last executing test programs: 34.678172623s ago: executing program 1 (id=57): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x4, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) clock_getres(0x7ffffffff000, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000240)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/mdstat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002100)=""/171, 0xab, 0x4a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$security_evm(&(0x7f0000004080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0), 0x0, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x200) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000580)=""/231) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = semget(0x2, 0x2, 0x404) semop(r6, &(0x7f0000000280)=[{0x2, 0xff00}, {0x0, 0x101}, {0x2, 0xe}, {0x0, 0x0, 0x800}], 0x4) syz_clone(0x22080000, &(0x7f0000000180)="53a6ed4269b717b6df4922fc78da41fc9fc2c693d985721f336c6e16553e31d9de8ca60ef10537384f42edc1e2b015c1daf062fb7129d9fe48f8c0bf0a6ac17281d6047aea510f34ed882828c01cae20bd06cd2f84eae1279fe085114b2919d4286987ae11052d5266e8c5c0a5e722e278266c3d01219c66bd4cd0f6334a63f500919b730f6e412b35ca37", 0x8b, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000340)="c41c5190483f3291ce4bf85c9a3efd6a82e760c766cf117770d1f672a9fb14412da45e3d34d2a58aa27cbd7ec79f8f2f97bcd282c84cc473c5ec27f2f83c66452f74e7fb313216b5331af40772b1630f2358a71c714415aa53da0a422bda2f054d4342c180c8335a0823e218155bda8e01db3d6af2d2aae1f771607f735dd0731e497ec39d1cd2a62e35f0b2f7a9babfe30b7e1331709176a900e15bb60c18c87b4b050e47ce4a8f0aaed5dbd50f6d4416bd32a96831b26de9060c6b19bd9d8644fa209851b4b5ab11077b0f2dba1cbfa7") ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000004c0)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) 34.62388847s ago: executing program 1 (id=58): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54e5ffff050a0104000000000000000002000000200004801c0001800a00010071750000000000000c00028006000140000300000900010073797afd4e0000000900020073797a32000000000500074074000000140000001100010000000008000000000000000a"], 0x7c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000180)=0xfc, 0x4) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1101886, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000090080a00000000000003000000000000"], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) read$eventfd(r3, &(0x7f0000000140), 0x8) 34.496841607s ago: executing program 1 (id=62): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1a7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000340)="0be7e7139e9bf2e612364ab4a70ccfe916a925c4f3e6926347431ad210540d67ac5bb1a00000000000008d048076d6", 0x2f, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff802}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001a00010a0000000000dfffff80"], 0x14}}, 0x0) 34.204889345s ago: executing program 1 (id=68): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000001a006da800000000000000001c0000000000000000000000840013"], 0xa0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0xfffffffffffffffd, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, {0xc8, 0x2, 0xb, 0x0, 0xfffffffd}, 0xfffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x14, 0x0, 0xffffffffffffffff, 0x0, r1, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 33.106766616s ago: executing program 1 (id=78): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3fffffffc}, 0x210, 0x4000004, 0xfffffffc, 0x6, 0xfff, 0x3, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000), 0x5, 0x2000000, 0x0, 0x0, 0xe201ffff) 32.576058814s ago: executing program 1 (id=82): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2, 0x7}) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r7, 0x400, 0x1) close(0x3) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_raw(r12, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x17}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1000007}]}}]}, 0x40}}, 0x4000010) 32.575528044s ago: executing program 32 (id=82): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2, 0x7}) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r7, 0x400, 0x1) close(0x3) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_raw(r12, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x17}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1000007}]}}]}, 0x40}}, 0x4000010) 32.435798612s ago: executing program 4 (id=86): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x2028, 0x0, 0x0, 0x8001}]}, 0x10) 32.306747168s ago: executing program 4 (id=89): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0xffd9) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1b0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a5b51621", 0xa}], 0x2, 0x0, 0x0, 0x10}, 0x200400d0) 32.300775739s ago: executing program 4 (id=90): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0xd, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1a7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000340)="0be7e7139e9bf2e612364ab4a70ccfe916a925c4f3e6926347431ad210540d67ac5bb1a00000000000008d048076d6", 0x2f, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff802}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001a00010a0000000000dfffff80"], 0x14}}, 0x0) 31.968230182s ago: executing program 4 (id=93): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv2(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2, 0x0, 0xffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8b08a, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x400}, 0x520, 0x10000, 0x33f8, 0x9, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$search(0xa, r2, &(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x470c4a7a4788b09b, 0x4, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x3}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "a0f3a80294cf58e1", "9d55fd4f13b813f2b6f897f600741d51", "2aa8d90a", "d16b00"}, 0x28) getsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0xe0, 0x3, 0x7, 0x5, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x4}, [@typed={0x4, 0xba}, @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@multicast1}, @generic="f77ed0dd4e236b77f4f9f39ded4081509107c05bd706ad15d62d0083981b77e14f33a4216e77fb9d29d2c2d321a690b86857db39d761ce7ab5c1d0c3670cd9d2ac929cd5ed8d5ef1bb3dd6b7b7fa3938efa0ed9e5971d795d97ad5803d6eb1ed1210f4c747230afe77647064a16648d1eb69d38976971d39c4f5d3a7d088341df876f1fd6fab6cb564f14d0477a279e11df8acb1c6adc4b4c68bb58d46a3b7b5c5a8f73a8666f54f18e82a", @generic="17a6eb813a1eb80f81463fc5b44d52f4bbf8"]}, 0xe0}}, 0x20000000) 31.456072848s ago: executing program 4 (id=94): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c9534229d6133fa814a0a67385fea04220423"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_nanosleep(0x6ce0024abb6183bb, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000000000000000982fb768f1a5d4dd91f2a76a6e000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xfffe, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) syz_read_part_table(0x63a, &(0x7f0000000640)="$eJzs0z+IXFUbB+DfvXdn7ky+XSZ8pBAjZgtrC7eJxZIs+AexSFC0sLGyE4uAhYXMLAloJ4IgFpomoFgYBLWKaCG7YiHGKlhJWGxFEG0CV+6Zmd0gosIGo+F52L33nnPec85757w3/KcN57fqoGdy7wd9q5tOk9lKMlj0X29HmSVd13XzjvXkqfefeOjJx9u8ubqcvV6Vx2FZcNzP7f9PPlsGm4NduskDV7Myzmx214ff7jb7OVypkxPJqZvTKqM/pXn70vdVLh7/q1d6JUfKfe2PBsejv//b8O93eXNncr7u2rW1UsulWB+sZmVsr2vSTatqsKzypY3Pksxuyf7NskqrKtcefXnvvqsn+xzqNsnuZB7TLoN/KMW3vWiV76ja//Sm5TorX0zzQvaD+rDtgw1P95ePq9Vbkj2HVervwrnh5yvlZK5dPHa9qur051enzvT1wa9dt70okhvdKDmxniN1qZv2dicPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcUVaSDPdbX2VjnPHx1+rTqavkm9K5kfYgvknydbVovNEeev/LmzuT8xfOjdMuFh0MB8ux3UHOvFPSO5r0w3X5y3aS0dMlZHjoBLityvn3p/jS5i+Lg1/N/LTz/+++GC/jfh6OpsdeLM1ZMlp2f3TTUtWpUs1ZTu/NC/R/i1bXlJmKBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADubA8/8tj62a26TVJVo0lSH720U0Zm5dp1Te7+9Jn3nv9ya7T7XHKm/STJjer365xt5/crddrck9y/0reG2Xs1efet/rnZj636Zbd+/IfekD/zWwAAAP//HUJmeQ==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socket(0x1d, 0x3, 0xffffffff) 30.504132861s ago: executing program 4 (id=104): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_read_part_table(0x635, &(0x7f0000000640)="$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") 30.503849411s ago: executing program 33 (id=104): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_read_part_table(0x635, &(0x7f0000000640)="$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") 27.01135508s ago: executing program 0 (id=161): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 26.991646173s ago: executing program 0 (id=162): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000}], 0x1, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) (fail_nth: 4) 26.774486101s ago: executing program 0 (id=163): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x300, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000}], 0x1, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) 26.7001141s ago: executing program 0 (id=166): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x9dbda8f28ff787ce, 0x84) r2 = socket(0x2, 0x80805, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r1, 0x0, 0xff, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="1700000002", 0x5) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) recvmmsg(r3, &(0x7f0000000180), 0x0, 0x2020, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r8 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200840, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'ip_vti0\x00'}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r9, 0x8, 0x4000, 0x4000) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r11, 0x0}]) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 26.4722228s ago: executing program 0 (id=169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) 25.864184578s ago: executing program 0 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0x1, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9c00, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) membarrier(0x10, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x1f, &(0x7f0000000080)={0x11, 0x0, 0x6}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) socket$kcm(0x10, 0x2, 0x0) 25.861499118s ago: executing program 34 (id=178): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0x1, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9c00, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) membarrier(0x10, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x1f, &(0x7f0000000080)={0x11, 0x0, 0x6}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) socket$kcm(0x10, 0x2, 0x0) 24.808172474s ago: executing program 3 (id=190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 24.21525849s ago: executing program 3 (id=199): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r1 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xf800000000000000) (fail_nth: 1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048810}, 0x4000000) lseek(r2, 0x4000006, 0x1) getdents(r2, 0x0, 0x58) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) close(r0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1, 0xfff, 0x0) 23.871895694s ago: executing program 3 (id=202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23.840612069s ago: executing program 3 (id=203): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x60, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}]}, 0x60}}, 0x640000c5) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000140)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@gid}, {@dots}, {@nodots}, {@dots}, {@fat=@sys_immutable}, {@nodots}, {@fat=@nfs}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@check_strict}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 22.985997029s ago: executing program 3 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x57) (async) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000080)=0xd0, 0x4) (async) recvmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x2203, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x81, 0x4, 0xfffffff7, 0x1, 0x1, 0x6, 0x2}}, {0x8, 0x2, [0xe, 0x401]}}, {{0x1c, 0x1, {0x5, 0xf3, 0x2, 0x2, 0x1, 0x1000, 0x2, 0x1}}, {0x6, 0x2, [0xffff]}}]}]}, 0x8c}}, 0x4000010) 22.930091275s ago: executing program 3 (id=212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 22.845565177s ago: executing program 35 (id=212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.448255274s ago: executing program 7 (id=380): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 10.446987804s ago: executing program 7 (id=381): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, &(0x7f0000000580)=""/231) 10.425079657s ago: executing program 7 (id=382): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="285323c8df7f36b8bc34528c3be253838dd454a61bfeee8772154bcf1f164c7c1e412635370f382db4a5a1c44dd1c4d9e3dcf07e6ca2e799591351192600489986a313a5275506af56f32c1769a78d4f44805609d884b87373b411232115b13b58d62a08cffff7840b85816a9a9bccb734a72cf3cbf2700f3a52bc4d6cc29b", 0x7f}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_bp={0x0}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0x40b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x32, 0x48, &(0x7f0000000000)="7d721e4d8fff9ed8d7fe63011cc95430a0d31d0bf492c6286a5ffd2d01b72b94c471549af1b4d0cffd21587e5232730f45f5", &(0x7f0000000080)=""/72, 0x5, 0x0, 0xc4, 0xf1, &(0x7f0000000140)="d5f8d6ad651823b73f9a2b57a0d658f9c4f2edb0506f5724c14dc51fde9b84207228a903ae577952b78e4a9b8c0866ad82b571614ccfc2f63b676c88b37f5b798967ac0e3dc5936acc822cf1bd0ffdcc005c042f2924c7092f1e51191b7f1bc88517b939873bc9220f7381d07c2ae785f8117fb48c5788163d408f7379441b4088b3ba87a02562346ee92790a001b409d5bfefc1ec897460b223c030e63d12ed75c620ac9c7c66b5352edda746a747c3a28b2c058c00615599b21a35d54d00e6e6e1d366", &(0x7f0000000300)="14a86f4f6776ea0dd09d67b52b05107e0188601ab6cf2cdfa7a7f499176e88124c914d481c857a6f48a7da709ef02e87be875eb04712513d69375d99be6bb5c82d32ca021fab1e4b42b7f382d57a381414074e7e074c54d763c23806ba31388bc342af1a597646b25af78c5040e6bee575370002d62b8d324ef68b56d7abcb5fb589564e187d757dc477be5d82886845aaac4e78bf825fb341c56e21258c19b0197a3e6e1de2d6f18cbf6b46c8e1d345f99cf95b1972c22905917cecfd18603d1db37e8dd23e24148fcf6693c673f24b97d33bb69ba65d6db05a9f371008d6197c9b117ebc9ad05e79bc4f0bd7774077f9", 0x4, 0x0, 0x80000001}, 0x50) 9.38579928s ago: executing program 7 (id=393): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) ptrace$cont(0x1f, r0, 0xfcf, 0x9) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x0, "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", 0x7, 0x7, 0x4, 0xff, 0x6, 0x47, 0xd}}}, 0x128) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, 0x0, 0x0, 0x1ac4a4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0x40, r2}, 0x38) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000400c27e00000008000a40000000000900020073797a31000000000900010073797a3000bdee71632b000000090005400000000c08000340000000080800064000000000140000001000de0000000000000000"], 0x74}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xdf}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 9.215452503s ago: executing program 7 (id=396): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x18400) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x10, 0xc, 0x1, 0x599, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000a00)={&(0x7f0000000000), 0xc, &(0x7f00000009c0)={&(0x7f0000000140)={0x848, r3, 0x43424a8619ad73c8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x4}, @device_b, @device_b}}, @NL80211_ATTR_FRAME={0x7f8, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @random="4f3e95254eef", @initial, {0x2, 0x5}, "", @value={0xc, 0x1, 0x3, 0x1, 0x3}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8848}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9}]}, 0x848}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000010) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x1) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x8080, 0x5, 0x0, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, 0xfffffffffffffffc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xe0316e94b9e277b1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf251f000000060021006220000005009200000000000400cc0005009200810000001800228014000080080007005e0000000800050000000100"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x59) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000480)="2ec4218781a27bf4e22eb900d8060f2c7190cd30bee2d8ff30d11d3e9489c9927e38eec62d78de8b9adec1dcd8da280b00b1e58edaacb858c852071cbe80203901c578d4f2be6f3c383fcd70b48235120ba4136f7a6974504ba830cb949a3307b32afacdfcf7d5c46c3a7182482e9d03283cb113f5192a", 0x77}, {0x0}], 0x2}}], 0x2, 0x40091) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r1, 0x0) 9.012679858s ago: executing program 7 (id=398): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010200000000000000000a0000080900010073797a3100000fb74c60a52aedae0002340000001f0a010800000000000000000a0000040900010073797a31000000000c0006400000000000000003080003"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x12, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000380)='syzkaller\x00', 0x69, 0x0, 0x0, 0x40f00, 0x44, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x7, 0x2}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x4, 0x3, 0xa}], 0x10, 0x82}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 8.992241581s ago: executing program 36 (id=398): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010200000000000000000a0000080900010073797a3100000fb74c60a52aedae0002340000001f0a010800000000000000000a0000040900010073797a31000000000c0006400000000000000003080003"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x12, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000380)='syzkaller\x00', 0x69, 0x0, 0x0, 0x40f00, 0x44, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x7, 0x2}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x4, 0x3, 0xa}], 0x10, 0x82}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 8.375501941s ago: executing program 5 (id=403): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) 6.176282244s ago: executing program 5 (id=429): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x8, 0x4) connect$qrtr(r0, &(0x7f0000000080), 0xc) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x10, 0x0}, 0x0) getpeername$qrtr(r0, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 6.05186131s ago: executing program 5 (id=432): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x6dba, &(0x7f0000000400)={0x0, 0x8d2dc, 0x0, 0xfffffffe}, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7b0e, 0x76e3, 0x48, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0xa6, 0x86}], 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) sendto$inet(r3, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0xb00, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) 5.784902625s ago: executing program 5 (id=436): r0 = io_uring_setup(0xa55, &(0x7f0000000540)={0x0, 0x6039, 0x10000, 0x2, 0x171}) r1 = syz_io_uring_setup(0x1a56, &(0x7f0000000200)={0x0, 0x22f9, 0x10100, 0x5, 0x24e, 0x0, r0}, &(0x7f0000000480), &(0x7f00000003c0)=0x0) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x269, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000000)=0x7fff, 0x0, 0x4) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000080), 0x4) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x7fffffff, &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x2, 0x80, 0x7, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x3}, 0xe) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000002c0)=@v1={0x1000000, [{0x7fffffff, 0x63f6}]}, 0xc, 0x3) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r9, 0x0}]) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x10000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r6, &(0x7f0000000340)="44602e949ba433c7af267ca285207f45593804eafae1db73", 0x18, 0x20000811, &(0x7f0000000380)={0x2, 0x4e20, @private=0xa010100}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) 5.471739105s ago: executing program 5 (id=438): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0xfff, 0x5, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x10200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000480)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x5, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb0800450000b000000000fb019078ac1e8db7a20001ac1414aa03017b78032400004500000000010000000100067f000001640100fe867d00000002000e08c82ce8da6ee06cb8dd94520509020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a01108475be675de6a70a05a0dc91e5c6061200000004263ff001000000786531e2dd071073bc23f9ffffffa30900a301c8460010c8f46976e79ea788f03d9d320592000000"], 0x0) recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000001300)=""/202, 0xca}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/165, 0xa5}], 0x4}, 0x12100) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="14009400"], 0x14}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) 5.400003984s ago: executing program 5 (id=439): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) unshare(0x2a020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}], [{@fowner_gt={'fowner>', r6}}, {@appraise}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') getdents64(r7, &(0x7f00000088c0)=""/42, 0x2a) getdents(r7, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r8 = signalfd(r2, &(0x7f0000002580)={[0xfffffffffffffffe]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, @value=r8}, 0x28) 1.515391475s ago: executing program 8 (id=498): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x4c0b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000a34000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/71) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)={0x20, r5, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4088}, 0x840) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x114) quotactl_fd$Q_SYNC(r7, 0xffffffff80000102, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251b00000004002e8008000300", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x24040) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002000090002000000ffdbdf250500"], 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000) 1.333058749s ago: executing program 2 (id=502): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x3e}, 0x4502, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4a282) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4a282) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000440)) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) (async) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r5, 0x7, 0x0, &(0x7f0000000480), &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x8000000000000000]}, 0x8}) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) (async) r6 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xfffffc98}]) (async) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xfffffc98}]) socket$packet(0x11, 0x2, 0x300) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x1}, 0xac02, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0x3) (async) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000000c0)={0x10}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000000c0)={0x10}) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000faa7b9013c007e000000000001", @ANYRESHEX=r6, @ANYRES32=r6, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000faa7b9013c007e000000000001", @ANYRESHEX=r6, @ANYRES32=r6, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_LINK={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 1.284169195s ago: executing program 8 (id=503): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x5, 0x0, 0x40}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) 1.283479105s ago: executing program 8 (id=504): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="beef09fb4916f7dbaf55479883570a3c6d9817eb94b9cb22ace4c7815093e80b5ac77a64c3eb0094dc47a459e4310aebe64328d2c85a427054318de32b423a5b3265ec527e3a59810a9bd4d72648eedbb3f7bd826be45eb630a6ed0dc0d10d9b5dc11bebc3babd09c40aac23fc0ec45d2ff9e7b6aceb2fbca96074311a1ade53d296d073e3bbc46234d803d2608458607edeb9f89f7dba265d153f224b73b02c4faa7763f19c2c67d52203cdac57fc1604b30d7e", 0xb4}, {&(0x7f00000001c0)="c153fe2bc322656bbd05dea49f4c31f633af565a94a071a3a14262be338ca82139c66cd1fa042ccfdeb305c0d57dd2f208084c125e7e39b219c646b81f52af80d1f64254e99d48970635f7a758f23315d1e3cccc65e1f4f6b9f29e574804714119aa599c22ee234ffda4fc2334c3257f56b18b967ca7e32c6e32e1311397e8d4f16534c1b0dfcd8a64d38ad078f4d42da92b0d43c1263b0771ffe1fab31393916ddb0a27c84aa546fe2d361a2b253ef48219f223", 0xb4}], 0x2, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xfe6, &(0x7f0000000640)=0x1) semop(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048084) syz_emit_ethernet(0x8a, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x181040, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000040)) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000012c0)=0x3) unshare(0x2a020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x4}, 0x10) ioctl$TIOCSTI(r3, 0x5412, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507000000", @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x6040) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r7, &(0x7f0000000400), 0x0}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newtfilter={0x2c, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff1, 0xfff2}, {}, {0x5, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x8050) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0xe3, &(0x7f0000000600)=0x1) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80000000]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7800, 0x7f58, 0x7, 0x3, {{0x27, 0x4, 0x0, 0x22, 0x9c, 0x65, 0x0, 0xc3, 0x29, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x1b, 0xe, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x8c, [@dev={0xac, 0x14, 0x14, 0xa}, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x6, 0xc, "3bcd7e04ec2e3ddcdb08"}, {0x1, 0x9, "ea4fa27d6c80a1"}, {0x2, 0x6, "33e1713d"}, {0x1, 0x10, "1be596bca1dcf767419b5f58db33"}, {0x0, 0x2}]}, @lsrr={0x83, 0x1f, 0xfe, [@remote, @multicast1, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) 1.282912015s ago: executing program 6 (id=505): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) (fail_nth: 5) 1.035314057s ago: executing program 6 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYBLOB="a16d"], 0x27) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x70, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0xa, 0x0, 0x0, {{0x7, 0x20}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}}, 0x0) (rerun: 64) splice(r0, &(0x7f0000000000)=0x401, r0, &(0x7f00000000c0)=0x3, 0x1, 0xb) 1.01422705s ago: executing program 2 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000010", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 958.016017ms ago: executing program 6 (id=508): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x25f, &(0x7f0000000ac0)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2100, 0x0) fcntl$getown(r0, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000000206030000000000000000000700000705000100070000000900020073797a310000000014000780050015007f00000008001240000000050500050002000000050004000100000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x103101) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000200)=""/90) 922.153242ms ago: executing program 2 (id=509): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000014f5e8d1e636fecaad439a4baf4cc4106232ffe2344f6a"], 0x48) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[r5], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$packet(0x11, 0x0, 0x300) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="500200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000002402038020020080080001800400028024000780090001007866726d000000001400028008000240000000060800024000000000080003"], 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94) 905.526714ms ago: executing program 2 (id=510): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0xffd, 0x1, 0x3, 0x502, 0x3}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) pselect6(0x40, &(0x7f0000000280)={0x5, 0x5, 0x7, 0x6, 0xbd, 0x8000000000000000, 0x56, 0x1}, &(0x7f0000000300)={0xc, 0x3, 0x2, 0x1, 0x9, 0x80000001, 0x1, 0xd}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000040)=0xfd0, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}, {&(0x7f0000000380)=""/103, 0x67}], 0x2, 0x33, 0x51b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000003040)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 840.127082ms ago: executing program 6 (id=511): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1a7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000340)="0be7e7139e9bf2e612364ab4a70ccfe916a925c4f3e6926347431ad210540d67ac5bb1a00000000000008d048076d6", 0x2f, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff802}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001a00010a0000000000dfffff80"], 0x14}}, 0x0) 758.394663ms ago: executing program 9 (id=513): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x3, 0x8) pipe(&(0x7f00000000c0)) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, 0x0, 0x0) 722.449048ms ago: executing program 6 (id=514): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808003, &(0x7f00000001c0)={[{@prjquota}, {@nogrpid}, {@stripe={'stripe', 0x3d, 0xffffffff}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}, 0x7, 0x519, &(0x7f0000000240)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x1e, 0x0, 0xfcd8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010200000000000000000a0000080900010073797a3100000fb74c60a52aedae0002340000001f0a010800000000000000000a0000040900010073797a31000000000c0006400000000000000003080003"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="184600000500000000000000000000008510000001000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000073a0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018680000080000000000000008000000"], &(0x7f0000000380)='syzkaller\x00', 0x69, 0x0, 0x0, 0x40f00, 0x44, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x7, 0x2}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x4, 0x3, 0xa}], 0x10, 0x82}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_create_resource$binfmt(0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20000800) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x3c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={'L-', 0x3ee404a5}, 0x16, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)=r13) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 625.5987ms ago: executing program 9 (id=515): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe4, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6a}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) keyctl$clear(0x5, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c1, &(0x7f00000012c0)="$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") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xffffffff, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000380)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb48}], &(0x7f0000000400)='GPL\x00', 0x9, 0x64, &(0x7f0000000440)=""/100, 0x41100, 0x6b, '\x00', r5, 0x25, r0, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x1, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[{0x1, 0x4, 0x6, 0x9}, {0x1, 0x3, 0x9, 0x2}, {0x0, 0x1, 0x9}, {0x3, 0x2, 0x10, 0xb}, {0x2, 0x1, 0x7, 0x7}], 0x10, 0x2}, 0x94) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r6, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x9, 0xfffffffffe000001}) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 443.829263ms ago: executing program 2 (id=516): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$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") r4 = open(&(0x7f0000000180)='.\x00', 0x8000, 0x112) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getdents(r4, &(0x7f0000001040)=""/185, 0xb9) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000380)={{0x77359400}}, 0x0) r10 = timerfd_create(0x0, 0x0) timerfd_create(0x1, 0x80c00) timerfd_settime(r10, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r10, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r12, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f00"], 0x54}}, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x49) 396.28474ms ago: executing program 8 (id=517): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) 373.756652ms ago: executing program 6 (id=518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x4}]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0x101, 0xfffffffb}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 354.543745ms ago: executing program 9 (id=519): r0 = socket(0x840000000002, 0x3, 0xff) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000300), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xffc9) 207.019884ms ago: executing program 9 (id=520): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xb, 0xf1, 0x62, 0xd4, 0x0, 0x6, 0x1, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x3, 0x7}, 0x4000, 0x3, 0x8, 0x2, 0x7fffffffffffffff, 0x6, 0x0, 0x0, 0xc, 0x0, 0x239376e9}, r0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x8001420, 0xffffffff) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/225, 0xe1}], 0x1000000000000107) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000080)="9b", 0x1}, {&(0x7f00000005c0)="ba3ec5", 0x3}], 0x2, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="000413bf2266c531c9bf5459390c", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000800)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000071000000955d41a591179010f945826aea0d87f3a3313a05f7ad8ebfe9c9f99e9a1cae5d454257d59cfe6689132252fc9a92f9e343348492478319e0a26fc1ba412225b26c07ba5cc28ae5fc1f0e5df4afc1883048680921a12f65b2888c034a996a74f44e4f55e890c0fefc35e38c03f4e8492a0d"], &(0x7f0000000040)=0x95) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa", 0xe9}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a8", 0x3f}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda7}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a", 0xe}], 0x6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 137.941073ms ago: executing program 8 (id=521): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@debug}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)=0xffffffffffffffe8) 95.918618ms ago: executing program 2 (id=522): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32=r1, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001500010027bd7000ecdbdf25021804ff", @ANYRES32=r8, @ANYBLOB="08000100ff76fac6622020bbcd6f00000000349e4bacab981407168a9d64b09e788d8fd6e377f5fe31f4867361cad27a663444ee6c6a02392b8aaa4fe231841b0cc5fe70b99d65867ffe3a224e973fedf266f64830445ea72ba1394fcec63efd16b51b38b089f483aff48e671eca7d791f8e2483533e7423901e6232ae3a12c9931d36dcef27c4337afec9fe875a567857223020b06c4e01720252c7180752351fce33b2100f0aa5b02e8291ae981db7e4a233fe26055d874b8c8a847735301a"], 0x34}}, 0x880) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 95.600898ms ago: executing program 9 (id=523): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) 12.853269ms ago: executing program 8 (id=524): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1a7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000340)="0be7e7139e9bf2e612364ab4a70ccfe916a925c4f3e6926347431ad210540d67ac5bb1a00000000000008d048076d6", 0x2f, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff802}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001a00010a0000000000dfffff80"], 0x14}}, 0x0) 0s ago: executing program 9 (id=525): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x3, 0x8) pipe(&(0x7f00000000c0)) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, 0x0, 0x0) kernel console output (not intermixed with test programs): 3750] Cannot create hsr debugfs directory [ 40.522002][ T3326] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.542642][ T3326] syz-executor (3326) used greatest stack depth: 10512 bytes left [ 40.567774][ T1085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.634813][ T1085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.681793][ T3898] loop3: detected capacity change from 0 to 164 [ 40.685069][ T3750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.710328][ T3750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.726048][ T1085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.749557][ T3750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.768916][ T3750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.794042][ T1085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.814465][ T3910] netlink: 128 bytes leftover after parsing attributes in process `syz.3.108'. [ 40.823844][ T3910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 40.871305][ T3750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.904932][ T3920] netlink: 148 bytes leftover after parsing attributes in process `syz.3.110'. [ 40.947868][ T3750] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.009854][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.016942][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.020447][ T3932] loop3: detected capacity change from 0 to 1764 [ 41.031811][ T1085] bridge_slave_1: left allmulticast mode [ 41.037475][ T1085] bridge_slave_1: left promiscuous mode [ 41.043282][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.053928][ T3932] iso9660: Unexpected value for 'nojoliet' [ 41.073014][ T1085] bridge_slave_0: left allmulticast mode [ 41.078771][ T1085] bridge_slave_0: left promiscuous mode [ 41.084500][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.110935][ T3935] loop2: detected capacity change from 0 to 128 [ 41.128337][ T3936] capability: warning: `syz.3.114' uses deprecated v2 capabilities in a way that may be insecure [ 41.150183][ T3935] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0 [ 41.201168][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.210845][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.220776][ T1085] bond0 (unregistering): Released all slaves [ 41.232760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.239881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.282617][ T1085] hsr_slave_0: left promiscuous mode [ 41.288490][ T1085] hsr_slave_1: left promiscuous mode [ 41.305973][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.313660][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.330650][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.338068][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.348755][ T1085] veth1_macvtap: left promiscuous mode [ 41.354307][ T1085] veth0_macvtap: left promiscuous mode [ 41.360048][ T1085] veth1_vlan: left promiscuous mode [ 41.365305][ T1085] veth0_vlan: left promiscuous mode [ 41.447754][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 41.456917][ T3957] loop2: detected capacity change from 0 to 128 [ 41.464064][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 41.465431][ T3957] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.486662][ T3957] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.558367][ T3894] chnl_net:caif_netlink_parms(): no params data found [ 41.569428][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.629624][ T3964] netlink: 128 bytes leftover after parsing attributes in process `syz.2.119'. [ 41.651912][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 41.664324][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 41.667248][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.680784][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.690903][ T3894] bridge_slave_0: entered allmulticast mode [ 41.752229][ T3894] bridge_slave_0: entered promiscuous mode [ 41.787831][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.795190][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.831307][ T3894] bridge_slave_1: entered allmulticast mode [ 41.837973][ T3894] bridge_slave_1: entered promiscuous mode [ 41.854155][ T3750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.917317][ T3894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.953689][ T3894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.015822][ T3894] team0: Port device team_slave_0 added [ 42.029284][ T3894] team0: Port device team_slave_1 added [ 42.066005][ T4025] IPv6: sit1: Disabled Multicast RS [ 42.077945][ T4025] sit1: entered allmulticast mode [ 42.088178][ T3894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.095172][ T3894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.121203][ T3894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.133900][ T3894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.140997][ T3894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.166964][ T3894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.209020][ T3894] hsr_slave_0: entered promiscuous mode [ 42.215213][ T3894] hsr_slave_1: entered promiscuous mode [ 42.222052][ T3894] debugfs: 'hsr0' already exists in 'hsr' [ 42.227841][ T3894] Cannot create hsr debugfs directory [ 42.264362][ T3750] veth0_vlan: entered promiscuous mode [ 42.294995][ T3750] veth1_vlan: entered promiscuous mode [ 42.348314][ T3750] veth0_macvtap: entered promiscuous mode [ 42.370338][ T3750] veth1_macvtap: entered promiscuous mode [ 42.385431][ T3894] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 42.397158][ T3894] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 42.407329][ T3894] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 42.418256][ T3750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.425808][ T4055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.439857][ T4055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.451317][ T3894] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 42.470695][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 42.470713][ T29] audit: type=1400 audit(1768805673.553:496): avc: denied { mount } for pid=4047 comm="syz.0.131" name="/" dev="ramfs" ino=7018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.513630][ T29] audit: type=1326 audit(1768805673.593:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82849aacb9 code=0x7ffc0000 [ 42.516050][ T3750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.537544][ T29] audit: type=1326 audit(1768805673.593:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82849aacb9 code=0x7ffc0000 [ 42.576370][ T29] audit: type=1326 audit(1768805673.653:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82849aacb9 code=0x7ffc0000 [ 42.599915][ T29] audit: type=1326 audit(1768805673.653:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82849aacb9 code=0x7ffc0000 [ 42.623303][ T29] audit: type=1326 audit(1768805673.653:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82849aacb9 code=0x7ffc0000 [ 42.648673][ T29] audit: type=1400 audit(1768805673.683:502): avc: denied { create } for pid=4068 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.674373][ T363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.686847][ T363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.704349][ T29] audit: type=1400 audit(1768805673.783:503): avc: denied { create } for pid=4068 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.719957][ T4048] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 42.724026][ T29] audit: type=1400 audit(1768805673.783:504): avc: denied { ioctl } for pid=4068 comm="syz.3.132" path="socket:[7046]" dev="sockfs" ino=7046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.763551][ T363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.784390][ T363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.819982][ T3894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.834038][ T3894] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.856880][ T4081] syz_tun: entered allmulticast mode [ 42.879985][ T29] audit: type=1400 audit(1768805673.963:505): avc: denied { override_creds } for pid=4082 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.909877][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.917059][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.926658][ T4048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.946973][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.958003][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.965373][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.975594][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.006432][ T4091] tc_dump_action: action bad kind [ 43.033749][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.165845][ T3894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.272169][ T4114] ======================================================= [ 43.272169][ T4114] WARNING: The mand mount option has been deprecated and [ 43.272169][ T4114] and is ignored by this kernel. Remove the mand [ 43.272169][ T4114] option from the mount to silence this warning. [ 43.272169][ T4114] ======================================================= [ 43.335259][ T4114] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.144: bad orphan inode 15 [ 43.356610][ T4114] ext4_test_bit(bit=14, block=18) = 1 [ 43.362165][ T4114] is_bad_inode(inode)=0 [ 43.366374][ T4114] NEXT_ORPHAN(inode)=1023 [ 43.370753][ T4114] max_ino=32 [ 43.373960][ T4114] i_nlink=0 [ 43.377724][ T4114] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.144: corrupted xattr block 19: invalid header [ 43.394075][ T4114] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 43.403835][ T4114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 43.420173][ T4114] ext4 filesystem being mounted at /39/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 43.440241][ T4125] macvtap0: refused to change device tx_queue_len [ 43.465206][ T4125] random: crng reseeded on system resumption [ 43.471197][ T4114] __nla_validate_parse: 2 callbacks suppressed [ 43.471213][ T4114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 43.482525][ T4122] gretap1: entered promiscuous mode [ 43.503282][ T4125] netlink: 24 bytes leftover after parsing attributes in process `syz.5.147'. [ 43.524665][ T4133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4133 comm=syz.0.144 [ 43.548715][ T4122] EXT4-fs: Ignoring removed orlov option [ 43.561021][ T4122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.571888][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 43.578938][ T3894] veth0_vlan: entered promiscuous mode [ 43.582256][ T4122] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.595276][ T3894] veth1_vlan: entered promiscuous mode [ 43.615531][ T4122] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.146: bg 0: block 248: padding at end of block bitmap is not set [ 43.618351][ T3894] veth0_macvtap: entered promiscuous mode [ 43.646662][ T3894] veth1_macvtap: entered promiscuous mode [ 43.658039][ T3894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.667006][ T4122] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.146: Failed to acquire dquot type 1 [ 43.679917][ T3894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.691078][ T1085] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.702415][ T1085] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.713051][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.719069][ T4122] EXT4-fs (loop3): 1 truncate cleaned up [ 43.729071][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.748027][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.785143][ T4148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31357 sclass=netlink_route_socket pid=4148 comm=syz.2.152 [ 43.824251][ T4153] netlink: 128 bytes leftover after parsing attributes in process `syz.5.154'. [ 43.831593][ T4148] 9p: Bad value for 'wfdno' [ 43.839522][ T4122] syz.3.146 (4122) used greatest stack depth: 9184 bytes left [ 43.857337][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.954773][ T4175] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 43.965103][ T4170] IPVS: stopping master sync thread 4175 ... [ 43.976624][ T4170] netlink: 'syz.3.156': attribute type 3 has an invalid length. [ 43.984499][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 44.123482][ T4187] FAULT_INJECTION: forcing a failure. [ 44.123482][ T4187] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.136627][ T4187] CPU: 1 UID: 0 PID: 4187 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.136722][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.136736][ T4187] Call Trace: [ 44.136740][ T4187] [ 44.136810][ T4187] __dump_stack+0x1d/0x30 [ 44.136829][ T4187] dump_stack_lvl+0x95/0xd0 [ 44.136843][ T4187] dump_stack+0x15/0x1b [ 44.136856][ T4187] should_fail_ex+0x263/0x280 [ 44.136871][ T4187] should_fail+0xb/0x20 [ 44.136914][ T4187] should_fail_usercopy+0x1a/0x20 [ 44.136930][ T4187] _copy_to_user+0x20/0xa0 [ 44.136948][ T4187] do_pagemap_cmd+0xb5f/0xc10 [ 44.136999][ T4187] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 44.137015][ T4187] __se_sys_ioctl+0xce/0x140 [ 44.137047][ T4187] __x64_sys_ioctl+0x43/0x50 [ 44.137131][ T4187] x64_sys_call+0x14b0/0x3000 [ 44.137187][ T4187] do_syscall_64+0xc0/0x2a0 [ 44.137202][ T4187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.137216][ T4187] RIP: 0033:0x7f82849aacb9 [ 44.137227][ T4187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.137246][ T4187] RSP: 002b:00007f8283407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.137331][ T4187] RAX: ffffffffffffffda RBX: 00007f8284c25fa0 RCX: 00007f82849aacb9 [ 44.137340][ T4187] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000004 [ 44.137349][ T4187] RBP: 00007f8283407090 R08: 0000000000000000 R09: 0000000000000000 [ 44.137363][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.137407][ T4187] R13: 00007f8284c26038 R14: 00007f8284c25fa0 R15: 00007ffca09d0798 [ 44.137420][ T4187] [ 44.379625][ T4196] set_capacity_and_notify: 3 callbacks suppressed [ 44.379639][ T4196] loop0: detected capacity change from 0 to 1024 [ 44.400382][ T4196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.412580][ T4196] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.427997][ T4196] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.166: lblock 3 mapped to illegal pblock 3 (length 3) [ 44.454762][ T4196] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 44.464491][ T4203] 9pnet_virtio: no channels available for device 127.0.0.1 [ 44.467215][ T4196] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.467215][ T4196] [ 44.484729][ T4204] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.166: bg 0: block 112: padding at end of block bitmap is not set [ 44.499606][ T4204] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117 [ 44.502562][ T4203] loop3: detected capacity change from 0 to 256 [ 44.512178][ T4204] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.512178][ T4204] [ 44.586731][ T3321] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /46/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 44.608462][ T3321] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /46/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 44.630407][ T3321] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 44.647805][ T4158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.660041][ T3321] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /46/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 44.700447][ T3321] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 44.720984][ T3321] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /46/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 44.743279][ T3321] EXT4-fs error (device loop0): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 44.775058][ T3321] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /46/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 44.843958][ T4223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=4223 comm=syz.5.173 [ 44.933371][ T4229] loop5: detected capacity change from 0 to 2048 [ 44.952147][ T4229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.103525][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.114343][ T363] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 45.126756][ T363] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.126756][ T363] [ 45.140482][ T1085] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 117 [ 45.153051][ T1085] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.153051][ T1085] [ 45.153173][ T4235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=4235 comm=syz.2.176 [ 45.165496][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.186217][ T3750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.210018][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.272206][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.312693][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.425545][ T52] bridge_slave_1: left allmulticast mode [ 45.431319][ T52] bridge_slave_1: left promiscuous mode [ 45.437004][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.444822][ T52] bridge_slave_0: left allmulticast mode [ 45.450547][ T52] bridge_slave_0: left promiscuous mode [ 45.456259][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.500880][ T52] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 45.528165][ T4212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.572225][ T4265] netlink: 'syz.3.183': attribute type 3 has an invalid length. [ 45.616935][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.617296][ T4265] loop3: detected capacity change from 0 to 8192 [ 45.647135][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.676595][ T4269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.185'. [ 45.676690][ T52] bond0 (unregistering): Released all slaves [ 45.707448][ T52] bond1 (unregistering): Released all slaves [ 45.721802][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 45.723436][ T4271] loop6: detected capacity change from 0 to 2048 [ 45.757189][ T52] hsr_slave_0: left promiscuous mode [ 45.765682][ T4271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.778380][ T52] hsr_slave_1: left promiscuous mode [ 45.784062][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.791609][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.803013][ T4276] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.818011][ T52] veth1_macvtap: left promiscuous mode [ 45.823553][ T52] veth0_macvtap: left promiscuous mode [ 45.829371][ T52] veth1_vlan: left promiscuous mode [ 45.834619][ T52] veth0_vlan: left promiscuous mode [ 45.958366][ T52] team0 (unregistering): Port device team_slave_1 removed [ 45.986351][ T52] team0 (unregistering): Port device team_slave_0 removed [ 46.014058][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.087386][ T4276] netlink: 'syz.5.187': attribute type 18 has an invalid length. [ 46.095245][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.187'. [ 46.132139][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.188'. [ 46.166432][ T4276] netlink: 'syz.5.187': attribute type 18 has an invalid length. [ 46.174276][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.187'. [ 46.183805][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.188'. [ 46.194885][ T4282] loop2: detected capacity change from 0 to 1024 [ 46.216932][ T1085] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.236056][ T4282] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 46.265635][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.272742][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.296651][ T4282] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.339940][ T4248] bridge_slave_0: entered allmulticast mode [ 46.363123][ T4248] bridge_slave_0: entered promiscuous mode [ 46.380183][ T1085] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.389643][ T4297] syz_tun: entered allmulticast mode [ 46.406336][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.413466][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.422624][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 46.431771][ T4248] bridge_slave_1: entered allmulticast mode [ 46.450179][ T4248] bridge_slave_1: entered promiscuous mode [ 46.465440][ T1085] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.477069][ T4297] syz_tun (unregistering): left allmulticast mode [ 46.498063][ T4282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.517062][ T1085] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.535054][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.575039][ T4315] FAULT_INJECTION: forcing a failure. [ 46.575039][ T4315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.588302][ T4315] CPU: 0 UID: 0 PID: 4315 Comm: syz.5.195 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.588330][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.588341][ T4315] Call Trace: [ 46.588346][ T4315] [ 46.588353][ T4315] __dump_stack+0x1d/0x30 [ 46.588380][ T4315] dump_stack_lvl+0x95/0xd0 [ 46.588400][ T4315] dump_stack+0x15/0x1b [ 46.588495][ T4315] should_fail_ex+0x263/0x280 [ 46.588571][ T4315] should_fail+0xb/0x20 [ 46.588497][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.588593][ T4315] should_fail_usercopy+0x1a/0x20 [ 46.588620][ T4315] _copy_from_user+0x1c/0xb0 [ 46.588684][ T4315] ___sys_sendmsg+0xc1/0x1e0 [ 46.588723][ T4315] __x64_sys_sendmsg+0xd4/0x160 [ 46.588770][ T4315] x64_sys_call+0x17ba/0x3000 [ 46.588825][ T4315] do_syscall_64+0xc0/0x2a0 [ 46.588907][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.588927][ T4315] RIP: 0033:0x7fa2a326acb9 [ 46.588943][ T4315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.588961][ T4315] RSP: 002b:00007fa2a1cc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.589030][ T4315] RAX: ffffffffffffffda RBX: 00007fa2a34e5fa0 RCX: 00007fa2a326acb9 [ 46.589045][ T4315] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 46.589067][ T4315] RBP: 00007fa2a1cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.589079][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.589092][ T4315] R13: 00007fa2a34e6038 R14: 00007fa2a34e5fa0 R15: 00007fff7f27b488 [ 46.589110][ T4315] [ 46.756732][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.767099][ T4248] team0: Port device team_slave_0 added [ 46.798166][ T4248] team0: Port device team_slave_1 added [ 46.826945][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.834022][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.860103][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.892631][ T4343] netlink: 'syz.5.198': attribute type 10 has an invalid length. [ 46.908402][ T4349] FAULT_INJECTION: forcing a failure. [ 46.908402][ T4349] name failslab, interval 1, probability 0, space 0, times 1 [ 46.921377][ T4349] CPU: 0 UID: 0 PID: 4349 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.921456][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.921467][ T4349] Call Trace: [ 46.921474][ T4349] [ 46.921482][ T4349] __dump_stack+0x1d/0x30 [ 46.921506][ T4349] dump_stack_lvl+0x95/0xd0 [ 46.921558][ T4349] dump_stack+0x15/0x1b [ 46.921588][ T4349] should_fail_ex+0x263/0x280 [ 46.921637][ T4349] should_failslab+0x8c/0xb0 [ 46.921660][ T4349] __kmalloc_cache_noprof+0x64/0x4a0 [ 46.921684][ T4349] ? resv_map_alloc+0x32/0x190 [ 46.921735][ T4349] ? vfs_write+0x86e/0x9f0 [ 46.921756][ T4349] resv_map_alloc+0x32/0x190 [ 46.921782][ T4349] hugetlbfs_get_inode+0x67/0x370 [ 46.921880][ T4349] ? mutex_unlock+0x4e/0x90 [ 46.921908][ T4349] hugetlb_file_setup+0x192/0x3d0 [ 46.921935][ T4349] ksys_mmap_pgoff+0x156/0x310 [ 46.922013][ T4349] x64_sys_call+0x16bb/0x3000 [ 46.922038][ T4349] do_syscall_64+0xc0/0x2a0 [ 46.922071][ T4349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.922098][ T4349] RIP: 0033:0x7f0bb911acb9 [ 46.922117][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.922151][ T4349] RSP: 002b:00007f0bb7b77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 46.922171][ T4349] RAX: ffffffffffffffda RBX: 00007f0bb9395fa0 RCX: 00007f0bb911acb9 [ 46.922184][ T4349] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 46.922197][ T4349] RBP: 00007f0bb7b77090 R08: ffffffffffffffff R09: f800000000000000 [ 46.922257][ T4349] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 46.922272][ T4349] R13: 00007f0bb9396038 R14: 00007f0bb9395fa0 R15: 00007ffd91073078 [ 46.922292][ T4349] [ 47.109429][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.117530][ T4343] bond0: (slave team0): Enslaving as an active interface with an up link [ 47.127281][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.134422][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.160387][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.212221][ T4355] loop2: detected capacity change from 0 to 512 [ 47.219610][ T4355] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.230409][ T4355] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.242758][ T4355] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.196: Allocating blocks 41-42 which overlap fs metadata [ 47.257451][ T4248] hsr_slave_0: entered promiscuous mode [ 47.267027][ T4248] hsr_slave_1: entered promiscuous mode [ 47.274192][ T4248] debugfs: 'hsr0' already exists in 'hsr' [ 47.280044][ T4248] Cannot create hsr debugfs directory [ 47.290571][ T4365] loop3: detected capacity change from 0 to 256 [ 47.315844][ T4355] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.196: Failed to acquire dquot type 1 [ 47.339686][ T4355] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.423106][ T4355] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.196: corrupted inode contents [ 47.445794][ T4381] loop6: detected capacity change from 0 to 128 [ 47.463729][ T4381] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.481201][ T4355] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.196: mark_inode_dirty error [ 47.486715][ T4381] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.507071][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 47.507154][ T29] audit: type=1400 audit(1768805678.583:659): avc: denied { setattr } for pid=4380 comm="syz.6.207" path="/13/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.507341][ T4355] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.196: corrupted inode contents [ 47.540762][ T4387] loop5: detected capacity change from 0 to 128 [ 47.549481][ T4355] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.196: mark_inode_dirty error [ 47.572948][ T4355] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.196: corrupted inode contents [ 47.587231][ T4355] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 47.596072][ T4355] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.196: corrupted inode contents [ 47.608125][ T4355] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.196: mark_inode_dirty error [ 47.625882][ T4248] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 47.634232][ T4355] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 47.643543][ T4355] EXT4-fs (loop2): 1 truncate cleaned up [ 47.648808][ T29] audit: type=1400 audit(1768805678.733:660): avc: denied { ioctl } for pid=4380 comm="syz.6.207" path="/13/file1/file1" dev="loop6" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.651316][ T4355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.695580][ T29] audit: type=1400 audit(1768805678.773:661): avc: denied { ioctl } for pid=4386 comm="syz.5.208" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.704834][ T4248] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 47.724969][ T29] audit: type=1326 audit(1768805678.773:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.750415][ T29] audit: type=1326 audit(1768805678.773:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.773858][ T29] audit: type=1326 audit(1768805678.773:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.797749][ T29] audit: type=1326 audit(1768805678.773:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.821201][ T29] audit: type=1326 audit(1768805678.773:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.844696][ T29] audit: type=1326 audit(1768805678.773:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.867944][ T29] audit: type=1326 audit(1768805678.773:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.5.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 47.895738][ T4248] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 47.905568][ T4248] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 47.947856][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.964808][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.975964][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.983166][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.994727][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.001915][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.022141][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.078157][ T3894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.095898][ T4415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.157771][ T2477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.203554][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.242162][ T2477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.311525][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.311657][ T2477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.410217][ T2477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.472011][ T4439] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 48.483074][ T4439] SELinux: failed to load policy [ 48.555598][ T2477] bridge_slave_1: left allmulticast mode [ 48.561434][ T2477] bridge_slave_1: left promiscuous mode [ 48.567308][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.591106][ T2477] bridge_slave_0: left allmulticast mode [ 48.596809][ T2477] bridge_slave_0: left promiscuous mode [ 48.602787][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.771388][ T2477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.781923][ T2477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.792205][ T2477] bond0 (unregistering): Released all slaves [ 48.806517][ T4248] veth0_vlan: entered promiscuous mode [ 48.841801][ T4248] veth1_vlan: entered promiscuous mode [ 48.859153][ T2477] tipc: Left network mode [ 48.886180][ T4248] veth0_macvtap: entered promiscuous mode [ 48.902221][ T4248] veth1_macvtap: entered promiscuous mode [ 48.933748][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.945685][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.957581][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.970465][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.993309][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.010668][ T2477] hsr_slave_0: left promiscuous mode [ 49.027806][ T2477] hsr_slave_1: left promiscuous mode [ 49.044108][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.051661][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.060450][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.067939][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.082207][ T2477] veth1_macvtap: left promiscuous mode [ 49.132759][ T2477] veth0_macvtap: left promiscuous mode [ 49.138445][ T2477] veth1_vlan: left promiscuous mode [ 49.143989][ T2477] veth0_vlan: left promiscuous mode [ 49.232559][ T2477] team0 (unregistering): Port device team_slave_1 removed [ 49.250963][ T2477] team0 (unregistering): Port device team_slave_0 removed [ 49.263313][ T4500] FAULT_INJECTION: forcing a failure. [ 49.263313][ T4500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.276565][ T4500] CPU: 0 UID: 0 PID: 4500 Comm: syz.2.220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.276598][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.276612][ T4500] Call Trace: [ 49.276618][ T4500] [ 49.276685][ T4500] __dump_stack+0x1d/0x30 [ 49.276710][ T4500] dump_stack_lvl+0x95/0xd0 [ 49.276754][ T4500] dump_stack+0x15/0x1b [ 49.276772][ T4500] should_fail_ex+0x263/0x280 [ 49.276837][ T4500] should_fail+0xb/0x20 [ 49.276855][ T4500] should_fail_usercopy+0x1a/0x20 [ 49.276877][ T4500] _copy_from_user+0x1c/0xb0 [ 49.276961][ T4500] ___sys_sendmsg+0xc1/0x1e0 [ 49.277040][ T4500] __x64_sys_sendmsg+0xd4/0x160 [ 49.277069][ T4500] x64_sys_call+0x17ba/0x3000 [ 49.277098][ T4500] do_syscall_64+0xc0/0x2a0 [ 49.277169][ T4500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.277193][ T4500] RIP: 0033:0x7f5d7197acb9 [ 49.277213][ T4500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.277244][ T4500] RSP: 002b:00007f5d703d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.277268][ T4500] RAX: ffffffffffffffda RBX: 00007f5d71bf5fa0 RCX: 00007f5d7197acb9 [ 49.277285][ T4500] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 49.277314][ T4500] RBP: 00007f5d703d7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.277329][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.277404][ T4500] R13: 00007f5d71bf6038 R14: 00007f5d71bf5fa0 R15: 00007ffc9ab503b8 [ 49.277483][ T4500] [ 49.441272][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.459976][ T4430] chnl_net:caif_netlink_parms(): no params data found [ 49.694374][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.701548][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.735488][ T4531] set_capacity_and_notify: 1 callbacks suppressed [ 49.735516][ T4531] loop7: detected capacity change from 0 to 4096 [ 49.766071][ T4430] bridge_slave_0: entered allmulticast mode [ 49.779939][ T4430] bridge_slave_0: entered promiscuous mode [ 49.800123][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.807205][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.860163][ T4430] bridge_slave_1: entered allmulticast mode [ 49.871468][ T4430] bridge_slave_1: entered promiscuous mode [ 49.948654][ T4549] __nla_validate_parse: 6 callbacks suppressed [ 49.948671][ T4549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'. [ 49.999673][ T4430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.015337][ T4554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'. [ 50.035255][ T4430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.101851][ T4430] team0: Port device team_slave_0 added [ 50.121256][ T4430] team0: Port device team_slave_1 added [ 50.158641][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.165970][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.192312][ T4430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.268230][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.275260][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.301434][ T4430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.337263][ T4430] hsr_slave_0: entered promiscuous mode [ 50.343584][ T4430] hsr_slave_1: entered promiscuous mode [ 50.434233][ T4576] loop5: detected capacity change from 0 to 764 [ 50.544788][ T4582] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 50.574692][ T4430] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 50.597641][ T4430] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 50.623008][ T4430] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 50.635298][ T4591] vhci_hcd vhci_hcd.0: invalid port number 65 [ 50.636359][ T4430] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 50.736085][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.792603][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.799894][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.845904][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.856584][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.893393][ T4501] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.914623][ T4430] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.921273][ T4516] loop6: detected capacity change from 0 to 1024 [ 50.923656][ T4516] EXT4-fs: quotafile must be on filesystem root [ 50.937985][ T4501] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.949713][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.956810][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.091369][ T4501] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.103009][ T4612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.242'. [ 51.113242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.120460][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.139515][ T4612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.242'. [ 51.149366][ T4501] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.318057][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.394174][ T4622] loop2: detected capacity change from 0 to 2048 [ 51.430938][ T4622] EXT4-fs: Ignoring removed oldalloc option [ 51.468456][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 51.510620][ T4636] loop6: detected capacity change from 0 to 128 [ 51.539085][ T4636] vfat: Unknown parameter '0x0000000000000006' [ 51.573199][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 51.630298][ T4430] veth0_vlan: entered promiscuous mode [ 51.638498][ T4430] veth1_vlan: entered promiscuous mode [ 51.653937][ T4653] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.248'. [ 51.676405][ T4430] veth0_macvtap: entered promiscuous mode [ 51.682330][ T4653] net_ratelimit: 67 callbacks suppressed [ 51.682344][ T4653] netlink: zone id is out of range [ 51.693307][ T4653] netlink: zone id is out of range [ 51.702416][ T4430] veth1_macvtap: entered promiscuous mode [ 51.714062][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.723488][ T4653] netlink: zone id is out of range [ 51.729345][ T4653] netlink: zone id is out of range [ 51.734499][ T4653] netlink: zone id is out of range [ 51.739727][ T4653] netlink: zone id is out of range [ 51.744930][ T4653] netlink: zone id is out of range [ 51.763933][ T4653] netlink: zone id is out of range [ 51.769310][ T4653] netlink: del zone limit has 8 unknown bytes [ 51.781096][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.806274][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.837878][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.868229][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.878118][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.912100][ T4672] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 51.931809][ T4674] loop2: detected capacity change from 0 to 2048 [ 51.944396][ T4674] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.983763][ T4674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.052879][ T4690] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.253: bg 0: block 234: padding at end of block bitmap is not set [ 52.068243][ T4690] EXT4-fs (loop2): Remounting filesystem read-only [ 52.624442][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.654042][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 52.654059][ T29] audit: type=1400 audit(1768805939.735:997): avc: denied { create } for pid=4719 comm="syz.5.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.699814][ T4727] netlink: 28 bytes leftover after parsing attributes in process `syz.6.259'. [ 52.717968][ T29] audit: type=1400 audit(1768805939.765:998): avc: denied { setopt } for pid=4719 comm="syz.5.258" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.733805][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 52.796495][ T4739] vhci_hcd vhci_hcd.0: invalid port number 65 [ 52.908973][ T4751] FAULT_INJECTION: forcing a failure. [ 52.908973][ T4751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.922400][ T4751] CPU: 1 UID: 0 PID: 4751 Comm: syz.6.264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.922428][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.922440][ T4751] Call Trace: [ 52.922446][ T4751] [ 52.922456][ T4751] __dump_stack+0x1d/0x30 [ 52.922508][ T4751] dump_stack_lvl+0x95/0xd0 [ 52.922538][ T4751] dump_stack+0x15/0x1b [ 52.922558][ T4751] should_fail_ex+0x263/0x280 [ 52.922582][ T4751] should_fail+0xb/0x20 [ 52.922605][ T4751] should_fail_usercopy+0x1a/0x20 [ 52.922687][ T4751] _copy_from_iter+0xcf/0xea0 [ 52.922777][ T4751] ? __alloc_skb+0x397/0x4b0 [ 52.922800][ T4751] ? __alloc_skb+0x219/0x4b0 [ 52.922850][ T4751] netlink_sendmsg+0x4ae/0x6f0 [ 52.922873][ T4751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.922915][ T4751] __sock_sendmsg+0x145/0x170 [ 52.922972][ T4751] ____sys_sendmsg+0x31e/0x4a0 [ 52.923005][ T4751] ___sys_sendmsg+0x195/0x1e0 [ 52.923090][ T4751] __x64_sys_sendmsg+0xd4/0x160 [ 52.923120][ T4751] x64_sys_call+0x17ba/0x3000 [ 52.923160][ T4751] do_syscall_64+0xc0/0x2a0 [ 52.923197][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.923221][ T4751] RIP: 0033:0x7efff5fbacb9 [ 52.923239][ T4751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.923256][ T4751] RSP: 002b:00007efff4a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.923336][ T4751] RAX: ffffffffffffffda RBX: 00007efff6235fa0 RCX: 00007efff5fbacb9 [ 52.923352][ T4751] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 52.923366][ T4751] RBP: 00007efff4a17090 R08: 0000000000000000 R09: 0000000000000000 [ 52.923381][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.923449][ T4751] R13: 00007efff6236038 R14: 00007efff6235fa0 R15: 00007ffd5c0865b8 [ 52.923471][ T4751] [ 52.934622][ T4749] loop8: detected capacity change from 0 to 1024 [ 52.961535][ T4749] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.961567][ T4749] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.962434][ T4749] JBD2: no valid journal superblock found [ 52.962446][ T4749] EXT4-fs (loop8): Could not load journal inode [ 52.964684][ T4749] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 53.112236][ T4764] loop8: detected capacity change from 0 to 2048 [ 53.130519][ T4764] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.139228][ T29] audit: type=1400 audit(1768805940.225:999): avc: denied { mounton } for pid=4719 comm="syz.5.258" path="/39/bus" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.304243][ T4787] netlink: 128 bytes leftover after parsing attributes in process `syz.6.269'. [ 53.465758][ T4430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.584210][ T4806] loop2: detected capacity change from 0 to 2048 [ 53.603619][ T4806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.620740][ T4812] loop6: detected capacity change from 0 to 164 [ 53.664930][ T4812] Unable to read rock-ridge attributes [ 53.722004][ T4812] Unable to read rock-ridge attributes [ 53.754882][ T4812] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.771516][ T4825] tmpfs: Bad value for 'nr_inodes' [ 53.783398][ T29] audit: type=1400 audit(1768805940.865:1000): avc: denied { create } for pid=4821 comm="syz.7.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.828464][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.838790][ T29] audit: type=1326 audit(1768805940.865:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.6.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff5fbacb9 code=0x0 [ 53.861736][ T29] audit: type=1400 audit(1768805940.895:1002): avc: denied { sys_admin } for pid=4821 comm="syz.7.278" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.864330][ T4835] netlink: 128 bytes leftover after parsing attributes in process `syz.8.280'. [ 53.900756][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.282'. [ 53.963796][ T29] audit: type=1400 audit(1768805941.045:1003): avc: denied { bind } for pid=4842 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.043909][ T29] audit: type=1400 audit(1768805941.095:1004): avc: denied { read } for pid=4845 comm="syz.8.283" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.064175][ T29] audit: type=1400 audit(1768805941.115:1005): avc: denied { create } for pid=4847 comm="syz.7.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 54.113956][ T4848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.123311][ T4848] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.143148][ T4863] cgroup: Need name or subsystem set [ 54.150790][ T4862] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 54.199633][ T4864] vhci_hcd vhci_hcd.0: invalid port number 65 [ 54.219063][ T4848] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.286: Allocating blocks 41-42 which overlap fs metadata [ 54.238012][ T29] audit: type=1326 audit(1768805941.235:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4861 comm="syz.5.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a326acb9 code=0x7ffc0000 [ 54.310363][ T4848] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.286: Allocating blocks 41-42 which overlap fs metadata [ 54.348893][ T4848] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.286: Failed to acquire dquot type 1 [ 54.396197][ T4848] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 54.424998][ T4848] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.286: corrupted inode contents [ 54.454628][ T4848] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.286: mark_inode_dirty error [ 54.468257][ T4848] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.286: corrupted inode contents [ 54.481208][ T4848] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.286: mark_inode_dirty error [ 54.494575][ T4848] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.286: corrupted inode contents [ 54.506707][ T4848] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 54.515589][ T4848] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.286: corrupted inode contents [ 54.536644][ T4848] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.286: mark_inode_dirty error [ 54.548114][ T4848] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 54.567128][ T4848] EXT4-fs (loop7): 1 truncate cleaned up [ 54.577260][ T4848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.645150][ T4848] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.286: Allocating blocks 41-42 which overlap fs metadata [ 54.659434][ T4848] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.286: Failed to acquire dquot type 1 [ 54.685767][ T4848] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.286: iget: bad i_size value: 360287970189639690 [ 54.701543][ T4912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.716502][ T4912] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.759098][ T4248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.780304][ T4915] set_capacity_and_notify: 3 callbacks suppressed [ 54.780324][ T4915] loop6: detected capacity change from 0 to 8192 [ 54.811412][ T4918] FAULT_INJECTION: forcing a failure. [ 54.811412][ T4918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.824851][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.7.299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.824884][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.824898][ T4918] Call Trace: [ 54.824907][ T4918] [ 54.824973][ T4918] __dump_stack+0x1d/0x30 [ 54.825000][ T4918] dump_stack_lvl+0x95/0xd0 [ 54.825051][ T4918] dump_stack+0x15/0x1b [ 54.825193][ T4918] should_fail_ex+0x263/0x280 [ 54.825233][ T4918] should_fail+0xb/0x20 [ 54.825256][ T4918] should_fail_usercopy+0x1a/0x20 [ 54.825284][ T4918] _copy_to_user+0x20/0xa0 [ 54.825351][ T4918] __se_sys_keyctl+0x3e7/0xb80 [ 54.825371][ T4918] ? __rcu_read_unlock+0x4e/0x70 [ 54.825416][ T4918] ? __fget_files+0x184/0x1c0 [ 54.825442][ T4918] ? mutex_lock+0x57/0x90 [ 54.825482][ T4918] ? mutex_unlock+0x4e/0x90 [ 54.825531][ T4918] ? fput+0x8f/0xc0 [ 54.825578][ T4918] __x64_sys_keyctl+0x67/0x80 [ 54.825601][ T4918] x64_sys_call+0x27b8/0x3000 [ 54.825672][ T4918] do_syscall_64+0xc0/0x2a0 [ 54.825694][ T4918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.825742][ T4918] RIP: 0033:0x7fb0f945acb9 [ 54.825778][ T4918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.825799][ T4918] RSP: 002b:00007fb0f7eb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 54.825820][ T4918] RAX: ffffffffffffffda RBX: 00007fb0f96d5fa0 RCX: 00007fb0f945acb9 [ 54.825836][ T4918] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000001f [ 54.825850][ T4918] RBP: 00007fb0f7eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.825886][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.825900][ T4918] R13: 00007fb0f96d6038 R14: 00007fb0f96d5fa0 R15: 00007ffffbf52718 [ 54.825921][ T4918] [ 55.067799][ T4919] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.086076][ T4928] __nla_validate_parse: 4 callbacks suppressed [ 55.086093][ T4928] netlink: 44 bytes leftover after parsing attributes in process `syz.8.302'. [ 55.132718][ T4932] netlink: 'syz.6.301': attribute type 3 has an invalid length. [ 55.140487][ T4932] netlink: 16 bytes leftover after parsing attributes in process `syz.6.301'. [ 55.201630][ T4937] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.304'. [ 55.296810][ T4941] pimreg0: tun_chr_ioctl cmd 1074025677 [ 55.302656][ T4941] pimreg0: linktype set to 805 [ 55.309503][ T4941] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 55.317156][ T4941] netlink: 'syz.2.305': attribute type 2 has an invalid length. [ 55.328830][ T4941] ------------[ cut here ]------------ [ 55.334299][ T4941] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 55.359118][ T4941] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.305/4941 [ 55.370062][ T4941] Modules linked in: [ 55.373989][ T4941] CPU: 0 UID: 0 PID: 4941 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.383825][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.394374][ T4941] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 55.405043][ T4941] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 55.425026][ T4941] RSP: 0018:ffffc9000b9873a0 EFLAGS: 00010246 [ 55.431196][ T4941] RAX: ffff888126a39b10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 55.439228][ T4941] RDX: ffffffff867fcb7d RSI: ffffffff866c6e11 RDI: ffffffff86fb6fe0 [ 55.447202][ T4941] RBP: ffff88811959c270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 55.455218][ T4941] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811959c230 [ 55.463333][ T4941] R13: 00000000ffffdfcc R14: ffff88811959c27c R15: ffff88811959c268 [ 55.471958][ T4941] FS: 00007f5d703b66c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 55.480976][ T4941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.487586][ T4941] CR2: 00007f5d703b5ff8 CR3: 000000011a8d8000 CR4: 00000000003506f0 [ 55.495706][ T4941] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.503731][ T4941] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 55.511844][ T4941] Call Trace: [ 55.515141][ T4941] [ 55.518180][ T4941] reg_set_min_max+0x1c8/0x260 [ 55.523150][ T4941] check_cond_jmp_op+0x13bd/0x1a80 [ 55.528315][ T4941] do_check+0x3356/0x8250 [ 55.532692][ T4941] do_check_common+0xccf/0x1300 [ 55.537984][ T4941] bpf_check+0x2f85/0xc890 [ 55.542563][ T4941] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 55.548622][ T4941] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 55.554593][ T4941] ? try_charge_memcg+0x215/0xa10 [ 55.559706][ T4941] ? pcpu_block_refresh_hint+0x10b/0x170 [ 55.565372][ T4941] ? pcpu_block_refresh_hint+0x10b/0x170 [ 55.571133][ T4941] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 55.577225][ T4941] ? css_rstat_updated+0xbb/0x280 [ 55.582355][ T4941] ? mod_memcg_state+0x182/0x260 [ 55.587486][ T4941] ? __rcu_read_unlock+0x4e/0x70 [ 55.592512][ T4941] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 55.598384][ T4941] ? pcpu_alloc_noprof+0xd18/0x1210 [ 55.603690][ T4941] ? should_fail_ex+0x30/0x280 [ 55.608507][ T4941] ? __kmalloc_noprof+0x2a3/0x580 [ 55.613660][ T4941] ? security_bpf_prog_load+0x60/0x140 [ 55.619176][ T4941] ? selinux_bpf_prog_load+0xac/0xd0 [ 55.624612][ T4941] ? security_bpf_prog_load+0x9e/0x140 [ 55.630105][ T4941] bpf_prog_load+0xf76/0x1140 [ 55.634855][ T4941] ? security_bpf+0x2b/0x90 [ 55.639547][ T4941] __sys_bpf+0x469/0x7b0 [ 55.643856][ T4941] __x64_sys_bpf+0x41/0x50 [ 55.648282][ T4941] x64_sys_call+0x28e1/0x3000 [ 55.653159][ T4941] do_syscall_64+0xc0/0x2a0 [ 55.657702][ T4941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.663636][ T4941] RIP: 0033:0x7f5d7197acb9 [ 55.668072][ T4941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.687809][ T4941] RSP: 002b:00007f5d703b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.696262][ T4941] RAX: ffffffffffffffda RBX: 00007f5d71bf6090 RCX: 00007f5d7197acb9 [ 55.704360][ T4941] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 55.712420][ T4941] RBP: 00007f5d719e8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 55.720488][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.728479][ T4941] R13: 00007f5d71bf6128 R14: 00007f5d71bf6090 R15: 00007ffc9ab503b8 [ 55.736485][ T4941] [ 55.739527][ T4941] ---[ end trace 0000000000000000 ]--- [ 55.781239][ T3750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.966026][ T4961] vhci_hcd vhci_hcd.0: invalid port number 65 [ 56.021991][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.313'. [ 56.071861][ T4967] FAULT_INJECTION: forcing a failure. [ 56.071861][ T4967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.084993][ T4967] CPU: 1 UID: 0 PID: 4967 Comm: syz.8.314 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.085025][ T4967] Tainted: [W]=WARN [ 56.085031][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.085042][ T4967] Call Trace: [ 56.085049][ T4967] [ 56.085072][ T4967] __dump_stack+0x1d/0x30 [ 56.085098][ T4967] dump_stack_lvl+0x95/0xd0 [ 56.085118][ T4967] dump_stack+0x15/0x1b [ 56.085136][ T4967] should_fail_ex+0x263/0x280 [ 56.085158][ T4967] should_fail+0xb/0x20 [ 56.085184][ T4967] should_fail_usercopy+0x1a/0x20 [ 56.085282][ T4967] _copy_to_user+0x20/0xa0 [ 56.085307][ T4967] simple_read_from_buffer+0xb5/0x130 [ 56.085342][ T4967] proc_fail_nth_read+0x10e/0x150 [ 56.085390][ T4967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.085421][ T4967] vfs_read+0x1ab/0x7f0 [ 56.085453][ T4967] ? __fput+0x555/0x650 [ 56.085475][ T4967] ? __rcu_read_unlock+0x4e/0x70 [ 56.085573][ T4967] ? __fget_files+0x184/0x1c0 [ 56.085596][ T4967] ? mutex_lock+0x57/0x90 [ 56.085621][ T4967] ksys_read+0xdc/0x1a0 [ 56.085652][ T4967] __x64_sys_read+0x40/0x50 [ 56.085670][ T4967] x64_sys_call+0x2889/0x3000 [ 56.085745][ T4967] do_syscall_64+0xc0/0x2a0 [ 56.085765][ T4967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.085844][ T4967] RIP: 0033:0x7f85a38cb58e [ 56.085862][ T4967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.085878][ T4967] RSP: 002b:00007f85a2366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.085898][ T4967] RAX: ffffffffffffffda RBX: 00007f85a23676c0 RCX: 00007f85a38cb58e [ 56.085991][ T4967] RDX: 000000000000000f RSI: 00007f85a23670a0 RDI: 0000000000000004 [ 56.086057][ T4967] RBP: 00007f85a2367090 R08: 0000000000000000 R09: 0000000000000000 [ 56.086068][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.086080][ T4967] R13: 00007f85a3b86038 R14: 00007f85a3b85fa0 R15: 00007ffd2ca44478 [ 56.086097][ T4967] [ 56.674413][ T4994] loop6: detected capacity change from 0 to 2048 [ 56.701692][ T4994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.260734][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.325'. [ 57.303884][ T4985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.326179][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.380717][ T5013] FAULT_INJECTION: forcing a failure. [ 57.380717][ T5013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.394041][ T5013] CPU: 0 UID: 0 PID: 5013 Comm: syz.5.328 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.394086][ T5013] Tainted: [W]=WARN [ 57.394094][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.394166][ T5013] Call Trace: [ 57.394174][ T5013] [ 57.394184][ T5013] __dump_stack+0x1d/0x30 [ 57.394212][ T5013] dump_stack_lvl+0x95/0xd0 [ 57.394307][ T5013] dump_stack+0x15/0x1b [ 57.394376][ T5013] should_fail_ex+0x263/0x280 [ 57.394402][ T5013] should_fail+0xb/0x20 [ 57.394428][ T5013] should_fail_usercopy+0x1a/0x20 [ 57.394450][ T5013] _copy_to_user+0x20/0xa0 [ 57.394475][ T5013] simple_read_from_buffer+0xb5/0x130 [ 57.394567][ T5013] proc_fail_nth_read+0x10e/0x150 [ 57.394586][ T5013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.394634][ T5013] vfs_read+0x1ab/0x7f0 [ 57.394706][ T5013] ? __rcu_read_unlock+0x4e/0x70 [ 57.394720][ T5013] ? __fget_files+0x184/0x1c0 [ 57.394734][ T5013] ? mutex_lock+0x57/0x90 [ 57.394779][ T5013] ksys_read+0xdc/0x1a0 [ 57.394792][ T5013] __x64_sys_read+0x40/0x50 [ 57.394845][ T5013] x64_sys_call+0x2889/0x3000 [ 57.394861][ T5013] do_syscall_64+0xc0/0x2a0 [ 57.394875][ T5013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.394889][ T5013] RIP: 0033:0x7fa2a322b58e [ 57.394901][ T5013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.394953][ T5013] RSP: 002b:00007fa2a1cc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.395048][ T5013] RAX: ffffffffffffffda RBX: 00007fa2a1cc76c0 RCX: 00007fa2a322b58e [ 57.395071][ T5013] RDX: 000000000000000f RSI: 00007fa2a1cc70a0 RDI: 0000000000000004 [ 57.395085][ T5013] RBP: 00007fa2a1cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.395098][ T5013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.395108][ T5013] R13: 00007fa2a34e6038 R14: 00007fa2a34e5fa0 R15: 00007fff7f27b488 [ 57.395122][ T5013] [ 57.629792][ T5023] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(18) [ 57.636434][ T5023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.643902][ T5023] vhci_hcd vhci_hcd.0: Device attached [ 57.674146][ T5028] vhci_hcd vhci_hcd.0: invalid port number 65 [ 57.731676][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.331'. [ 57.745789][ T5024] vhci_hcd: connection closed [ 57.745945][ T12] vhci_hcd vhci_hcd.8: stop threads [ 57.756019][ T12] vhci_hcd vhci_hcd.8: release socket [ 57.761452][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 57.795894][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 57.795911][ T29] audit: type=1326 audit(1768805944.875:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a390acb9 code=0x7ffc0000 [ 57.828278][ T5044] FAULT_INJECTION: forcing a failure. [ 57.828278][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 57.841123][ T5044] CPU: 0 UID: 0 PID: 5044 Comm: syz.8.336 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.841158][ T5044] Tainted: [W]=WARN [ 57.841166][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.841177][ T5044] Call Trace: [ 57.841184][ T5044] [ 57.841193][ T5044] __dump_stack+0x1d/0x30 [ 57.841235][ T5044] dump_stack_lvl+0x95/0xd0 [ 57.841259][ T5044] dump_stack+0x15/0x1b [ 57.841281][ T5044] should_fail_ex+0x263/0x280 [ 57.841368][ T5044] should_failslab+0x8c/0xb0 [ 57.841392][ T5044] kmem_cache_alloc_noprof+0x68/0x490 [ 57.841480][ T5044] ? audit_log_start+0x34c/0x730 [ 57.841542][ T5044] audit_log_start+0x34c/0x730 [ 57.841562][ T5044] ? trace_call_bpf+0x33b/0x420 [ 57.841618][ T5044] audit_seccomp+0x47/0x100 [ 57.841668][ T5044] ? __seccomp_filter+0x8db/0x1350 [ 57.841697][ T5044] __seccomp_filter+0x8ec/0x1350 [ 57.841797][ T5044] ? getname_flags+0x2bd/0x3b0 [ 57.841825][ T5044] ? kmem_cache_free+0xdf/0x380 [ 57.841853][ T5044] __secure_computing+0x81/0x150 [ 57.841882][ T5044] syscall_trace_enter+0xce/0x1e0 [ 57.841953][ T5044] do_syscall_64+0x9a/0x2a0 [ 57.841978][ T5044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.842016][ T5044] RIP: 0033:0x7f85a38cb58e [ 57.842035][ T5044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.842090][ T5044] RSP: 002b:00007f85a2366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.842113][ T5044] RAX: ffffffffffffffda RBX: 00007f85a23676c0 RCX: 00007f85a38cb58e [ 57.842128][ T5044] RDX: 000000000000000f RSI: 00007f85a23670a0 RDI: 0000000000000005 [ 57.842142][ T5044] RBP: 00007f85a2367090 R08: 0000000000000000 R09: 0000000000000000 [ 57.842153][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.842166][ T5044] R13: 00007f85a3b86038 R14: 00007f85a3b85fa0 R15: 00007ffd2ca44478 [ 57.842261][ T5044] [ 57.842270][ T5044] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 57.887617][ T5041] loop2: detected capacity change from 0 to 128 [ 57.891960][ T5044] audit: out of memory in audit_log_start [ 57.898697][ T4944] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 57.923979][ T29] audit: type=1326 audit(1768805944.915:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85a38cb58e code=0x7ffc0000 [ 58.089610][ T29] audit: type=1326 audit(1768805944.915:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85a38cb58e code=0x7ffc0000 [ 58.113081][ T29] audit: type=1326 audit(1768805944.915:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f85a390acb9 code=0x7ffc0000 [ 58.137755][ T29] audit: type=1400 audit(1768805945.155:1059): avc: denied { watch } for pid=5040 comm="syz.2.335" path="/65" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.159700][ T29] audit: type=1326 audit(1768805945.195:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85a38cb58e code=0x7ffc0000 [ 58.171424][ T5052] loop7: detected capacity change from 0 to 2048 [ 58.183074][ T29] audit: type=1326 audit(1768805945.195:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85a38cb58e code=0x7ffc0000 [ 58.212878][ T29] audit: type=1326 audit(1768805945.195:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.8.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a390acb9 code=0x7ffc0000 [ 58.238304][ T5052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.270872][ T4248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.578444][ T5080] netlink: 72 bytes leftover after parsing attributes in process `syz.5.342'. [ 58.589448][ T5070] net_ratelimit: 77 callbacks suppressed [ 58.589460][ T5070] Set syz1 is full, maxelem 65536 reached [ 58.848287][ T5091] netlink: 28 bytes leftover after parsing attributes in process `syz.6.347'. [ 58.974544][ T5095] loop6: detected capacity change from 0 to 128 [ 58.983452][ T5095] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 59.007305][ T5095] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.029204][ T5098] loop7: detected capacity change from 0 to 2048 [ 59.050417][ T5098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.074433][ T3894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.097904][ T5062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.123611][ T4248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.136491][ T5102] vhci_hcd vhci_hcd.0: invalid port number 65 [ 59.202110][ T5107] loop5: detected capacity change from 0 to 1024 [ 59.213266][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.351'. [ 59.229743][ T5107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 59.248666][ T5107] System zones: 0-1, 3-36 [ 59.260647][ T5107] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.353: bad orphan inode 134217728 [ 59.282513][ T5107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.295774][ T5115] bridge0: entered promiscuous mode [ 59.313849][ T5115] macsec1: entered promiscuous mode [ 59.324886][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.339122][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.365269][ T5120] syzkaller0: entered promiscuous mode [ 59.373568][ T5120] syzkaller0: entered allmulticast mode [ 59.383034][ T5123] FAULT_INJECTION: forcing a failure. [ 59.383034][ T5123] name failslab, interval 1, probability 0, space 0, times 0 [ 59.395797][ T5123] CPU: 0 UID: 0 PID: 5123 Comm: syz.5.353 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.395832][ T5123] Tainted: [W]=WARN [ 59.395839][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.395851][ T5123] Call Trace: [ 59.395859][ T5123] [ 59.395869][ T5123] __dump_stack+0x1d/0x30 [ 59.395896][ T5123] dump_stack_lvl+0x95/0xd0 [ 59.395988][ T5123] dump_stack+0x15/0x1b [ 59.396018][ T5123] should_fail_ex+0x263/0x280 [ 59.396043][ T5123] should_failslab+0x8c/0xb0 [ 59.396065][ T5123] __kmalloc_noprof+0xb8/0x580 [ 59.396151][ T5123] ? copy_splice_read+0xc2/0x6c0 [ 59.396190][ T5123] copy_splice_read+0xc2/0x6c0 [ 59.396308][ T5123] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 59.396347][ T5123] splice_direct_to_actor+0x28f/0x670 [ 59.396370][ T5123] ? __pfx_direct_splice_actor+0x10/0x10 [ 59.396406][ T5123] do_splice_direct+0x119/0x1a0 [ 59.396425][ T5123] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 59.396448][ T5123] do_sendfile+0x380/0x650 [ 59.396515][ T5123] __x64_sys_sendfile64+0x105/0x150 [ 59.396538][ T5123] x64_sys_call+0x2db1/0x3000 [ 59.396564][ T5123] do_syscall_64+0xc0/0x2a0 [ 59.396646][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.396671][ T5123] RIP: 0033:0x7fa2a326acb9 [ 59.396748][ T5123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.396767][ T5123] RSP: 002b:00007fa2a1ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 59.396787][ T5123] RAX: ffffffffffffffda RBX: 00007fa2a34e6090 RCX: 00007fa2a326acb9 [ 59.396801][ T5123] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000008 [ 59.396849][ T5123] RBP: 00007fa2a1ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 59.396863][ T5123] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 59.396877][ T5123] R13: 00007fa2a34e6128 R14: 00007fa2a34e6090 R15: 00007fff7f27b488 [ 59.396947][ T5123] [ 59.766226][ T5144] loop6: detected capacity change from 0 to 2048 [ 59.792282][ T5144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.866145][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.940565][ T5164] loop6: detected capacity change from 0 to 1024 [ 59.985626][ T5164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.998712][ T5164] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.009645][ T5176] loop2: detected capacity change from 0 to 128 [ 60.042166][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.054837][ T3750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.161590][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.385945][ T5206] loop6: detected capacity change from 0 to 2048 [ 60.401339][ T5206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.431111][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.461273][ T5211] vhci_hcd vhci_hcd.0: invalid port number 65 [ 60.665289][ T5237] x_tables: duplicate entry at hook 3 [ 61.353782][ T5266] loop6: detected capacity change from 0 to 2048 [ 61.370214][ T5266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.402641][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.429400][ T5270] netlink: 20 bytes leftover after parsing attributes in process `syz.5.388'. [ 61.465716][ T5274] FAULT_INJECTION: forcing a failure. [ 61.465716][ T5274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.478874][ T5274] CPU: 1 UID: 0 PID: 5274 Comm: syz.6.389 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.478908][ T5274] Tainted: [W]=WARN [ 61.478915][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.478925][ T5274] Call Trace: [ 61.478932][ T5274] [ 61.478952][ T5274] __dump_stack+0x1d/0x30 [ 61.478980][ T5274] dump_stack_lvl+0x95/0xd0 [ 61.479000][ T5274] dump_stack+0x15/0x1b [ 61.479018][ T5274] should_fail_ex+0x263/0x280 [ 61.479045][ T5274] should_fail+0xb/0x20 [ 61.479115][ T5274] should_fail_usercopy+0x1a/0x20 [ 61.479139][ T5274] _copy_from_user+0x1c/0xb0 [ 61.479172][ T5274] ucma_write+0xd8/0x260 [ 61.479211][ T5274] vfs_writev+0x42b/0x900 [ 61.479302][ T5274] ? __pfx_ucma_write+0x10/0x10 [ 61.479372][ T5274] do_writev+0xe9/0x210 [ 61.479402][ T5274] __x64_sys_writev+0x45/0x50 [ 61.479452][ T5274] x64_sys_call+0x1ba5/0x3000 [ 61.479475][ T5274] do_syscall_64+0xc0/0x2a0 [ 61.479497][ T5274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.479522][ T5274] RIP: 0033:0x7efff5fbacb9 [ 61.479570][ T5274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.479587][ T5274] RSP: 002b:00007efff4a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 61.479704][ T5274] RAX: ffffffffffffffda RBX: 00007efff6235fa0 RCX: 00007efff5fbacb9 [ 61.479717][ T5274] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 61.479729][ T5274] RBP: 00007efff4a17090 R08: 0000000000000000 R09: 0000000000000000 [ 61.479794][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.479848][ T5274] R13: 00007efff6236038 R14: 00007efff6235fa0 R15: 00007ffd5c0865b8 [ 61.479865][ T5274] [ 61.496343][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 61.580348][ T5282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5282 comm=syz.8.390 [ 61.584525][ T5281] nr0: tun_chr_ioctl cmd 1074025677 [ 61.690949][ T5281] nr0: linktype set to 270 [ 61.697359][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 61.711618][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 61.737653][ T5287] loop7: detected capacity change from 0 to 256 [ 61.753684][ T5288] loop6: detected capacity change from 0 to 512 [ 61.764917][ T5288] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.776368][ T5287] netlink: 24 bytes leftover after parsing attributes in process `syz.7.393'. [ 61.786589][ T5288] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.394: inode has both inline data and extents flags [ 61.800875][ T5288] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.394: couldn't read orphan inode 15 (err -117) [ 61.821759][ T5276] infiniband syz0: set active [ 61.826496][ T5276] infiniband syz0: added vcan0 [ 61.834544][ T3493] vcan0 speed is unknown, defaulting to 1000 [ 61.842120][ T4248] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 61.849776][ T4248] FAT-fs (loop7): Filesystem has been set read-only [ 61.852213][ T5276] RDS/IB: syz0: added [ 61.859894][ T4248] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 61.874907][ T5276] smc: adding ib device syz0 with port count 1 [ 61.881778][ T5276] smc: ib device syz0 port 1 has no pnetid [ 61.888268][ T3392] vcan0 speed is unknown, defaulting to 1000 [ 61.890054][ T5296] vhci_hcd vhci_hcd.0: invalid port number 65 [ 61.901124][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 61.952899][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 61.983278][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 62.014208][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 62.044634][ T5276] vcan0 speed is unknown, defaulting to 1000 [ 62.132834][ T2477] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.191237][ T2477] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.198608][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.201738][ T3717] Bluetooth: hci0: command 0x1003 tx timeout [ 62.234209][ T5313] loop2: detected capacity change from 0 to 128 [ 62.245107][ T2477] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.280495][ T5302] vcan0 speed is unknown, defaulting to 1000 [ 62.303147][ T2477] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.314484][ T5315] syz.2.400: attempt to access beyond end of device [ 62.314484][ T5315] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 62.367160][ T5315] syz.2.400: attempt to access beyond end of device [ 62.367160][ T5315] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 62.428282][ T5315] syz.2.400: attempt to access beyond end of device [ 62.428282][ T5315] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 62.442158][ T5315] syz.2.400: attempt to access beyond end of device [ 62.442158][ T5315] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 62.455815][ T2477] bridge_slave_1: left allmulticast mode [ 62.461567][ T2477] bridge_slave_1: left promiscuous mode [ 62.463854][ T5315] syz.2.400: attempt to access beyond end of device [ 62.463854][ T5315] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 62.467479][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.481108][ T5315] syz.2.400: attempt to access beyond end of device [ 62.481108][ T5315] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 62.501627][ T5315] syz.2.400: attempt to access beyond end of device [ 62.501627][ T5315] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 62.516414][ T5315] syz.2.400: attempt to access beyond end of device [ 62.516414][ T5315] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 62.534234][ T5333] loop5: detected capacity change from 0 to 512 [ 62.542377][ T2477] bridge_slave_0: left allmulticast mode [ 62.547573][ T5313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'. [ 62.548063][ T2477] bridge_slave_0: left promiscuous mode [ 62.562721][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.580617][ T5333] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.402: invalid indirect mapped block 256 (level 2) [ 62.594765][ T5333] EXT4-fs (loop5): 2 truncates cleaned up [ 62.661119][ T2477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.671000][ T2477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.680641][ T2477] bond0 (unregistering): Released all slaves [ 62.690643][ T5333] veth2: entered promiscuous mode [ 62.695667][ T5333] veth2: entered allmulticast mode [ 62.710920][ T5302] chnl_net:caif_netlink_parms(): no params data found [ 62.779577][ T357] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.800229][ T2477] hsr_slave_0: left promiscuous mode [ 62.806551][ T2477] hsr_slave_1: left promiscuous mode [ 62.814746][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.818394][ T5345] loop6: detected capacity change from 0 to 2048 [ 62.822172][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.839128][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.846635][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.866559][ T2477] veth1_macvtap: left promiscuous mode [ 62.872257][ T2477] veth0_macvtap: left promiscuous mode [ 62.877876][ T2477] veth1_vlan: left promiscuous mode [ 62.883375][ T2477] veth0_vlan: left promiscuous mode [ 62.951186][ T5352] FAULT_INJECTION: forcing a failure. [ 62.951186][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 62.964020][ T5352] CPU: 1 UID: 0 PID: 5352 Comm: syz.8.407 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.964054][ T5352] Tainted: [W]=WARN [ 62.964061][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.964072][ T5352] Call Trace: [ 62.964078][ T5352] [ 62.964085][ T5352] __dump_stack+0x1d/0x30 [ 62.964107][ T5352] dump_stack_lvl+0x95/0xd0 [ 62.964127][ T5352] dump_stack+0x15/0x1b [ 62.964149][ T5352] should_fail_ex+0x263/0x280 [ 62.964174][ T5352] should_failslab+0x8c/0xb0 [ 62.964198][ T5352] kmem_cache_alloc_noprof+0x68/0x490 [ 62.964218][ T5352] ? vm_area_dup+0x33/0x2c0 [ 62.964238][ T5352] vm_area_dup+0x33/0x2c0 [ 62.964259][ T5352] __split_vma+0xe9/0x660 [ 62.964280][ T5352] ? refill_obj_stock+0x254/0x2e0 [ 62.964311][ T5352] vma_modify+0xbcb/0xd30 [ 62.964340][ T5352] ? vm_area_free+0x71/0xb0 [ 62.964363][ T5352] vma_modify_flags+0x182/0x210 [ 62.964400][ T5352] mprotect_fixup+0x30e/0x5e0 [ 62.964437][ T5352] do_mprotect_pkey+0x67b/0x920 [ 62.964466][ T5352] __x64_sys_mprotect+0x48/0x60 [ 62.964500][ T5352] x64_sys_call+0x2c3b/0x3000 [ 62.964527][ T5352] do_syscall_64+0xc0/0x2a0 [ 62.964549][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.964569][ T5352] RIP: 0033:0x7f85a390aab7 [ 62.964584][ T5352] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.964600][ T5352] RSP: 002b:00007f85a2365d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 62.964622][ T5352] RAX: ffffffffffffffda RBX: 00007f859c000000 RCX: 00007f85a390aab7 [ 62.964637][ T5352] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f859c000000 [ 62.964648][ T5352] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 62.964660][ T5352] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 62.964673][ T5352] R13: 0000000000001000 R14: 00007f85a0000000 R15: 0000000001cb9000 [ 62.964689][ T5352] [ 63.080286][ T5342] process 'syz.2.404' launched './file0' with NULL argv: empty string added [ 63.175720][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 63.175737][ T29] audit: type=1400 audit(1768805950.265:1100): avc: denied { execute_no_trans } for pid=5339 comm="syz.2.404" path="/72/file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.181983][ T5342] Invalid argument reading file caps for ./file0 [ 63.234817][ T2477] team0 (unregistering): Port device team_slave_1 removed [ 63.245069][ T2477] team0 (unregistering): Port device team_slave_0 removed [ 63.326165][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.329678][ T29] audit: type=1400 audit(1768805950.415:1101): avc: denied { read } for pid=5363 comm="syz.2.409" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.333527][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.356591][ T29] audit: type=1400 audit(1768805950.415:1102): avc: denied { open } for pid=5363 comm="syz.2.409" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.356665][ T29] audit: type=1400 audit(1768805950.415:1103): avc: denied { ioctl } for pid=5363 comm="syz.2.409" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.380426][ T5302] bridge_slave_0: entered allmulticast mode [ 63.430710][ T5302] bridge_slave_0: entered promiscuous mode [ 63.446085][ T5302] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.453280][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.461280][ T5302] bridge_slave_1: entered allmulticast mode [ 63.468155][ T5302] bridge_slave_1: entered promiscuous mode [ 63.489322][ T5302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.500460][ T5302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.521679][ T5302] team0: Port device team_slave_0 added [ 63.528576][ T5302] team0: Port device team_slave_1 added [ 63.547556][ T5302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.554641][ T5302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.580715][ T5302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.592761][ T5302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.599853][ T5302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.626119][ T5302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.654573][ T5302] hsr_slave_0: entered promiscuous mode [ 63.660909][ T5302] hsr_slave_1: entered promiscuous mode [ 63.666905][ T5302] debugfs: 'hsr0' already exists in 'hsr' [ 63.672724][ T5302] Cannot create hsr debugfs directory [ 63.749173][ T5353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.859247][ T5383] loop8: detected capacity change from 0 to 512 [ 63.877581][ T5302] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 63.906986][ T5383] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.413: invalid indirect mapped block 256 (level 2) [ 63.931307][ T5388] vhci_hcd vhci_hcd.0: invalid port number 65 [ 63.944227][ T5302] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 63.970688][ T5391] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.983588][ T5302] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 63.987155][ T5383] EXT4-fs (loop8): 2 truncates cleaned up [ 64.000422][ T5302] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 64.039827][ T5383] veth2: entered promiscuous mode [ 64.045002][ T5383] veth2: entered allmulticast mode [ 64.143448][ T5412] bridge_slave_0: left allmulticast mode [ 64.149210][ T5412] bridge_slave_0: left promiscuous mode [ 64.154964][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.168410][ T5412] bridge_slave_1: left allmulticast mode [ 64.174357][ T5412] bridge_slave_1: left promiscuous mode [ 64.180342][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.191511][ T5412] bond0: (slave bond_slave_0): Releasing backup interface [ 64.201446][ T5412] bond0: (slave bond_slave_1): Releasing backup interface [ 64.216822][ T5412] team0: Port device team_slave_0 removed [ 64.227097][ T5412] team0: Port device team_slave_1 removed [ 64.234651][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.242155][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.251491][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.258981][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.277402][ T5412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.294249][ T3425] vcan0 speed is unknown, defaulting to 1000 [ 64.318150][ T5302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.345069][ T5302] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.378121][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 64.381456][ T5439] syzkaller1: entered promiscuous mode [ 64.389295][ T29] audit: type=1400 audit(1768805951.455:1104): avc: denied { ioctl } for pid=5438 comm="syz.8.420" path="socket:[11960]" dev="sockfs" ino=11960 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.392648][ T5439] syzkaller1: entered allmulticast mode [ 64.430697][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.437815][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.476228][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.483427][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.656279][ T5302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.660273][ T29] audit: type=1400 audit(1768805951.705:1105): avc: denied { accept } for pid=5438 comm="syz.8.420" lport=52509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.838920][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.848928][ T3717] Bluetooth: hci0: command 0x1003 tx timeout [ 65.000631][ T5500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 65.014708][ T5500] set_capacity_and_notify: 2 callbacks suppressed [ 65.014726][ T5500] loop2: detected capacity change from 0 to 512 [ 65.022042][ T29] audit: type=1400 audit(1768805952.095:1106): avc: denied { append } for pid=5498 comm="syz.2.430" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.063618][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.431'. [ 65.097257][ T5500] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.097748][ T5302] veth0_vlan: entered promiscuous mode [ 65.142306][ T5302] veth1_vlan: entered promiscuous mode [ 65.152600][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz.8.433'. [ 65.269624][ T5302] veth0_macvtap: entered promiscuous mode [ 65.291831][ T5526] vhci_hcd vhci_hcd.0: invalid port number 65 [ 65.301540][ T5302] veth1_macvtap: entered promiscuous mode [ 65.369920][ T5302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.382551][ T5302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.408183][ T61] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437055][ T29] audit: type=1400 audit(1768805952.515:1107): avc: denied { mounton } for pid=5302 comm="syz-executor" path="/root/syzkaller.irPXmi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.495291][ T363] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.509475][ T29] audit: type=1400 audit(1768805952.575:1108): avc: denied { append } for pid=5529 comm="syz.5.436" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.519629][ T363] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.548837][ T363] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.755869][ T5561] loop8: detected capacity change from 0 to 512 [ 65.786770][ T5545] mmap: syz.9.437 (5545) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.806459][ T5545] FAULT_INJECTION: forcing a failure. [ 65.806459][ T5545] name failslab, interval 1, probability 0, space 0, times 0 [ 65.819333][ T5545] CPU: 1 UID: 0 PID: 5545 Comm: syz.9.437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.819367][ T5545] Tainted: [W]=WARN [ 65.819375][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.819387][ T5545] Call Trace: [ 65.819394][ T5545] [ 65.819401][ T5545] __dump_stack+0x1d/0x30 [ 65.819430][ T5545] dump_stack_lvl+0x95/0xd0 [ 65.819452][ T5545] dump_stack+0x15/0x1b [ 65.819469][ T5545] should_fail_ex+0x263/0x280 [ 65.819491][ T5545] should_failslab+0x8c/0xb0 [ 65.819514][ T5545] kmem_cache_alloc_noprof+0x68/0x490 [ 65.819536][ T5545] ? __mpol_dup+0x42/0x1b0 [ 65.819565][ T5545] __mpol_dup+0x42/0x1b0 [ 65.819594][ T5545] mpol_set_shared_policy+0x80/0x860 [ 65.819624][ T5545] ? __rcu_read_unlock+0x4e/0x70 [ 65.819646][ T5545] shmem_set_policy+0x3d/0x50 [ 65.819670][ T5545] mbind_range+0x23d/0x440 [ 65.819696][ T5545] ? mas_find+0x5d5/0x700 [ 65.819713][ T5545] __se_sys_mbind+0x675/0xb30 [ 65.819742][ T5545] __x64_sys_mbind+0x78/0x90 [ 65.819769][ T5545] x64_sys_call+0x2a2b/0x3000 [ 65.819795][ T5545] do_syscall_64+0xc0/0x2a0 [ 65.819817][ T5545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.819836][ T5545] RIP: 0033:0x7ff019bbacb9 [ 65.819851][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.819869][ T5545] RSP: 002b:00007ff018617028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 65.819891][ T5545] RAX: ffffffffffffffda RBX: 00007ff019e35fa0 RCX: 00007ff019bbacb9 [ 65.819904][ T5545] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 65.819916][ T5545] RBP: 00007ff018617090 R08: 0000000000000000 R09: 0000000000000002 [ 65.819927][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.819950][ T5545] R13: 00007ff019e36038 R14: 00007ff019e35fa0 R15: 00007ffce756f9a8 [ 65.819970][ T5545] [ 66.065118][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.077850][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.083784][ T5558] Driver unsupported XDP return value 0 on prog (id 113) dev N/A, expect packet loss! [ 66.104038][ T29] audit: type=1400 audit(1768805953.185:1109): avc: denied { getopt } for pid=5568 comm="syz.6.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.125707][ T5561] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.440: invalid indirect mapped block 256 (level 2) [ 66.168321][ T5575] loop2: detected capacity change from 0 to 512 [ 66.176240][ T5561] EXT4-fs (loop8): 2 truncates cleaned up [ 66.188524][ T5575] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35007!=33349) [ 66.227088][ T5575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 66.235425][ T5575] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.241826][ T5575] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.443: bad orphan inode 267 [ 66.275653][ T5561] veth4: entered promiscuous mode [ 66.281152][ T5561] veth4: entered allmulticast mode [ 66.538386][ T5585] loop2: detected capacity change from 0 to 512 [ 66.594870][ T5585] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.762391][ T5585] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.789113][ T5596] loop6: detected capacity change from 0 to 1024 [ 66.816276][ T5585] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.445: Allocating blocks 41-42 which overlap fs metadata [ 66.834547][ T5596] EXT4-fs mount: 18 callbacks suppressed [ 66.834562][ T5596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.887791][ T5585] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.445: Allocating blocks 41-42 which overlap fs metadata [ 66.929355][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.959971][ T5601] loop6: detected capacity change from 0 to 128 [ 66.987515][ T5601] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.013311][ T5585] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.445: Failed to acquire dquot type 1 [ 67.026571][ T5601] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.042889][ T5585] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 67.058773][ T5601] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.068740][ T5585] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 67.109224][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.450'. [ 67.134236][ T5585] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.445: mark_inode_dirty error [ 67.181570][ T5585] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 67.183583][ T5609] loop6: detected capacity change from 0 to 2048 [ 67.230872][ T5585] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.445: mark_inode_dirty error [ 67.255540][ T5609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.269137][ T5585] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 67.284439][ T5585] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 67.293530][ T5585] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 67.294202][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.315658][ T5585] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.445: mark_inode_dirty error [ 67.354919][ T5585] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 67.369243][ T5615] vhci_hcd vhci_hcd.0: invalid port number 65 [ 67.378099][ T5585] EXT4-fs (loop2): 1 truncate cleaned up [ 67.391062][ T5585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.507032][ T5619] loop9: detected capacity change from 0 to 2048 [ 67.571012][ T5619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.781983][ T5302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.818900][ T5626] netlink: 68 bytes leftover after parsing attributes in process `syz.9.456'. [ 67.841438][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.886132][ T5632] FAULT_INJECTION: forcing a failure. [ 67.886132][ T5632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.903386][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz.9.459 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.903436][ T5632] Tainted: [W]=WARN [ 67.903444][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.903456][ T5632] Call Trace: [ 67.903463][ T5632] [ 67.903472][ T5632] __dump_stack+0x1d/0x30 [ 67.903516][ T5632] dump_stack_lvl+0x95/0xd0 [ 67.903600][ T5632] dump_stack+0x15/0x1b [ 67.903618][ T5632] should_fail_ex+0x263/0x280 [ 67.903644][ T5632] should_fail+0xb/0x20 [ 67.903667][ T5632] should_fail_usercopy+0x1a/0x20 [ 67.903746][ T5632] _copy_from_user+0x1c/0xb0 [ 67.903781][ T5632] set_user_sigmask+0x63/0x1a0 [ 67.903812][ T5632] __se_sys_ppoll+0x1b4/0x220 [ 67.903851][ T5632] __x64_sys_ppoll+0x67/0x80 [ 67.903870][ T5632] x64_sys_call+0x22fe/0x3000 [ 67.903893][ T5632] do_syscall_64+0xc0/0x2a0 [ 67.903913][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.903961][ T5632] RIP: 0033:0x7ff019bbacb9 [ 67.903981][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.904002][ T5632] RSP: 002b:00007ff018617028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 67.904070][ T5632] RAX: ffffffffffffffda RBX: 00007ff019e35fa0 RCX: 00007ff019bbacb9 [ 67.904084][ T5632] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 67.904096][ T5632] RBP: 00007ff018617090 R08: 0000000000000008 R09: 0000000000000000 [ 67.904113][ T5632] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 67.904126][ T5632] R13: 00007ff019e36038 R14: 00007ff019e35fa0 R15: 00007ffce756f9a8 [ 67.904147][ T5632] [ 68.120986][ T5643] loop8: detected capacity change from 0 to 2048 [ 68.143722][ T5639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'. [ 68.155825][ T5643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.191196][ T5648] loop9: detected capacity change from 0 to 128 [ 68.200131][ T4430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.318631][ T5663] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.470: invalid indirect mapped block 256 (level 2) [ 68.328692][ T5648] syz.9.464: attempt to access beyond end of device [ 68.328692][ T5648] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 68.332408][ T5663] EXT4-fs (loop8): 2 truncates cleaned up [ 68.346308][ T5648] syz.9.464: attempt to access beyond end of device [ 68.346308][ T5648] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 68.365275][ T5648] syz.9.464: attempt to access beyond end of device [ 68.365275][ T5648] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 68.395384][ T5665] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.399319][ T5663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.411304][ T5665] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.424300][ T5648] syz.9.464: attempt to access beyond end of device [ 68.424300][ T5648] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 68.466878][ T5648] syz.9.464: attempt to access beyond end of device [ 68.466878][ T5648] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 68.486144][ T5663] veth6: entered promiscuous mode [ 68.491297][ T5663] veth6: entered allmulticast mode [ 68.501087][ T5648] syz.9.464: attempt to access beyond end of device [ 68.501087][ T5648] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 68.501706][ T3894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.514802][ T5648] syz.9.464: attempt to access beyond end of device [ 68.514802][ T5648] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 68.537501][ T5648] syz.9.464: attempt to access beyond end of device [ 68.537501][ T5648] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 68.592104][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 68.612196][ T5681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.477'. [ 68.621230][ T5681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.477'. [ 68.630461][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.9.464'. [ 68.631624][ T4430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.744832][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 68.744850][ T29] audit: type=1326 audit(1768805955.825:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff5fbacb9 code=0x7ffc0000 [ 68.757968][ T5697] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.781282][ T5697] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 68.788971][ T5697] audit: backlog limit exceeded [ 68.818140][ T29] audit: type=1326 audit(1768805955.825:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7efff5fbacb9 code=0x7ffc0000 [ 68.841908][ T29] audit: type=1326 audit(1768805955.825:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff5fbacb9 code=0x7ffc0000 [ 68.865558][ T29] audit: type=1326 audit(1768805955.825:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff5fbacb9 code=0x7ffc0000 [ 68.888468][ T5701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.889158][ T29] audit: type=1326 audit(1768805955.825:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efff5fbc547 code=0x7ffc0000 [ 68.925302][ T29] audit: type=1326 audit(1768805955.825:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efff5f7b58e code=0x7ffc0000 [ 68.948686][ T29] audit: type=1326 audit(1768805955.825:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.6.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efff5f7b58e code=0x7ffc0000 [ 68.973281][ T5703] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 68.979922][ T5703] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.987418][ T5703] vhci_hcd vhci_hcd.0: Device attached [ 69.041160][ T5302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.068632][ T5704] vhci_hcd: connection closed [ 69.068901][ T363] vhci_hcd vhci_hcd.2: stop threads [ 69.078987][ T363] vhci_hcd vhci_hcd.2: release socket [ 69.084380][ T363] vhci_hcd vhci_hcd.2: disconnect device [ 69.094006][ T5715] EXT4-fs: quotafile must be on filesystem root [ 69.107792][ T5715] 9p: Bad value for 'rfdno' [ 69.131923][ T5718] 9p: Bad value for 'rfdno' [ 69.151491][ T5718] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 69.167271][ T5718] EXT4-fs (loop6): orphan cleanup on readonly fs [ 69.181729][ T5723] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.194604][ T5718] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.210940][ T5718] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 69.226458][ T5302] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 69.237916][ T5718] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.490: corrupted inode contents [ 69.268863][ T5718] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.490: mark_inode_dirty error [ 69.280870][ T5718] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.490: corrupted inode contents [ 69.293757][ T5726] netlink: 'syz.9.492': attribute type 4 has an invalid length. [ 69.315145][ T5718] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.490: mark_inode_dirty error [ 69.352266][ T5718] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.490: corrupted inode contents [ 69.368498][ T5718] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 69.378128][ T5718] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.490: corrupted inode contents [ 69.390502][ T5718] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.490: mark_inode_dirty error [ 69.402860][ T5718] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 69.412400][ T5718] EXT4-fs (loop6): 1 truncate cleaned up [ 69.429047][ T5718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.447002][ T5733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5733 comm=syz.9.495 [ 69.546782][ T3894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.588241][ T5738] EXT4-fs: inline encryption not supported [ 69.611916][ T5738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.627821][ T5738] netlink: 76 bytes leftover after parsing attributes in process `syz.8.498'. [ 69.774205][ T4430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.831799][ T5760] FAULT_INJECTION: forcing a failure. [ 69.831799][ T5760] name failslab, interval 1, probability 0, space 0, times 0 [ 69.844656][ T5760] CPU: 1 UID: 0 PID: 5760 Comm: syz.6.505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.844751][ T5760] Tainted: [W]=WARN [ 69.844759][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.844770][ T5760] Call Trace: [ 69.844777][ T5760] [ 69.844784][ T5760] __dump_stack+0x1d/0x30 [ 69.844865][ T5760] dump_stack_lvl+0x95/0xd0 [ 69.844924][ T5760] dump_stack+0x15/0x1b [ 69.844942][ T5760] should_fail_ex+0x263/0x280 [ 69.844964][ T5760] should_failslab+0x8c/0xb0 [ 69.845003][ T5760] kmem_cache_alloc_noprof+0x68/0x490 [ 69.845022][ T5760] ? skb_clone+0x151/0x1f0 [ 69.845065][ T5760] skb_clone+0x151/0x1f0 [ 69.845093][ T5760] __netlink_deliver_tap+0x2c9/0x500 [ 69.845195][ T5760] ? netlink_unicast+0x543/0x690 [ 69.845417][ T5760] netlink_unicast+0x66b/0x690 [ 69.845446][ T5760] netlink_sendmsg+0x5c8/0x6f0 [ 69.845520][ T5760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.845539][ T5760] __sock_sendmsg+0x145/0x170 [ 69.845565][ T5760] ____sys_sendmsg+0x31e/0x4a0 [ 69.845601][ T5760] ___sys_sendmsg+0x195/0x1e0 [ 69.845751][ T5760] __x64_sys_sendmsg+0xd4/0x160 [ 69.845790][ T5760] x64_sys_call+0x17ba/0x3000 [ 69.845894][ T5760] do_syscall_64+0xc0/0x2a0 [ 69.845915][ T5760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.845939][ T5760] RIP: 0033:0x7efff5fbacb9 [ 69.845959][ T5760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.845979][ T5760] RSP: 002b:00007efff4a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.846013][ T5760] RAX: ffffffffffffffda RBX: 00007efff6235fa0 RCX: 00007efff5fbacb9 [ 69.846095][ T5760] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 69.846111][ T5760] RBP: 00007efff4a17090 R08: 0000000000000000 R09: 0000000000000000 [ 69.846125][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.846139][ T5760] R13: 00007efff6236038 R14: 00007efff6235fa0 R15: 00007ffd5c0865b8 [ 69.846157][ T5760] [ 70.116843][ T5770] set_capacity_and_notify: 7 callbacks suppressed [ 70.116863][ T5770] loop6: detected capacity change from 0 to 128 [ 70.131034][ T5769] erspan0: entered promiscuous mode [ 70.136314][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 70.145694][ T5770] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 70.163321][ T3311] udevd[3311]: incorrect ext4 checksum on /dev/loop6 [ 70.392405][ T5786] loop6: detected capacity change from 0 to 512 [ 70.402789][ T5786] ext4: Unknown parameter 'uid' [ 70.457724][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.514'. [ 70.478650][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.486192][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.499867][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.507302][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.573855][ T5790] loop9: detected capacity change from 0 to 512 [ 70.601207][ T5790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.615730][ T5790] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.680486][ T5796] loop2: detected capacity change from 0 to 512 [ 70.711211][ T5796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 70.750785][ T5302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.753239][ T5796] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.781498][ T5796] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 18: comm syz.2.516: lblock 23 mapped to illegal pblock 18 (length 1) [ 70.797045][ T5796] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.516: path /110/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 70.817895][ T5796] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.516: path /110/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 70.839807][ T5796] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.516: path /110/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 70.876433][ T5796] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 18: comm syz.2.516: lblock 23 mapped to illegal pblock 18 (length 1) [ 70.966531][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 70.968566][ T5813] loop8: detected capacity change from 0 to 512 [ 70.984098][ T5813] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 70.999602][ T5813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 71.007868][ T5813] System zones: 1-12 [ 71.015377][ T5813] EXT4-fs (loop8): 1 truncate cleaned up [ 71.031726][ T5813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.054464][ T5813] EXT4-fs warning (device loop8): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 71.067312][ T5813] EXT4-fs warning (device loop8): ext4_group_extend:1891: can't read last block, resize aborted [ 71.092284][ T4430] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.101639][ T5815] loop2: detected capacity change from 0 to 128 [ 71.143019][ T3309] ================================================================== [ 71.151234][ T3309] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 71.158302][ T3309] [ 71.160649][ T3309] write to 0xffff8881048bde04 of 4 bytes by task 3311 on cpu 1: [ 71.168392][ T3309] shmem_mknod+0x143/0x170 [ 71.172847][ T3309] shmem_create+0x34/0x50 [ 71.177223][ T3309] path_openat+0x1121/0x23c0 [ 71.181843][ T3309] do_filp_open+0x15d/0x280 [ 71.186377][ T3309] do_sys_openat2+0xa6/0x150 [ 71.190990][ T3309] __x64_sys_openat+0xf2/0x120 [ 71.195793][ T3309] x64_sys_call+0x2b07/0x3000 [ 71.200513][ T3309] do_syscall_64+0xc0/0x2a0 [ 71.205039][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.210950][ T3309] [ 71.213269][ T3309] read to 0xffff8881048bde04 of 4 bytes by task 3309 on cpu 0: [ 71.220813][ T3309] fill_mg_cmtime+0x5b/0x260 [ 71.225406][ T3309] generic_fillattr+0x24a/0x340 [ 71.230246][ T3309] shmem_getattr+0x181/0x200 [ 71.234922][ T3309] vfs_getattr_nosec+0x146/0x1e0 [ 71.239862][ T3309] vfs_statx+0x113/0x3b0 [ 71.244121][ T3309] vfs_fstatat+0x115/0x170 [ 71.248658][ T3309] __se_sys_newfstatat+0x55/0x3e0 [ 71.253717][ T3309] __x64_sys_newfstatat+0x55/0x70 [ 71.258775][ T3309] x64_sys_call+0x111f/0x3000 [ 71.263476][ T3309] do_syscall_64+0xc0/0x2a0 [ 71.268086][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.273999][ T3309] [ 71.276326][ T3309] value changed: 0x0e108b34 -> 0x0e17e67c [ 71.282072][ T3309] [ 71.284391][ T3309] Reported by Kernel Concurrency Sanitizer on: [ 71.290562][ T3309] CPU: 0 UID: 0 PID: 3309 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.301495][ T3309] Tainted: [W]=WARN [ 71.305305][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.315436][ T3309] ==================================================================