806] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 944.813732][ T7060] tipc: Left network mode [ 944.855327][T24810] tipc: Enabling of bearer rejected, failed to enable media [ 944.892152][ T28] audit: type=1400 audit(2000000736.175:1339): avc: denied { write } for pid=24823 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.952476][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.991058][T24690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.005345][T24690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.025433][T24690] team0: Port device team_slave_0 added [ 945.032579][T24690] team0: Port device team_slave_1 added [ 945.170808][T24836] loop1: detected capacity change from 0 to 128 [ 945.196560][T24838] program syz.9.5691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.206115][T24838] FAULT_INJECTION: forcing a failure. [ 945.206115][T24838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.219351][T24838] CPU: 0 UID: 0 PID: 24838 Comm: syz.9.5691 Not tainted syzkaller #0 PREEMPT(lazy) [ 945.219432][T24838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 945.219450][T24838] Call Trace: [ 945.219460][T24838] [ 945.219471][T24838] __dump_stack+0x1d/0x30 [ 945.219516][T24838] dump_stack_lvl+0x95/0xd0 [ 945.219608][T24838] dump_stack+0x15/0x1b [ 945.219641][T24838] should_fail_ex+0x25e/0x270 [ 945.219673][T24838] should_fail+0xb/0x20 [ 945.219715][T24838] should_fail_usercopy+0x1a/0x20 [ 945.219757][T24838] _copy_from_user+0x1c/0xb0 [ 945.219785][T24838] scsi_ioctl+0x13ac/0x1790 [ 945.219891][T24838] ? avc_has_perm+0x101/0x190 [ 945.219926][T24838] ? __file_has_perm+0x3d9/0x430 [ 945.219953][T24838] ? do_vfs_ioctl+0x848/0xe50 [ 945.219990][T24838] sg_ioctl+0xeae/0x1330 [ 945.220031][T24838] ? __pfx_sg_ioctl+0x10/0x10 [ 945.220071][T24838] __se_sys_ioctl+0xce/0x140 [ 945.220126][T24838] __x64_sys_ioctl+0x43/0x50 [ 945.220170][T24838] x64_sys_call+0x1563/0x3020 [ 945.220205][T24838] do_syscall_64+0x136/0x3c0 [ 945.220279][T24838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.220308][T24838] RIP: 0033:0x7fd97159de99 [ 945.220330][T24838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.220356][T24838] RSP: 002b:00007fd96fff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.220433][T24838] RAX: ffffffffffffffda RBX: 00007fd971825fa0 RCX: 00007fd97159de99 [ 945.220448][T24838] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 945.220461][T24838] RBP: 00007fd96fff7090 R08: 0000000000000000 R09: 0000000000000000 [ 945.220475][T24838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.220492][T24838] R13: 00007fd971826038 R14: 00007fd971825fa0 R15: 00007ffd001b5968 [ 945.220530][T24838] [ 945.541102][ T7060] hsr_slave_0: left promiscuous mode [ 945.549987][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.574382][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.597680][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.605129][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.637870][ T28] audit: type=1400 audit(2000000736.915:1340): avc: denied { write } for pid=24827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.681266][ T7060] veth1_macvtap: left promiscuous mode [ 945.695026][ T7060] veth0_macvtap: left promiscuous mode [ 945.706641][ T28] audit: type=1400 audit(2000000736.955:1341): avc: denied { write } for pid=24858 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.729566][ T7060] veth1_vlan: left promiscuous mode [ 945.737353][ T7060] veth0_vlan: left promiscuous mode [ 945.824287][ T7060] team0 (unregistering): Port device team_slave_1 removed [ 945.836657][ T7060] team0 (unregistering): Port device team_slave_0 removed [ 945.900225][T24844] tipc: Cannot configure node identity twice [ 945.914833][T24849] tipc: Enabling of bearer rejected, failed to enable media [ 945.941885][T24690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.949480][T24690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.995876][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.010785][T24690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.048874][T24862] loop3: detected capacity change from 0 to 2048 [ 946.074243][T24690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.098090][T24866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5696'. [ 946.134053][T24690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.168722][T24866] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5696'. [ 946.200508][T24690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.220660][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5696'. [ 946.235947][T24871] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5696'. [ 946.255865][T24862] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 946.280686][ T28] audit: type=1400 audit(2000000737.565:1342): avc: denied { create } for pid=24865 comm="syz.7.5696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 946.383208][T24690] hsr_slave_0: entered promiscuous mode [ 946.399397][ T28] audit: type=1400 audit(2000000737.625:1343): avc: denied { getopt } for pid=24865 comm="syz.7.5696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 946.431617][T24690] hsr_slave_1: entered promiscuous mode [ 946.539989][T24879] program syz.7.5698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.745888][T24883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 946.755322][T24883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5699'. [ 946.768028][T24883] dvmrp0: entered allmulticast mode [ 946.828151][ T7060] IPVS: stop unused estimator thread 0... [ 946.972958][T24887] program syz.3.5701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.033070][ T28] audit: type=1400 audit(2000000738.225:1344): avc: denied { write } for pid=24863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 947.060396][T24893] FAULT_INJECTION: forcing a failure. [ 947.060396][T24893] name failslab, interval 1, probability 0, space 0, times 0 [ 947.073814][T24893] CPU: 0 UID: 0 PID: 24893 Comm: syz.1.5700 Not tainted syzkaller #0 PREEMPT(lazy) [ 947.073850][T24893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 947.073880][T24893] Call Trace: [ 947.073889][T24893] [ 947.073966][T24893] __dump_stack+0x1d/0x30 [ 947.073994][T24893] dump_stack_lvl+0x95/0xd0 [ 947.074045][T24893] dump_stack+0x15/0x1b [ 947.074071][T24893] should_fail_ex+0x25e/0x270 [ 947.074127][T24893] should_failslab+0x8c/0xb0 [ 947.074160][T24893] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 947.074313][T24893] ? __kernfs_new_node+0x70/0x440 [ 947.074335][T24893] ? __kernfs_new_node+0x70/0x440 [ 947.074476][T24893] __kernfs_new_node+0x70/0x440 [ 947.074512][T24893] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 947.074558][T24893] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 947.074641][T24893] ? __percpu_counter_sum+0x119/0x140 [ 947.074733][T24893] kernfs_create_dir_ns+0xd0/0x170 [ 947.074768][T24893] internal_create_group+0x2b4/0x9e0 [ 947.074819][T24893] ? mutex_unlock+0x4e/0x90 [ 947.074851][T24893] ? sync_lazytime+0x45/0x1d0 [ 947.074967][T24893] sysfs_create_group+0x1f/0x30 [ 947.075005][T24893] loop_configure+0x7ec/0x9c0 [ 947.075055][T24893] lo_ioctl+0x5a6/0x1390 [ 947.075136][T24893] ? blkdev_common_ioctl+0xbf8/0x2060 [ 947.075230][T24893] ? do_vfs_ioctl+0x848/0xe50 [ 947.075312][T24893] ? selinux_file_ioctl+0x33c/0x3c0 [ 947.075354][T24893] ? __pfx_lo_ioctl+0x10/0x10 [ 947.075387][T24893] ? __pfx_blkdev_ioctl+0x10/0x10 [ 947.075469][T24893] blkdev_ioctl+0x387/0x460 [ 947.075504][T24893] ? __pfx_blkdev_ioctl+0x10/0x10 [ 947.075538][T24893] __se_sys_ioctl+0xce/0x140 [ 947.075614][T24893] __x64_sys_ioctl+0x43/0x50 [ 947.075647][T24893] x64_sys_call+0x1563/0x3020 [ 947.075678][T24893] do_syscall_64+0x136/0x3c0 [ 947.075712][T24893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.075819][T24893] RIP: 0033:0x7fe8cb20de99 [ 947.075840][T24893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.075860][T24893] RSP: 002b:00007fe8c9c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.075963][T24893] RAX: ffffffffffffffda RBX: 00007fe8cb495fa0 RCX: 00007fe8cb20de99 [ 947.075982][T24893] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 947.076009][T24893] RBP: 00007fe8c9c67090 R08: 0000000000000000 R09: 0000000000000000 [ 947.076049][T24893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.076068][T24893] R13: 00007fe8cb496038 R14: 00007fe8cb495fa0 R15: 00007ffef0838d98 [ 947.076093][T24893] [ 947.142049][T24893] loop2: detected capacity change from 0 to 7 [ 947.149917][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.498306][T24910] tipc: Started in network mode [ 947.503364][T24910] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 947.511819][T24910] tipc: Enabling of bearer rejected, failed to enable media [ 947.545778][T24922] program syz.1.5706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.555055][T24922] FAULT_INJECTION: forcing a failure. [ 947.555055][T24922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.569653][T24922] CPU: 1 UID: 0 PID: 24922 Comm: syz.1.5706 Not tainted syzkaller #0 PREEMPT(lazy) [ 947.569691][T24922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 947.569712][T24922] Call Trace: [ 947.569721][T24922] [ 947.569732][T24922] __dump_stack+0x1d/0x30 [ 947.569763][T24922] dump_stack_lvl+0x95/0xd0 [ 947.569790][T24922] dump_stack+0x15/0x1b [ 947.569847][T24922] should_fail_ex+0x25e/0x270 [ 947.569973][T24922] should_fail+0xb/0x20 [ 947.570048][T24922] should_fail_usercopy+0x1a/0x20 [ 947.570090][T24922] _copy_from_user+0x1c/0xb0 [ 947.570111][T24922] scsi_ioctl+0x13ac/0x1790 [ 947.570136][T24922] ? avc_has_perm+0x101/0x190 [ 947.570189][T24922] ? __file_has_perm+0x3d9/0x430 [ 947.570215][T24922] ? do_vfs_ioctl+0x848/0xe50 [ 947.570246][T24922] sg_ioctl+0xeae/0x1330 [ 947.570284][T24922] ? __pfx_sg_ioctl+0x10/0x10 [ 947.570315][T24922] __se_sys_ioctl+0xce/0x140 [ 947.570344][T24922] __x64_sys_ioctl+0x43/0x50 [ 947.570365][T24922] x64_sys_call+0x1563/0x3020 [ 947.570466][T24922] do_syscall_64+0x136/0x3c0 [ 947.570578][T24922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.570601][T24922] RIP: 0033:0x7fe8cb20de99 [ 947.570621][T24922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.570725][T24922] RSP: 002b:00007fe8c9c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.570748][T24922] RAX: ffffffffffffffda RBX: 00007fe8cb495fa0 RCX: 00007fe8cb20de99 [ 947.570766][T24922] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 947.570781][T24922] RBP: 00007fe8c9c67090 R08: 0000000000000000 R09: 0000000000000000 [ 947.570840][T24922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.570853][T24922] R13: 00007fe8cb496038 R14: 00007fe8cb495fa0 R15: 00007ffef0838d98 [ 947.570878][T24922] [ 947.759519][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.924251][T24937] loop9: detected capacity change from 0 to 512 [ 948.026153][T24947] loop1: detected capacity change from 0 to 128 [ 948.051764][T24937] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 948.059846][T24937] System zones: 0-2, 18-18, 34-35 [ 948.127185][T24937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.139823][T24937] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.254269][T24959] FAULT_INJECTION: forcing a failure. [ 948.254269][T24959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.279034][T24959] CPU: 1 UID: 0 PID: 24959 Comm: syz.3.5713 Not tainted syzkaller #0 PREEMPT(lazy) [ 948.279079][T24959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 948.279097][T24959] Call Trace: [ 948.279107][T24959] [ 948.279116][T24959] __dump_stack+0x1d/0x30 [ 948.279142][T24959] dump_stack_lvl+0x95/0xd0 [ 948.279201][T24959] dump_stack+0x15/0x1b [ 948.279221][T24959] should_fail_ex+0x25e/0x270 [ 948.279253][T24959] should_fail+0xb/0x20 [ 948.279351][T24959] should_fail_usercopy+0x1a/0x20 [ 948.279385][T24959] _copy_from_iter+0xcc/0xe70 [ 948.279425][T24959] ? should_failslab+0x8c/0xb0 [ 948.279451][T24959] ? __kmalloc_noprof+0x1f3/0x4a0 [ 948.279491][T24959] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 948.279526][T24959] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 948.279563][T24959] kernfs_fop_write_iter+0x117/0x2e0 [ 948.279592][T24959] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 948.279760][T24959] vfs_write+0x57d/0x990 [ 948.279787][T24959] ksys_write+0xdc/0x1a0 [ 948.279809][T24959] __x64_sys_write+0x40/0x50 [ 948.279830][T24959] x64_sys_call+0x27e1/0x3020 [ 948.279896][T24959] do_syscall_64+0x136/0x3c0 [ 948.279923][T24959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.279947][T24959] RIP: 0033:0x7f97075bde99 [ 948.280038][T24959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.280066][T24959] RSP: 002b:00007f9706017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.280155][T24959] RAX: ffffffffffffffda RBX: 00007f9707845fa0 RCX: 00007f97075bde99 [ 948.280173][T24959] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 948.280191][T24959] RBP: 00007f9706017090 R08: 0000000000000000 R09: 0000000000000000 [ 948.280209][T24959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.280225][T24959] R13: 00007f9707846038 R14: 00007f9707845fa0 R15: 00007ffcfa660648 [ 948.280253][T24959] [ 948.587317][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5714'. [ 948.810617][T24988] usbip_vudc: v_rx exit with error -32 [ 948.813533][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 948.813554][ T28] audit: type=1400 audit(2000000740.105:1352): avc: denied { write } for pid=24976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.838063][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.936686][T23157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.951859][ T28] audit: type=1400 audit(2000000740.215:1353): avc: denied { write } for pid=24991 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.053578][T24690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 949.067858][T24690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.084216][T24690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 949.101464][T24690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.119125][T24690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 949.144806][T24690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.155463][T24690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 949.179068][ T28] audit: type=1400 audit(2000000740.465:1354): avc: denied { write } for pid=24995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.206369][T24690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.245093][ T28] audit: type=1400 audit(2000000740.525:1355): avc: denied { write } for pid=25009 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.304604][T24690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.364191][T24690] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.388612][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.395791][ T7060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.416605][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.423781][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.516158][ T28] audit: type=1400 audit(2000000740.805:1356): avc: denied { write } for pid=25016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.599583][ T28] audit: type=1400 audit(2000000740.875:1357): avc: denied { write } for pid=25031 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.720697][T24690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.838320][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.847948][T24690] veth0_vlan: entered promiscuous mode [ 949.856526][T24690] veth1_vlan: entered promiscuous mode [ 949.870437][T24690] veth0_macvtap: entered promiscuous mode [ 949.878485][T24690] veth1_macvtap: entered promiscuous mode [ 949.890044][T24690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.913919][T25062] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 949.920703][T25062] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 949.928148][T25062] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 949.939472][T25063] FAULT_INJECTION: forcing a failure. [ 949.939472][T25063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.943818][ T28] audit: type=1400 audit(2000000741.195:1358): avc: denied { write } for pid=25035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.978342][T25063] CPU: 1 UID: 0 PID: 25063 Comm: syz.7.5720 Not tainted syzkaller #0 PREEMPT(lazy) [ 949.978371][T25063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 949.978395][T25063] Call Trace: [ 949.978405][T25063] [ 949.978461][T25063] __dump_stack+0x1d/0x30 [ 949.978493][T25063] dump_stack_lvl+0x95/0xd0 [ 949.978521][T25063] dump_stack+0x15/0x1b [ 949.978548][T25063] should_fail_ex+0x25e/0x270 [ 949.978583][T25063] should_fail+0xb/0x20 [ 949.978723][T25063] should_fail_usercopy+0x1a/0x20 [ 949.978767][T25063] _copy_to_user+0x20/0xa0 [ 949.978796][T25063] simple_read_from_buffer+0xb5/0x130 [ 949.978854][T25063] proc_fail_nth_read+0x10e/0x150 [ 949.978962][T25063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 949.978995][T25063] vfs_read+0x18e/0x7c0 [ 949.979123][T25063] ? __rcu_read_unlock+0x4e/0x70 [ 949.979161][T25063] ? __fget_files+0x184/0x1c0 [ 949.979195][T25063] ? mutex_lock+0x57/0x90 [ 949.979230][T25063] ksys_read+0xdc/0x1a0 [ 949.979315][T25063] __x64_sys_read+0x40/0x50 [ 949.979423][T25063] x64_sys_call+0x2886/0x3020 [ 949.979451][T25063] do_syscall_64+0x136/0x3c0 [ 949.979477][T25063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.979571][T25063] RIP: 0033:0x7fe6465be6ce [ 949.979591][T25063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 949.979617][T25063] RSP: 002b:00007fe645056fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 949.979705][T25063] RAX: ffffffffffffffda RBX: 00007fe6450576c0 RCX: 00007fe6465be6ce [ 949.979728][T25063] RDX: 000000000000000f RSI: 00007fe6450570a0 RDI: 0000000000000005 [ 949.979746][T25063] RBP: 00007fe645057090 R08: 0000000000000000 R09: 0000000000000000 [ 949.979764][T25063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.979838][T25063] R13: 00007fe646886038 R14: 00007fe646885fa0 R15: 00007ffc7b288538 [ 949.979865][T25063] [ 950.178031][T25068] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 950.184889][T25068] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 950.189185][T24690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.208266][T25062] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 950.222561][T25062] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 950.229818][T25068] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 950.238381][T25068] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 950.246203][T25062] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 950.256105][ T7060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.265303][ T7060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.266245][T25066] FAULT_INJECTION: forcing a failure. [ 950.266245][T25066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.288077][T25068] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 950.298431][ T7060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.305608][T25068] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 950.307922][ T7060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.320090][T25066] CPU: 0 UID: 0 PID: 25066 Comm: syz.1.5721 Not tainted syzkaller #0 PREEMPT(lazy) [ 950.320187][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 950.320202][T25066] Call Trace: [ 950.320209][T25066] [ 950.320271][T25066] __dump_stack+0x1d/0x30 [ 950.320470][T25066] dump_stack_lvl+0x95/0xd0 [ 950.320576][T25066] dump_stack+0x15/0x1b [ 950.320641][T25066] should_fail_ex+0x25e/0x270 [ 950.320754][T25066] should_fail+0xb/0x20 [ 950.320848][T25066] should_fail_usercopy+0x1a/0x20 [ 950.321026][T25066] _copy_from_iter+0xcc/0xe70 [ 950.321141][T25066] ? should_failslab+0x8c/0xb0 [ 950.321223][T25066] ? __kmalloc_noprof+0x1f3/0x4a0 [ 950.321326][T25066] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 950.321477][T25066] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 950.321585][T25066] kernfs_fop_write_iter+0x117/0x2e0 [ 950.321702][T25066] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 950.321833][T25066] vfs_write+0x57d/0x990 [ 950.321917][T25066] ksys_write+0xdc/0x1a0 [ 950.321990][T25066] __x64_sys_write+0x40/0x50 [ 950.322117][T25066] x64_sys_call+0x27e1/0x3020 [ 950.322209][T25066] do_syscall_64+0x136/0x3c0 [ 950.322332][T25066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.322411][T25066] RIP: 0033:0x7fe8cb20de99 [ 950.322465][T25066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.322537][T25066] RSP: 002b:00007fe8c9c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 950.322674][T25066] RAX: ffffffffffffffda RBX: 00007fe8cb496090 RCX: 00007fe8cb20de99 [ 950.322726][T25066] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 950.322776][T25066] RBP: 00007fe8c9c46090 R08: 0000000000000000 R09: 0000000000000000 [ 950.322820][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.322863][T25066] R13: 00007fe8cb496128 R14: 00007fe8cb496090 R15: 00007ffef0838d98 [ 950.323008][T25066] [ 950.385746][ T28] audit: type=1400 audit(2000000741.625:1359): avc: denied { write } for pid=25070 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.405451][T25072] lvs 1-0:1.0: Bind LVS driver with SS root Hub only [ 950.551204][T25076] syzkaller0: entered promiscuous mode [ 950.559959][T25072] lvs 1-0:1.0: probe with driver lvs failed with error -22 [ 950.575552][T25076] syzkaller0: entered allmulticast mode [ 950.590389][T25072] lvs 3-0:1.0: Bind LVS driver with SS root Hub only [ 950.624786][T25072] lvs 3-0:1.0: probe with driver lvs failed with error -22 [ 950.644181][T25090] loop0: detected capacity change from 0 to 764 [ 950.656058][ T28] audit: type=1400 audit(2000000741.945:1360): avc: denied { remount } for pid=25089 comm="syz.0.5674" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 950.680319][T25072] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 950.687577][T25072] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 950.757025][ T28] audit: type=1400 audit(2000000741.975:1361): avc: denied { write } for pid=25077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 950.793782][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.866681][T25098] loop0: detected capacity change from 0 to 512 [ 950.925103][T25112] loop3: detected capacity change from 0 to 512 [ 950.974440][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.983317][T25098] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 950.991411][T25098] System zones: 0-2, 18-18, 34-35 [ 950.998327][T25098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.010904][T25098] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.037047][T25112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.050266][T25112] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.095948][T25111] loop9: detected capacity change from 0 to 512 [ 951.119971][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.132125][T24690] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.155902][T25111] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.9.5729: corrupted xattr block 95: invalid header [ 951.169742][T25111] fserror_report: 1 callbacks suppressed [ 951.169762][T25111] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 951.193722][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 951.206126][T25111] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5729: bg 0: block 7: invalid block bitmap [ 951.209751][ C1] EXT4-fs (loop9): initial error at time 2000000742: ext4_expand_extra_isize_ea:2810 [ 951.222104][T25111] loop9: lost filesystem error report for type 5 error -117 [ 951.228329][T25134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.231755][ C1] : inode 11 [ 951.239244][T25134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.247372][ C1] [ 951.260808][ C1] EXT4-fs (loop9): last error at time 2000000742: ext4_validate_block_bitmap:432 [ 951.278559][T25111] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 951.287330][T25111] loop9: lost filesystem error report for type 5 error -117 [ 951.288662][T25111] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.5729: corrupted xattr block 95: invalid header [ 951.318193][T25111] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 951.319577][T25111] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 951.344038][T25111] EXT4-fs (loop9): 1 orphan inode deleted [ 951.442498][T25111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.517299][T23157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.534687][T25158] FAULT_INJECTION: forcing a failure. [ 951.534687][T25158] name failslab, interval 1, probability 0, space 0, times 0 [ 951.548382][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.589094][T25158] CPU: 1 UID: 0 PID: 25158 Comm: syz.0.5738 Not tainted syzkaller #0 PREEMPT(lazy) [ 951.589168][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 951.589186][T25158] Call Trace: [ 951.589196][T25158] [ 951.589207][T25158] __dump_stack+0x1d/0x30 [ 951.589268][T25158] dump_stack_lvl+0x95/0xd0 [ 951.589304][T25158] dump_stack+0x15/0x1b [ 951.589330][T25158] should_fail_ex+0x25e/0x270 [ 951.589450][T25158] should_failslab+0x8c/0xb0 [ 951.589482][T25158] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 951.589515][T25158] ? __alloc_skb+0x2db/0x6f0 [ 951.589549][T25158] ? __alloc_skb+0x2db/0x6f0 [ 951.589662][T25158] ? avc_has_perm+0x101/0x190 [ 951.589687][T25158] __alloc_skb+0x2db/0x6f0 [ 951.589746][T25158] ? __alloc_skb+0x205/0x6f0 [ 951.589779][T25158] netlink_alloc_large_skb+0xbf/0xf0 [ 951.589813][T25158] netlink_sendmsg+0x40c/0x6f0 [ 951.589915][T25158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.590011][T25158] ____sys_sendmsg+0x532/0x580 [ 951.590050][T25158] ___sys_sendmsg+0x195/0x1e0 [ 951.590107][T25158] __x64_sys_sendmsg+0xd4/0x160 [ 951.590159][T25158] x64_sys_call+0x194c/0x3020 [ 951.590264][T25158] do_syscall_64+0x136/0x3c0 [ 951.590306][T25158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.590347][T25158] RIP: 0033:0x7fd17877de99 [ 951.590370][T25158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.590413][T25158] RSP: 002b:00007fd1771d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.590440][T25158] RAX: ffffffffffffffda RBX: 00007fd178a05fa0 RCX: 00007fd17877de99 [ 951.590526][T25158] RDX: 0000000000000000 RSI: 0000200000002280 RDI: 0000000000000003 [ 951.590546][T25158] RBP: 00007fd1771d7090 R08: 0000000000000000 R09: 0000000000000000 [ 951.590565][T25158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.590647][T25158] R13: 00007fd178a06038 R14: 00007fd178a05fa0 R15: 00007ffeb032b258 [ 951.590672][T25158] [ 951.623885][T24723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.801609][T24723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.973259][T25171] loop1: detected capacity change from 0 to 512 [ 952.072645][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.091902][T25171] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 952.099978][T25171] System zones: 0-2, 18-18, 34-35 [ 952.106197][T25171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.118734][T25171] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.201921][T25204] syzkaller0: entered promiscuous mode [ 952.212250][T25204] syzkaller0: entered allmulticast mode [ 952.289651][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.289873][ T7813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.321544][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.405198][T19131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.505532][T25230] loop9: detected capacity change from 0 to 512 [ 952.520308][T24421] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.723083][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.794496][T25253] loop1: detected capacity change from 0 to 1024 [ 952.818820][T25253] EXT4-fs: inline encryption not supported [ 952.916876][T25230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.938345][T25253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.950621][T25230] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.992195][T25253] batman_adv: batadv0: Adding interface: dummy0 [ 952.998526][T25253] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.010951][T25265] loop3: detected capacity change from 0 to 512 [ 953.028262][T25253] batman_adv: batadv0: Interface activated: dummy0 [ 953.037883][T23157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.044029][T25253] batadv0: mtu less than device minimum [ 953.077744][T24421] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.088782][T25265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.101946][T25265] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.158298][T25275] loop1: detected capacity change from 0 to 512 [ 953.195862][T25278] loop9: detected capacity change from 0 to 512 [ 953.219754][T25284] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5755'. [ 953.228968][T25284] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5755'. [ 953.257440][T25285] msdos: Unknown parameter 'dntn' [ 953.271611][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 953.288302][T25275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.301277][T25275] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.339377][T24421] ================================================================== [ 953.347537][T24421] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 953.354977][T24421] [ 953.357318][T24421] read-write to 0xffff88810d309fd8 of 8 bytes by interrupt on cpu 0: [ 953.365415][T24421] __xa_clear_mark+0xf5/0x1e0 [ 953.370126][T24421] __folio_end_writeback+0xf4/0x360 [ 953.375478][T24421] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 953.381770][T24421] folio_end_writeback+0x1c/0x70 [ 953.386786][T24421] bh_end_async_write+0x1a6/0x250 [ 953.391936][T24421] bio_endio+0x35b/0x3f0 [ 953.396221][T24421] blk_update_request+0x338/0x710 [ 953.401272][T24421] blk_mq_end_request+0x26/0x50 [ 953.406144][T24421] lo_complete_rq+0x98/0x130 [ 953.410775][T24421] blk_done_softirq+0x77/0xb0 [ 953.415488][T24421] handle_softirqs+0xb9/0x280 [ 953.420293][T24421] run_ksoftirqd+0x1c/0x30 [ 953.424739][T24421] smpboot_thread_fn+0x32a/0x510 [ 953.429753][T24421] kthread+0x221/0x270 [ 953.433850][T24421] ret_from_fork+0x146/0x330 [ 953.438499][T24421] ret_from_fork_asm+0x1a/0x30 [ 953.443293][T24421] [ 953.445745][T24421] read to 0xffff88810d309fd8 of 8 bytes by task 24421 on cpu 1: [ 953.453397][T24421] xas_find_marked+0x211/0x650 [ 953.458194][T24421] filemap_get_folios_tag+0xf7/0x400 [ 953.463513][T24421] filemap_write_and_wait_range+0x1f5/0x370 [ 953.469446][T24421] sync_blockdev+0x35/0x50 [ 953.473896][T24421] sync_filesystem+0x162/0x190 [ 953.478689][T24421] generic_shutdown_super+0x4c/0x220 [ 953.484026][T24421] kill_block_super+0x2a/0x70 [ 953.488752][T24421] ext4_kill_sb+0x42/0x80 [ 953.493124][T24421] deactivate_locked_super+0x75/0x1c0 [ 953.498533][T24421] deactivate_super+0x97/0xa0 [ 953.503248][T24421] cleanup_mnt+0x2c3/0x340 [ 953.507694][T24421] __cleanup_mnt+0x19/0x20 [ 953.512152][T24421] task_work_run+0x130/0x1a0 [ 953.516809][T24421] exit_to_user_mode_loop+0x1e4/0x8c0 [ 953.522217][T24421] do_syscall_64+0x23c/0x3c0 [ 953.526838][T24421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.532761][T24421] [ 953.535100][T24421] value changed: 0x000000043c000000 -> 0x0000000000000000 [ 953.542236][T24421] [ 953.544586][T24421] Reported by Kernel Concurrency Sanitizer on: [ 953.550759][T24421] CPU: 1 UID: 0 PID: 24421 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 953.560334][T24421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 953.570507][T24421] ================================================================== [ 953.583938][T24421] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.597337][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 953.605888][T25278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.623731][T25278] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.650051][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.696930][T25305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.708374][T25305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.719404][T23157] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.812425][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 953.889613][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 953.889631][ T28] audit: type=1400 audit(2000000745.175:1464): avc: denied { write } for pid=25318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.931609][ T28] audit: type=1400 audit(2000000745.215:1465): avc: denied { write } for pid=25329 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.965766][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 954.066007][ T28] audit: type=1400 audit(2000000745.355:1466): avc: denied { write } for pid=25337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.102244][ T28] audit: type=1400 audit(2000000745.385:1467): avc: denied { write } for pid=25348 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.198378][ T28] audit: type=1400 audit(2000000745.485:1468): avc: denied { write } for pid=25350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.232003][ T28] audit: type=1400 audit(2000000745.515:1469): avc: denied { write } for pid=25361 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.332412][ T28] audit: type=1400 audit(2000000745.625:1470): avc: denied { write } for pid=25363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.367481][ T28] audit: type=1400 audit(2000000745.655:1471): avc: denied { write } for pid=25374 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.495408][ T28] audit: type=1400 audit(2000000745.785:1472): avc: denied { write } for pid=25378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.529162][ T28] audit: type=1400 audit(2000000745.815:1473): avc: denied { write } for pid=25389 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.563589][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 955.272501][T25290] Bluetooth: hci0: command 0x1003 tx timeout [ 955.272861][ T4623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 956.722940][ T7907] net_ratelimit: 37 callbacks suppressed [ 956.722961][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.737175][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.032506][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.285485][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.433580][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.752897][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.761109][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.315095][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.392514][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.793289][ T7907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.124342][ T68] bridge_slave_1: left allmulticast mode [ 961.130161][ T68] bridge_slave_1: left promiscuous mode [ 961.136095][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.144760][ T68] bridge_slave_0: left allmulticast mode [ 961.150497][ T68] bridge_slave_0: left promiscuous mode [ 961.156945][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.217090][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.227463][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.237695][ T68] bond0 (unregistering): Released all slaves [ 961.293925][ T68] tipc: Left network mode [ 961.320728][ T68] hsr_slave_0: left promiscuous mode [ 961.326600][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.334372][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.342784][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.350209][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.357885][ T68] batman_adv: batadv0: Interface deactivated: dummy0 [ 961.364710][ T68] batman_adv: batadv0: Removing interface: dummy0 [ 961.374378][ T68] veth1_macvtap: left promiscuous mode [ 961.379897][ T68] veth0_macvtap: left promiscuous mode [ 961.385520][ T68] veth1_vlan: left promiscuous mode [ 961.391063][ T68] veth0_vlan: left promiscuous mode [ 961.457209][ T68] team0 (unregistering): Port device team_slave_1 removed [ 961.467547][ T68] team0 (unregistering): Port device team_slave_0 removed [ 961.735354][ T68] IPVS: stop unused estimator thread 0... [ 961.752572][T24285] net_ratelimit: 15 callbacks suppressed [ 961.752590][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.912652][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.921030][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.475565][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.953260][T18118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.961570][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.033117][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.041445][T24285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog