last executing test programs: 2m33.527207868s ago: executing program 4 (id=286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4008000) writev(0xffffffffffffffff, &(0x7f0000002480)=[{0x0}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x8000}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0) 2m33.498142389s ago: executing program 4 (id=287): syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local}}}}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46800c040001000000010000000200060001df0000dd000000380000004503008008000000050020"], 0x58) (async) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc02000000000000000000000000000000000000000000000000000000000000000000030088f8d6fb350000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd0200000000000000000000000000000000000000000000c4000500fe8000000000000000000000000000aa000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000020010000000000000000000000000000000000003c00000000000000fe8000000000000000000000000000bb000000000400"/308], 0x17c}}, 0x0) (rerun: 64) 2m33.435406771s ago: executing program 4 (id=288): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x1400, 0x1000000}, 0xc, &(0x7f0000000040)={0x0, 0x14}}, 0x40400d4) 2m33.434800531s ago: executing program 4 (id=289): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}]}, 0x48}}, 0x8000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="d400000002020101000000000000000005000004c00002802c"], 0xd4}, 0x1, 0x0, 0x0, 0x24040090}, 0x20008891) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x2b, 0x80801, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x59) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400", 0x36}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) (fail_nth: 3) 2m33.085670032s ago: executing program 4 (id=293): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x2000, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xd6b, 0xfd8, 0x2, 0xa}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040011}, 0x40080) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x10040081) sendmsg$AUDIT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x100, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x90c5}, 0x0) mknodat(r0, &(0x7f0000000500)='./file0\x00', 0x8000, 0x8000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) syz_open_procfs$userns(r3, &(0x7f00000005c0)) getdents64(r1, &(0x7f0000000600)=""/238, 0xee) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48000000) r5 = syz_usbip_server_init(0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000001100)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f00000008c0)={0x7a4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @NL80211_ATTR_CSA_IES={0x778, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x264, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "8bad1be23970248db244f7145c4ddec2963346525f4ec24170cc413cda1d21b7492e1c67d1f83806d4df23b5efaed907edd1eb8e3613abc89ecdc896955039e63b8fedf52750d35b7fc7da49996ca626b6b70ec92ab9046791ef6d178cdf88882b78587dc0310ba2cb8498add4a7abc1f0db2b37519885caa289ac6907fde33b451cfe3003a48194ad4a6c9b8083fc96b78c32d3a7d44c80952522d08f44791ffa87f11b2ca7e000e73546891bb5c1c9d21050"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x11, 0x3, "f8c75c04a8fc4d56c828d4f145"}, @NL80211_FTM_RESP_ATTR_LCI={0xce, 0x2, "3e0598ad81ddd652c91af97c47381c017c4ce23069b67c2c7c30c5f667659a708f2a3b93e6e3b14edd1b662df5edcfab06658647fdcd117488471f32f2a65ae02bfe7a36933c6a8884240a6044cfd0d8e522f69990baccc782ca171453e24550f75a4d2f862c2a489a24a21aff68aa30af69f31cbe340ae58ed1ecda7e61ffcbd3162cc1df58c3f7e82282415f06bfbf36453e6fd442d41d57f76dd2d51fa8673e9c60fa230496a2bc169d3598817a74123e6a0b3953c42253bac430216cc447e1fb03e100ecd97f5db7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xb8, 0x2, "53ea31e4fabc02045dd808753fd915e7f03d521a98495a1c5e09f4541016bf94bb5a0aee1e078f66d98ed7a87598c8ad51443f521a41c7011b7e856d0f11c17307e54ab12a0050bdf7fda59d22c6f8d7b6ce9222589c19789ba8fd1065887d525f66271c9bfcd36238a3a412b471690eecbd3bb64c227257d3db1ebf35273a99b413d149b0132eb1d27f497fd5b41f6f77e356821fadaf90268d9fcd8d96e7311bcdb70daac8d87cff3ac81ee161dda85a7d9652"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8, 0x80}}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x0, 0x0, {0xa5, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x1, 0x8}}]}, @NL80211_ATTR_BEACON_TAIL={0x1a8, 0xf, [@perr={0x84, 0xc8, {0x3, 0xc, [{{0x0, 0x1}, @broadcast, 0x80, @value, 0x1}, {{}, @device_b, 0xf7, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x3ff, @value, 0x39}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x1}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x2f}, {{}, @device_a, 0x2, @void, 0x1b}, {{}, @broadcast, 0x1, @void, 0x1e}, {{}, @broadcast, 0x7, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0xff, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x27}, {{0x0, 0x1}, @device_b, 0x20, @value=@device_b, 0x13}, {{}, @device_a, 0x6d6, @void, 0xa}]}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xd0, {0x6, 0xaa, 0x7f, "7bc26e969291572d9d5cb3a54ed44fbebe7e8e6797561a2f70c0ef98b0644aa01810f7fc6cfbdb6adb5313da6b1656688c4e516e18c1ec28e387e4e14f987f4cc02b87495481f855b0b69ead91a852567847dc64aa40ac88a57adea20a94436d66937ebafa9ebe3e89158a312aeb8340831c8cac9429bc1a4583dd02860572ad7f374fe0a7272dd3bc8341e164e61a7eca01e802fde2c81d612eba31c3a79b3653cfe2d6facf262777758185bd5f0f6b58e9ebb7ccddd68df212c4978e8c96916b238123b628af4abed862b8ff"}}]}, @NL80211_ATTR_BEACON_TAIL={0x122, 0xf, [@mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x34, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0x74}, @fast_bss_trans={0x37, 0xb7, {0x7, 0x3, "d2304dd8d288f7ca382b2302999342bc", "f90e596185f21615b7814785f312b67044db30934b9f017a0675c89d147aab9a", "0fe2ffc693f54c1ac302bd6be6877ba29ea92664421cf6de4cbb672ea56ee537", [{0x3, 0x28, "9b4c5e63be6d9b46613eeb662099f0e82342f63b32b36976305177a8212adbe14a1484823b0f16c9"}, {0x4, 0x21, "877301f462a499542cf9f66844c811d48ecba5923333e545a4931a261f11ac7d64"}, {0x2, 0x16, "9012b73d7cf9f462b54b593325c225f15ba3dffb0db1"}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x7}}, @preq={0x82, 0x30, {{0x1, 0x1, 0x1}, 0x10, 0xf, 0x1, @broadcast, 0x8, @void, 0x0, 0x80000000, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x7ff}, {{}, @device_b, 0x2}]}}, @link_id={0x65, 0x12, {@initial, @device_b}}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x36, 0x80, [@chsw_timing={0x68, 0x4, {0x4d25, 0x6d3}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x7, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0xe, 0x3, 0x4, 0x5}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xf, 0x7f80, 0xd984, 0x4]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x145, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @random="14934df95886", {0x7, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x10001, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x28}, @void, @val={0x6, 0x2, 0x602}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0xd8, 0x1fff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x1, 0xf}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x7f, 0x41}}, @void, [{0xdd, 0xeb, "73aba6d553b359c414e4829f1082d67be05cebc8bbf5f1b084c53cf9e8911398b17ff928ece7b366ee58cd4da83b17a162a2dda93b255158c1ff7e31bde67a2ffe6e11b83a5774049174acba33a4f976bc2d79dcee651b7a505b5624cc56887b8ab4119424385f8b2f6055ef0a7a02b8f1783f28beba49ce63a4ee0d2ad312b5b02a30dcafa05fff17d9153cee597b791599643b3347f4d22f5590efabcac2fc123a54bea4aaee0a433e0a167af6a6294e3fb2324309c6c2b8b2f3d97cf667ac94d8c506b340b9f0c0150922b4c328cac2ff5decd01f9cbad44561e93bdb4ed5ba51b6c8a718552d1d3f50"}]}}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x16}, {0x3}, {0x9, 0x1}, {0x6}]}]}, @NL80211_ATTR_BEACON_TAIL={0x80, 0xf, [@mic={0x8c, 0x10, {0x1d, "17b13d97d8f3", @short="7fa0c7f07af66868"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe5, 0x3, 0x81}}, @cf={0x4, 0x6, {0x7d, 0xc5, 0xf728, 0x1}}, @chsw_timing={0x68, 0x4, {0x7c63, 0x7}}, @tim={0x5, 0x54, {0x1, 0xf4, 0x4, "cda535649491d4c0e9d87e1844a941c3fcb48c3a41eee13937da6c1592b65cb66b07d8adda4c5732c87e6d82002aa7405387250ee55dd9fa915853b72410bd2196a715165d0c08dcd388f814019069dc1a"}}]}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]]}, 0x7a4}, 0x1, 0x0, 0x0, 0x44095}, 0x8008000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000012c0)={0x5, &(0x7f0000001280)=[{0xf, 0x80, 0x9, 0x1}, {0x3, 0x1, 0x2b, 0x6}, {0x4, 0x0, 0x6}, {0x7f, 0xc, 0x9, 0x1ff}, {0x9, 0x5, 0x10, 0x2}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@fallback=r8, 0x26, 0x1, 0x3, &(0x7f0000001140)=[0x0], 0x1, 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'gretap0\x00', &(0x7f0000001340)={'gre0\x00', 0x0, 0x20, 0x7800, 0x10000, 0x22a7, {{0x14, 0x4, 0x3, 0x32, 0x50, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0x4a, 0x3, 0xd, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@private=0xa010102, 0x10000}, {@multicast1, 0x80}, {@broadcast, 0xdc000000}, {@remote, 0x7}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@newtfilter={0x3c, 0x2c, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x6, 0x3}, {0xa, 0xfff2}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48001) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001800)=[{&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000001580)=""/4, 0x4}, {&(0x7f00000015c0)=""/24, 0x18}, {&(0x7f0000001600)=""/183, 0xb7}, {&(0x7f00000016c0)=""/69, 0x45}, {&(0x7f0000001740)=""/78, 0x4e}, {&(0x7f00000017c0)=""/51, 0x33}], 0x7) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x74, r11, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) sendmsg$nl_route(r9, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)=@getroute={0x14, 0x1a, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write(r5, &(0x7f0000001d80)="0cb27734bcef08851fa5cf1f2071e2e5c4bd682b7ff028e644aecca9", 0x1c) 2m32.280599307s ago: executing program 4 (id=302): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES8=r0, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff97) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) sched_setscheduler(r8, 0x1, &(0x7f0000000000)=0x4) listen(r9, 0xfffeffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x50, 0xffffffffffffffff, 0xec76e000) r11 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r12 = openat$binfmt(0xffffffffffffff9c, r11, 0x41, 0x1ff) fcntl$setlease(r12, 0x400, 0x1) 2m17.092711027s ago: executing program 32 (id=302): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES8=r0, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff97) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) sched_setscheduler(r8, 0x1, &(0x7f0000000000)=0x4) listen(r9, 0xfffeffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x50, 0xffffffffffffffff, 0xec76e000) r11 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r12 = openat$binfmt(0xffffffffffffff9c, r11, 0x41, 0x1ff) fcntl$setlease(r12, 0x400, 0x1) 1m38.123349689s ago: executing program 2 (id=741): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x480000, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0xd, 0x7fffffff}) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES8=r0], 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x800000, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0xaea5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x1e4ce6c6ad7470ee, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250500000008000700ac1e01010800020005000000080008006401010114000600fe8000000000000000000000000000aa080004000300bfc062140000140005002001000000000000000000000000000214000500ff020000000000527ea8f6000000000108000700ac1e000108000800e000000214000600"/142], 0x94}}, 0x24000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400122a0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_open_dev$sg(0x0, 0xa, 0x8001) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) 1m36.719436533s ago: executing program 2 (id=747): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) fsopen(0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x11) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000240)="9dad958a0ac2432619585557d363e80eacc3970fb4c59c0926e8efbf8708000000d75378901218d40d458449677545fc8371c2d167cb891fdb05eb8bf3c85058f0c4fa9570271e9cac002fb7d411ec128d9442a739a924fe7b9ff153c97d4bab4f6d2489169e43ac6e98ecb146b88b8896978e5ec18569ac611f77ff0e3695d64450210be17e", 0x86, 0x30048841, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x110c230000, 0xffeffffd, 0x0, @thr={0x0, 0x0}}) socket$rds(0x15, 0x5, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, 0x0, 0x60) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) 1m36.272295497s ago: executing program 2 (id=753): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0xffffffffffffff8c, 0x0, 0x0) 1m36.247471778s ago: executing program 2 (id=755): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xa, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000200000000000013d3800091117d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f", @ANYRES32=0x0], 0x3}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) 1m35.85958991s ago: executing program 2 (id=758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x480000, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0xd, 0x7fffffff}) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES8=r0], 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x800000, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0xaea5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x1e4ce6c6ad7470ee, &(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250500000008000700ac1e01010800020005000000080008006401010114000600fe8000000000000000000000000000aa080004000300bfc062140000140005002001000000000000000000000000000214000500ff020000000000527ea8f6000000000108000700ac1e000108000800e000000214000600"/142], 0x94}}, 0x24000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400122a0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_open_dev$sg(0x0, 0xa, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) 1m35.107328114s ago: executing program 2 (id=763): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x2, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(r2, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/12, 0xc}], 0x1, &(0x7f0000001500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x41) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0x9}, 0x8) capget(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18000700080000000000000000000000180100002020782500000000001c20207b1af8ff00000100007f5b7992fcf0dca1974d8fa3986fbcf8ffffffb702001008000000b703000000000000850000006200009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 1m35.106420044s ago: executing program 33 (id=763): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x0, 0x0, 0x0, 0x9, 0xb00d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x1}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0x80000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x2, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b700000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1016, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) wait4(r2, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/12, 0xc}], 0x1, &(0x7f0000001500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x41) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0x9}, 0x8) capget(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18000700080000000000000000000000180100002020782500000000001c20207b1af8ff00000100007f5b7992fcf0dca1974d8fa3986fbcf8ffffffb702001008000000b703000000000000850000006200009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 9.766662081s ago: executing program 5 (id=1447): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40004) socketpair(0x1, 0x2, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1000021, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x190) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000240)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) keyctl$restrict_keyring(0x4, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) socket$qrtr(0x2a, 0x2, 0x0) 7.545280661s ago: executing program 1 (id=1458): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x7a]}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10005}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080800}, 0x4048806) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) mq_unlink(&(0x7f0000000080)='..\x00') sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0021140012800b0001006c6f7770616e0000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendmmsg$sock(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x800000001}}], 0x18}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) 7.259866511s ago: executing program 0 (id=1459): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x82) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) (async) r2 = socket$inet(0x2, 0x80001, 0x84) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000050000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x876, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xd5d1, @remote}]}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000962b0100040000040f00b9aa2764daacaf4b0be1cea4f022e158b130b3be9d366bf95540fd08c5794d7ae20e92b978feef32ce886c8edaf9d6"], 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$cont(0x7, r4, 0x0, 0x200000000000008) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001800)={0x0, ""/256, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000800)={r5, 0x5}) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xfa, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async, rerun: 64) creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') (async) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000180)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}], 0x8) (async, rerun: 32) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) 7.097338756s ago: executing program 0 (id=1461): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x79) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000001600)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)="fc6f19", 0x100000}], 0x1}}], 0x1, 0x40) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 6.940053801s ago: executing program 3 (id=1463): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket(0x10, 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x40000) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x1000000, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x10005d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3}, 0x0, 0x3, r2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x468, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat$incfs(r5, &(0x7f0000001480)='.pending_reads\x00', 0x400000, 0x1) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xe0, &(0x7f0000000240)={0x20, 0x1, 0x0, 0x1ff}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdda) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4000, 0x46020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd, 0xea}, 0xd00b, 0xc8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x400000002, 0xffffffffffffffff, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) (async) ioctl$BLKTRACESTOP(r10, 0x1275, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r9}, &(0x7f0000001380), &(0x7f00000013c0)=r10}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000001a00)={[{@dioread_lock}, {@noblock_validity}, {@max_batch_time}, {@grpquota}, {@prjquota}, {@grpjquota, 0x2e}, {@data_err_abort}, {@journal_checksum}, {@quota}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvLRxQ0Nq7ybqxU8d5GOrfT7IzszvrmW93xx7vZB1A16pkT0nE1oj4NSIGatn6ApXan5vXL0/8df3yRBJzcy//mVTL3bh+eaIoWmy3Jc8MpRHp+0nsbVDv9MVLZ8anpiYv5PmRmbNvjkxfvPTE6bPjpyZPTZ4bO3r0yOHRp58ae3JV4sziurHnnfP7dh9/9aMXJ+bitR8+z9q7NV9fjqNmcMV1VqISc7mFpf3V50dW/Or/LdtK6aS3gw1hWXoiIjtcfdX+PxA9sXDwBuKF9+Yz33aogcCayT6bdixa2pP/Tec/v4A7UaKPQ5cqPvGz77/FYz3HH5127dnsebIa/838UVvTG2n2XXaw9o29p8n2x1ZY/9aIODH798fZIxpehwAAWF1fZ+OfxxuN/9K4p1Ruez6HMhgRByNiZ0TcFRG7IuLuiGrZeyPivmXWX7klv3j88/OmtgJrUTb+eyaf26of/6V5iWQ+t60af1/y+umpyUP5PhmKvg1ZfnSJOr55/pcPm62rlMZ/2SOrvxgL5u34o3dD/TYnx2fGVxBynWvvRuzpbRR/Mj8TkO2B3RGxp43Xz/bZ6cc+25elt29ZvP728S9hFeaZ5j6NeLR2/GfjlvgLSa2mZvOTIxtjavLQSHFWLPbjT1dfKuf7Sum6+De2FtPGdoNtIDv+mxue/3n8RTco5munl1/H1d8+aPqdZvHxT+LEbLlE7fxPS0uy878/eaWa7s+XvT0+M3NhNKI/X1C3fGxh2yJflM/iHzrQuP/vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYIv7vn3v4jaX3UJvn/yrI4j+51PGPGEzK8/VtJHrOfPdVs/pbe/87Uk0N5Utaef9rtYEr2XcAAADwf5FW56CTdLhIly5O7YrN6dT56ZmDlXjr3MnaXPVg9KXFla6B0vXQ0fzacJEfuyV/OCJ2VP/TaFM1PzxxfmpbJwMHqvfq1PX/SNPh4dq635v90wtw51jWPFr57sAvvlz9xgDryv2a0L30f+he+j90L/0fulej/n8l4mYHmgKsM5//0L30f+he+j90L/0futLiW+KLn1tp507/hcTO4yvafM0TcwNr8sqzy9+qZ40ijfKPdjRNJBHRXhWRLl2mv4XaO5ZIb1vmWJu7ZRmJ/XliQ0S0utWVddurnX1fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC3/BgAA//+NJdz0") (async) syz_clone3(&(0x7f0000001280)={0x14202100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x1c}, &(0x7f0000000180)=""/154, 0x9a, &(0x7f0000000240)=""/4096, &(0x7f0000001240)}, 0x58) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtaction={0x460, 0x30, 0xb, 0x0, 0x1, {}, [{0x44c, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x655}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x60005, 0x1, 0x8, 0x1, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x198, 0x1d, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x3, 0x10000000, 0x231}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2235, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d0a, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x507, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x62, 0x8, 0x0, 0x1, 0x203}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x10001, 0x3, 0x1, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x670, 0x6}}]}, {0xf1, 0x6, "2319a7382117ecb12f24e539027fc3467d6ff1e7db4c8c8c1f64d89c787599a300e3c57a6534caa786e3a02aaa9dd85fbdee4a5b5f62524ceb1a1e175b2cfc005d47cf59b3b36901296e7a6c505b8387ab462343d5bfd45acfa756a6489ec02c09163005284d4ddd3fe3acd64543c98b33a3bf962a11996fb9b6cd35180f4ffa942fe245c20f4dbb784d82b6595643b7c26003910952c01fd4c92edfb466f23e2adb9c02ed448fb5fcf1a6bb3a369cd6fa0a7f49c0eef31a560334bd7546b7ecb03618b1d8d5fa2a4d73b640b6d757619578ae78755fe0a3323ebc71dff7b69e756c783471321b638a74dda2f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x114, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xfffff28f, 0x4, 0x4, 0xe9}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x81, 0x8, 0x4, 0x101}, 0x1}}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x280}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x275}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}]}, {0x71, 0x6, "90f145602d68453ff2415b6612e93949bde402adc22c1e652410ccb9aa8c56562cc7a262533ddaba449002dc8adaeeb44b33a3c1ee06c249d6c8d9f2399345dba83a4090ceb8fdbf66071789a75958dafe6f2ffbb01755cdb94eae15c3352d8116794f415783147839df8bf2d0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x140, 0xb, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0xffffffd6, 0x4, 0x9, 0xfffff800}}]}, {0xf7, 0x6, "9f9bb7a6a4602ac4aec740b6e3f7416f6ea28ca036835e749806480a37810d827febfd3d9365a70edfd9457c08e56240b3aa9b3affa685eab8ca976d990d38514231dfd002c0d48a233db500b83fc412c0682df10b1de793b714ed3d3aee3fac6e117f95800863a44f98cc8fb63637be17c077c4af56b2ed82ddf9dda0dafd97687f4b328bde53f269a3b2270dd9be573f7eb0ba6f771ea77110f7f800f80b1ff5baebccf683f184b38a9e7803adbc2ee29a79573cb54e60a5bcb80b38544091a960e19727e1f12e5028c56630354aa697c2607fb6e81027c9dc8df06e321c4a2d1bcabe398926d5216ea1c7d7e9550cb2752f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x460}, 0x1, 0x0, 0x0, 0x4004000}, 0x40044) 6.535629974s ago: executing program 5 (id=1464): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) 6.525217224s ago: executing program 3 (id=1465): pipe(&(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@journal_checksum}, {@nobh}, {@test_dummy_encryption}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a2, &(0x7f0000000980)="$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") lsetxattr$security_selinux(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000185000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 6.32834182s ago: executing program 1 (id=1466): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x480000, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0xd, 0x7fffffff}) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES8=r0], 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x800000, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0xaea5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x1e4ce6c6ad7470ee, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf250500000008000700ac1e01010800020005000000080008006401010114000600fe8000000000000000000000000000aa080004000300bfc062140000140005002001000000000000000000000000000214000500ff020000000000527ea8f6000000000108000700ac1e000108000800e000000214000600"/142], 0x94}}, 0x24000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400122a0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_open_dev$sg(0x0, 0xa, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) 5.866214834s ago: executing program 1 (id=1468): write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64], 0xb2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffdb1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$inet6(0xa, 0x1, 0x100) r4 = shmget$private(0x0, 0xf000, 0x100, &(0x7f0000fee000/0xf000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x3000) setsockopt$sock_attach_bpf(r3, 0x29, 0x12, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) unshare(0x2a020480) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r5, 0x3, 0x4, 0x8000c62) 5.635218902s ago: executing program 5 (id=1470): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2ee, &(0x7f0000000a80)="$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") (async) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2ee, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000040000000000006907864010102ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc000000907800000303ea1d1200"/32], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000040000000000006907864010102ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc000000907800000303ea1d1200"/32], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x2000000000000216, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080), 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x52}, 0xffffff9a) (async) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x52}, 0xffffff9a) 5.254218274s ago: executing program 0 (id=1472): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) wait4(r2, 0x0, 0x80000000, &(0x7f00000001c0)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x9, 0x6, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r5, &(0x7f000000af40)=[{{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004a00)="ab1b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000006080)}], 0x1, 0x0, 0x0, 0x7f000000}}], 0x2, 0x0) utime(0x0, 0x0) timer_create(0xfffffffffffffff4, 0x0, &(0x7f0000001400)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x125) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) 5.178989626s ago: executing program 6 (id=1473): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf5, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2000001e}}, 0x40) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x3, 0x9, 0x8, 0x2, 0x9]}, &(0x7f0000000240)=0x54) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xc0bb, 0x1eab, 0x9, 0x3, 0x9, 0xb38, 0x80000000, {0x0, @in6={{0xa, 0x4e23, 0xfff, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x7}}, 0x0, 0x0, 0x101, 0x0, 0x5}}, &(0x7f00000004c0)=0xb0) 5.103934598s ago: executing program 3 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/60, 0x3c}], 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000100)="942836", 0x3, 0xcd5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') exit(0x5ee) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000415000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01005bb90000000000000000000100000000020000000000"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 4.919440344s ago: executing program 5 (id=1475): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = socket(0x9, 0x800, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x202004, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@resgid, 0x32}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1e, 0x4e9, &(0x7f0000000b00)="$eJzs3d9rW9cdAPDvla0sP5zYYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNoX9AoZS20Kc+lUKhf0Ch5E8ohUD7XtrSUtqkfSi0jYqu5NhxpNhpZCm1Px+41rlH9+r7PZJ1pHPv4SqAPetkRJyKiPvVavVMRPQ36jONJVbrS227e3dvTtSWJKrVK18kEUm9rrbZ0IbHPNTYLY5F/OvvEf9NHo1bXl6ZHS8WC4uN9XxlbiFfXl45OzM3Pl2YLsyPjo5cGLs4dn5suC3t7IuIS3/95KXnX//bpXd+f/3Dq58N/S9p1Eest6Pd6k3Pxv4Ndb0RsbgTwbqkN20hAAA/BWvf838TEWeiP3rSb3MAAADAblL9U198l0RUAQAAgF0rk86BTTK5xjyAvshkcrn6HN5fxMFMsVSu/G6qtDQ/WZ8rOxDZzNRMsTDcmCs8ENmktj6SltfXz21aH42IoxHxYv+BdD03USpOdvvgBwAAAOwRhzaN/7/ur4//N/i2a8kBAAAA7TPQ7QQAAACAHWf8DwAAALuf8T8AAADsav+4fLm2VNd+/3ry2vLSbOna2clCeTY3tzSRmygtLuSmS6Xp9Jp9c1s9XrFUWvhDzC/dyFcK5Uq+vLxyda60NF+5OvPQT2ADAAAAHXT017c/SCJi9Y8H0qVmX7eTAjqi90k2/njn8gA6r6fbCQBd80Sf/+veONLuRICOy3Y7AaDrki3ubzl559325wIAAOyMwV82P//fs+WxgdVMh1IEdojjf7B3Of8Pe9ePPP8P7ALZ6AkDedjbtroE6NOf/69WnyghAACg7frSJcnkItLjAH2RyeRyEYfTMUE2mZopFoYj4khEvN+f/VltfSTdM9lyzjAAAAAAAAAAAAAAAAAAAAAAAAAAUFetJlEFAAAAdrWIzKdJejX/iMH+032bjw/sS77pT28j4vqrV16+MV6pLI7U6r98UF95pVF/rhtHMAAAAIDN1sbpa+N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGine3dvTqwtnYz7+V8iYqBZ/N7Yn97uj2xEHPwqid4N+yUR0dOG+Ku3IuJYs/hJLa0YaGTRLP6BLsc/1Ib4sJfdrvU/f272/svEyfS2+fvvQtpDPb3W/V/mQf/X0yR+re7wNmMcv/NWvmX8WxHHe5v3P2vxkxb9z6ltxv/Pv1dWWt1XfS1isOnnT/JQrHxlbiFfXl45OzM3Pl2YLsyPjo5cGLs4dn5sOD81Uyw0/jaN8cKv3r7/uPYfbBF/YIv2n95m+7+/c+Puz+vF7IPdk/X4Q6eav/7HWsTPNF7/3zbKtfsH18qr9fJGJ95878Tj2j/Zov1bvf5D22z/mX8+99E2NwUAOqC8vDI7XiwWFvd04amejdrXotna3t1uxbNZqD0zz0AaTQv/34FH7tkl/wnd7JUAAICd8OgYGAAAAAAAAAAAAAAAAAAAAOi0TlxOLLsp5mr6tx1XzwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaJ8fAgAA//+6aNF2") ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) socket$inet6(0xa, 0x6, 0xffffffff) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x30, r5, 0xa) getsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/73, 0x49}], 0x2) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xa, 0x2, 0x81, 0xc2, 0x0, 0xb8, 0x42, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x2000, 0xfc, 0x2, 0x6, 0x0, 0xb19, 0xfff5, 0x0, 0x26, 0x0, 0xe}, r3, 0xa, r5, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$KDSETMODE(r0, 0x4b63, 0x4) 4.919081535s ago: executing program 0 (id=1476): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x7a]}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10005}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080800}, 0x4048806) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) mq_unlink(&(0x7f0000000080)='..\x00') sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0021140012800b0001006c6f7770616e0000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendmmsg$sock(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x800000001}}], 0x18}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) 4.43662801s ago: executing program 1 (id=1477): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf4198, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x7}, 0x6b04, 0x0, 0x3, 0x8, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000086a0564004000"], &(0x7f00000005c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x0, 0x3, 0x1, 0x40, 0xe1}, 0x47, &(0x7f0000000640)=ANY=[], 0x3, [{0x57, &(0x7f0000000400)=@string={0x57, 0x3, "d36fa90e5335a24f5705f80dbc641744dffc7ca1033977c05752dff2d146a21c08fc315329b783885a77b7172b6cf88c8ce53085251b9876d1dd622dfc86802e3068dfb979b3cb92dbde879ee01cf89ccfc9f07b7b"}}, {0xa7, &(0x7f0000000480)=ANY=[@ANYBLOB="a70379fda858a0c2e3b4b0db83b832d2043927748076d84fc5c4aadaa777b6572f4f6589384ecdcc15163a929761d36ded330b4da3734f6b4af283e38eac97472aaf26b9817c2dedb0533311beb2d2ad965fd86c0e97e456e122d03be6e5657dc5a642939868f3483c323bf19b3a7f125fd9e99a088cd63a0b4fa48efcb49fa186a503273eb770028120bec825f85a5c1a7b6e3f4014508aedba890fa53fa94bbcc1bb61fd4424"]}, {0x0, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x1fffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.363131622s ago: executing program 5 (id=1478): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0xa1081e, &(0x7f00000001c0), 0xfd, 0x4fa, &(0x7f00000005c0)="$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") socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open$cgroup(&(0x7f0000000ac0)={0x5, 0x80, 0x3, 0x80, 0x6f, 0xb, 0x0, 0xba5f, 0x63008, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x4840, 0xc, 0x7, 0x8, 0x6ae9e902, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x101}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x5, 0x81, 0x2, 0xe, 0x0, 0x6a3f0624, 0x90000, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, @perf_config_ext={0x5, 0x6}, 0x105973, 0x7, 0x2, 0x7, 0x1, 0x80f, 0x740d, 0x0, 0x7fd, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) creat(0x0, 0x12e) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') poll(&(0x7f0000000140), 0x0, 0xb) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x25f14}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) 4.099520161s ago: executing program 3 (id=1479): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYBLOB='trans=fd,rfdno', @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESHEX, @ANYRES32]) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}], [], 0x6b}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1d, &(0x7f0000000380)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) 4.096001481s ago: executing program 6 (id=1480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}], 0x1, 0x4000801) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x5, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, r5) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r6) lseek(r3, 0xfffffffffffffffe, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000210444fb4b929eaaa73e00000000", @ANYRES32=0x0, @ANYBLOB="0000010004090000140012800a000100767863616e0000000400028008000300", @ANYRES32=r8], 0x3c}}, 0x24000840) 2.984027116s ago: executing program 1 (id=1481): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) unshare(0x6020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010020000000000000000000000a68000000060a0b0400000000000000000200fffe3c0004803800018007000100637400002c000280080001400000000205000300000000000500030000000000080002400000000d08000140000000150900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x501000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000841}, 0x20084800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x84e}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa4e9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000000}, 0x8800) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000001480)="e099547e0be670b79a84e4b0d387", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="cd992abd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="000000000000c400"], 0x24}, 0x1, 0x0, 0x0, 0x8085}, 0x20040000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x23, 0x0, &(0x7f0000000200)) 2.978224706s ago: executing program 0 (id=1482): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x79) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000001600)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f00000001c0)="fc6f19", 0x100000}], 0x1}}], 0x1, 0x40) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.347569756s ago: executing program 6 (id=1483): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x4}, 0xff}, 0x18) 2.341895636s ago: executing program 5 (id=1484): pipe(&(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@journal_checksum}, {@nobh}, {@test_dummy_encryption}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a2, &(0x7f0000000980)="$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") lsetxattr$security_selinux(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000185000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 2.289186508s ago: executing program 6 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x4c, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) (fail_nth: 3) 2.271495959s ago: executing program 3 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x4fc5, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) (async) rename(0x0, &(0x7f00000001c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") (async) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fremovexattr(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='btrfs,\x00']) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x1, 0x0) (async) fcntl$setpipe(r8, 0x407, 0xffffffff80000002) write(r6, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) syz_pidfd_open(0x0, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000080)={r11, 0x9}, &(0x7f0000000180)=0x8) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r12, 0x1, 0x70bf25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xfffffd4a, 0x90, 0xe1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 2.21541249s ago: executing program 1 (id=1487): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf5, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2000001e}}, 0x40) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x3, 0x9, 0x8, 0x2, 0x9]}, &(0x7f0000000240)=0x54) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xc0bb, 0x1eab, 0x9, 0x3, 0x9, 0xb38, 0x80000000, {0x0, @in6={{0xa, 0x4e23, 0xfff, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x7}}, 0x0, 0x0, 0x101, 0x0, 0x5}}, &(0x7f00000004c0)=0xb0) 2.114454853s ago: executing program 6 (id=1488): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = socket(0x9, 0x800, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x202004, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@resgid, 0x32}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1e, 0x4e9, &(0x7f0000000b00)="$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") ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) socket$inet6(0xa, 0x6, 0xffffffff) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x30, r5, 0xa) getsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/73, 0x49}], 0x2) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xa, 0x2, 0x81, 0xc2, 0x0, 0xb8, 0x42, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x2000, 0xfc, 0x2, 0x6, 0x0, 0xb19, 0xfff5, 0x0, 0x26, 0x0, 0xe}, r3, 0xa, r5, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$KDSETMODE(r0, 0x4b63, 0x4) 1.097904665s ago: executing program 3 (id=1489): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/60, 0x3c}], 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000100)="942836", 0x3, 0xcd5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') exit(0x5ee) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000415000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01005bb90000000000000000000100000000020000000000"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 778.546965ms ago: executing program 6 (id=1490): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcf5, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2000001e}}, 0x40) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x3, 0x9, 0x8, 0x2, 0x9]}, &(0x7f0000000240)=0x54) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xc0bb, 0x1eab, 0x9, 0x3, 0x9, 0xb38, 0x80000000, {0x0, @in6={{0xa, 0x4e23, 0xfff, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x7}}, 0x0, 0x0, 0x101, 0x0, 0x5}}, &(0x7f00000004c0)=0xb0) 0s ago: executing program 0 (id=1491): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)="e67ab1660473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e645e68500", 0x26, 0xef8d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000f4ffffff611064000000000063019a00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f00000000c0)="800034ca09000000", 0x8, 0x2004c8d0, &(0x7f0000000040)={0xa, 0xfdfd, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x6) set_mempolicy(0x3, &(0x7f00000001c0)=0xffffffffffffff80, 0xff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x16, &(0x7f0000000180)="aff7", 0x0, 0x3}, 0x50) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x7ff, 0x400, {{0x1c, 0x4, 0x0, 0x1e, 0x70, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x3f, [@multicast2, @empty, @multicast2]}, @ssrr={0x89, 0x13, 0xe8, [@private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0x6, [{@loopback, 0x1}, {@remote, 0x6}, {@empty, 0x8}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x8}, {@broadcast, 0x1}]}, @end, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x47, 0x0, &(0x7f00000003c0)="b9ff0300600d698cc3c4448c1cb89e14f086dd0cae0e400052c420ec8e6d1332360381979932b7cf555efdd7d90d632177adf829f795f216f3a662079f4b4d2f87e5feca6aab84", 0x0, 0x10f, 0x60000000, 0x196, 0x86, &(0x7f0000000240)="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"/366, &(0x7f0000000440)="8df39080a675b6565efa3ed46f2a2756e43abbfd8c44686c0408a0c42f2599fc2b73e132c834dac249597b64601e045af99decf86f5b32dc0404e599f505000000581ff6805ee283c03132988bb8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb6151fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49d", 0x5}, 0x50) kernel console output (not intermixed with test programs): .177509][ T6695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6695 comm=syz.0.936 [ 136.413640][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 136.413653][ T28] audit: type=1400 audit(2000000097.859:1289): avc: denied { getopt } for pid=6697 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.439317][ T6698] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 136.466342][ T6702] netlink: 96 bytes leftover after parsing attributes in process `syz.5.941'. [ 136.511481][ T6709] FAULT_INJECTION: forcing a failure. [ 136.511481][ T6709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.528218][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.944'. [ 136.537765][ T6709] CPU: 0 UID: 0 PID: 6709 Comm: syz.3.943 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.537791][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.537802][ T6709] Call Trace: [ 136.537810][ T6709] [ 136.537835][ T6709] __dump_stack+0x1d/0x30 [ 136.537866][ T6709] dump_stack_lvl+0x95/0xd0 [ 136.537887][ T6709] dump_stack+0x15/0x1b [ 136.537904][ T6709] should_fail_ex+0x25e/0x270 [ 136.537925][ T6709] should_fail+0xb/0x20 [ 136.537943][ T6709] should_fail_usercopy+0x1a/0x20 [ 136.537964][ T6709] _copy_from_iter+0xcc/0xe70 [ 136.538012][ T6709] ? __alloc_skb+0x511/0x6f0 [ 136.538033][ T6709] ? __alloc_skb+0x205/0x6f0 [ 136.538071][ T6709] netlink_sendmsg+0x4a4/0x6f0 [ 136.538095][ T6709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.538117][ T6709] ____sys_sendmsg+0x532/0x580 [ 136.538168][ T6709] ___sys_sendmsg+0x195/0x1e0 [ 136.538201][ T6709] __x64_sys_sendmsg+0xd4/0x160 [ 136.538229][ T6709] x64_sys_call+0x194c/0x3020 [ 136.538294][ T6709] do_syscall_64+0x136/0x3c0 [ 136.538394][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.538412][ T6709] RIP: 0033:0x7f385c9cce59 [ 136.538426][ T6709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.538441][ T6709] RSP: 002b:00007f385b427028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.538469][ T6709] RAX: ffffffffffffffda RBX: 00007f385cc45fa0 RCX: 00007f385c9cce59 [ 136.538484][ T6709] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 136.538497][ T6709] RBP: 00007f385b427090 R08: 0000000000000000 R09: 0000000000000000 [ 136.538627][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.538640][ T6709] R13: 00007f385cc46038 R14: 00007f385cc45fa0 R15: 00007fff0224fec8 [ 136.538662][ T6709] [ 136.882062][ T28] audit: type=1326 audit(2000000098.329:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6719 comm="syz.0.947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe31afce59 code=0x0 [ 137.126050][ T6734] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 137.132599][ T6734] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.144959][ T6734] vhci_hcd vhci_hcd.0: Device attached [ 137.158396][ T6735] vhci_hcd: connection closed [ 137.158616][ T49] vhci_hcd vhci_hcd.3: stop threads [ 137.168647][ T49] vhci_hcd vhci_hcd.3: release socket [ 137.175108][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 137.249120][ T6740] loop5: detected capacity change from 0 to 4096 [ 137.262496][ T6740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.287857][ T28] audit: type=1400 audit(2000000098.729:1291): avc: denied { write } for pid=6739 comm="syz.5.953" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.332192][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.382822][ T6746] loop5: detected capacity change from 0 to 512 [ 137.391960][ T6746] EXT4-fs: dax option not supported [ 137.680672][ T6752] loop5: detected capacity change from 0 to 164 [ 137.690897][ T6752] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.700418][ T6752] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.716643][ T6752] rock: directory entry would overflow storage [ 137.722859][ T6752] rock: sig=0x4f50, size=4, remaining=3 [ 137.728451][ T6752] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 138.076658][ T6756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6756 comm=syz.6.957 [ 138.089106][ T6756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6756 comm=syz.6.957 [ 138.615235][ T6767] netlink: 'syz.5.962': attribute type 1 has an invalid length. [ 138.625046][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.962'. [ 138.634656][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.962'. [ 138.722430][ T6773] FAULT_INJECTION: forcing a failure. [ 138.722430][ T6773] name failslab, interval 1, probability 0, space 0, times 0 [ 138.739394][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.5.965 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.739418][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.739430][ T6773] Call Trace: [ 138.739437][ T6773] [ 138.739444][ T6773] __dump_stack+0x1d/0x30 [ 138.739485][ T6773] dump_stack_lvl+0x95/0xd0 [ 138.739501][ T6773] dump_stack+0x15/0x1b [ 138.739516][ T6773] should_fail_ex+0x25e/0x270 [ 138.739535][ T6773] should_failslab+0x8c/0xb0 [ 138.739674][ T6773] kmem_cache_alloc_noprof+0x66/0x3f0 [ 138.739712][ T6773] ? __kernfs_new_node+0x70/0x440 [ 138.739740][ T6773] __kernfs_new_node+0x70/0x440 [ 138.739760][ T6773] ? rb_insert_color+0x26f/0x2a0 [ 138.739847][ T6773] ? __rcu_read_unlock+0x4e/0x70 [ 138.739867][ T6773] ? __rcu_read_unlock+0x4e/0x70 [ 138.739891][ T6773] ? kernfs_activate_one+0x10c/0x140 [ 138.740050][ T6773] ? __rcu_read_unlock+0x4e/0x70 [ 138.740091][ T6773] ? up_write+0x18/0x60 [ 138.740167][ T6773] kernfs_new_node+0xcf/0xf0 [ 138.740191][ T6773] __kernfs_create_file+0x4b/0x180 [ 138.740208][ T6773] ? __pfx_dev_attr_show+0x10/0x10 [ 138.740249][ T6773] ? __pfx_dev_attr_store+0x10/0x10 [ 138.740272][ T6773] sysfs_add_file_mode_ns+0x132/0x1b0 [ 138.740295][ T6773] internal_create_group+0x43e/0x9e0 [ 138.740399][ T6773] ? kernfs_add_one+0x208/0x290 [ 138.740486][ T6773] ? kernfs_put+0x25e/0x2c0 [ 138.740526][ T6773] sysfs_create_groups+0x3f/0xf0 [ 138.740551][ T6773] device_add_attrs+0xf2/0x3f0 [ 138.740570][ T6773] device_add+0x37a/0x790 [ 138.740588][ T6773] wakeup_source_sysfs_add+0x15a/0x1d0 [ 138.740635][ T6773] wakeup_source_register+0xfd/0x240 [ 138.740762][ T6773] ep_insert+0x851/0xd80 [ 138.740794][ T6773] do_epoll_ctl_file+0x645/0x700 [ 138.740821][ T6773] __se_sys_epoll_ctl+0xf1/0x190 [ 138.740848][ T6773] __x64_sys_epoll_ctl+0x55/0x70 [ 138.740921][ T6773] x64_sys_call+0x2a8b/0x3020 [ 138.740939][ T6773] do_syscall_64+0x136/0x3c0 [ 138.741028][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.741049][ T6773] RIP: 0033:0x7ffa00a8ce59 [ 138.741067][ T6773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.741082][ T6773] RSP: 002b:00007ff9ff4e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 138.741164][ T6773] RAX: ffffffffffffffda RBX: 00007ffa00d05fa0 RCX: 00007ffa00a8ce59 [ 138.741180][ T6773] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 138.741193][ T6773] RBP: 00007ff9ff4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.741206][ T6773] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 138.741220][ T6773] R13: 00007ffa00d06038 R14: 00007ffa00d05fa0 R15: 00007ffee6a03d48 [ 138.741239][ T6773] [ 139.105276][ T6781] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 139.111824][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.121038][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 139.127351][ T6784] vhci_hcd: connection closed [ 139.129803][ T49] vhci_hcd vhci_hcd.5: stop threads [ 139.141503][ T6787] FAULT_INJECTION: forcing a failure. [ 139.141503][ T6787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.156010][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.1.970 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.156038][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.156050][ T6787] Call Trace: [ 139.156057][ T6787] [ 139.156116][ T6787] __dump_stack+0x1d/0x30 [ 139.156135][ T6787] dump_stack_lvl+0x95/0xd0 [ 139.156154][ T6787] dump_stack+0x15/0x1b [ 139.156171][ T6787] should_fail_ex+0x25e/0x270 [ 139.156189][ T6787] should_fail+0xb/0x20 [ 139.156245][ T6787] should_fail_usercopy+0x1a/0x20 [ 139.156314][ T6787] _copy_from_user+0x1c/0xb0 [ 139.156341][ T6787] memdup_user+0x5e/0xd0 [ 139.156406][ T6787] strndup_user+0x68/0xb0 [ 139.156525][ T6787] __se_sys_mount+0x4d/0x2e0 [ 139.156550][ T6787] ? fput+0x8f/0xc0 [ 139.156571][ T6787] ? ksys_write+0x194/0x1a0 [ 139.156602][ T6787] __x64_sys_mount+0x67/0x80 [ 139.156627][ T6787] x64_sys_call+0x2d61/0x3020 [ 139.156649][ T6787] do_syscall_64+0x136/0x3c0 [ 139.156768][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.156790][ T6787] RIP: 0033:0x7f8d6788ce59 [ 139.156807][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.156825][ T6787] RSP: 002b:00007f8d662e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.156846][ T6787] RAX: ffffffffffffffda RBX: 00007f8d67b05fa0 RCX: 00007f8d6788ce59 [ 139.156885][ T6787] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000 [ 139.156896][ T6787] RBP: 00007f8d662e7090 R08: 0000200000000100 R09: 0000000000000000 [ 139.156908][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.156920][ T6787] R13: 00007f8d67b06038 R14: 00007f8d67b05fa0 R15: 00007ffc47a3fbc8 [ 139.156941][ T6787] [ 139.171220][ T49] vhci_hcd vhci_hcd.5: release socket [ 139.290992][ T6795] x_tables: duplicate underflow at hook 1 [ 139.297708][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 139.310781][ T6795] 9p: Bad value for 'wfdno' [ 139.354358][ T3406] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 139.520863][ T6791] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 139.685151][ T6807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6807 comm=syz.1.976 [ 139.697580][ T6807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6807 comm=syz.1.976 [ 139.770369][ T28] audit: type=1400 audit(2000000101.189:1292): avc: denied { read } for pid=6805 comm="syz.6.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.926119][ T28] audit: type=1400 audit(2000000101.339:1293): avc: denied { create } for pid=6809 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.976790][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 140.032120][ T28] audit: type=1400 audit(2000000101.479:1294): avc: denied { ioctl } for pid=6809 comm="syz.0.978" path="socket:[18645]" dev="sockfs" ino=18645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.101562][ T6820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6820 comm=syz.5.982 [ 140.115209][ T6820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6820 comm=syz.5.982 [ 140.129442][ T6820] usb usb1: usbfs: process 6820 (syz.5.982) did not claim interface 4 before use [ 140.199155][ T6824] FAULT_INJECTION: forcing a failure. [ 140.199155][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 140.226208][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.5.984 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.226234][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.226298][ T6824] Call Trace: [ 140.226306][ T6824] [ 140.226364][ T6824] __dump_stack+0x1d/0x30 [ 140.226532][ T6824] dump_stack_lvl+0x95/0xd0 [ 140.226549][ T6824] dump_stack+0x15/0x1b [ 140.226576][ T6824] should_fail_ex+0x25e/0x270 [ 140.226596][ T6824] ? virtio_transport_do_socket_init+0x39/0x190 [ 140.226650][ T6824] should_failslab+0x8c/0xb0 [ 140.226680][ T6824] __kmalloc_cache_noprof+0x5f/0x400 [ 140.226703][ T6824] virtio_transport_do_socket_init+0x39/0x190 [ 140.226734][ T6824] vsock_assign_transport+0x49a/0x610 [ 140.226790][ T6824] vsock_connect+0x3cc/0x7b0 [ 140.226811][ T6824] ? __pfx_autoremove_wake_function+0x10/0x10 [ 140.226845][ T6824] ? __pfx_vsock_connect+0x10/0x10 [ 140.226937][ T6824] __sys_connect+0x1f1/0x2a0 [ 140.227037][ T6824] __x64_sys_connect+0x3f/0x50 [ 140.227062][ T6824] x64_sys_call+0x2df0/0x3020 [ 140.227085][ T6824] do_syscall_64+0x136/0x3c0 [ 140.227226][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.227292][ T6824] RIP: 0033:0x7ffa00a8ce59 [ 140.227310][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.227329][ T6824] RSP: 002b:00007ff9ff4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 140.227350][ T6824] RAX: ffffffffffffffda RBX: 00007ffa00d05fa0 RCX: 00007ffa00a8ce59 [ 140.227365][ T6824] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000005 [ 140.227422][ T6824] RBP: 00007ff9ff4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.227460][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.227474][ T6824] R13: 00007ffa00d06038 R14: 00007ffa00d05fa0 R15: 00007ffee6a03d48 [ 140.227496][ T6824] [ 140.415200][ T3400] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 140.425709][ T3400] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 140.436828][ T3400] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 140.445705][ T3400] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 140.453690][ T3400] rtc rtc0: __rtc_set_alarm: err=-22 [ 140.634532][ T6840] loop5: detected capacity change from 0 to 1024 [ 140.661736][ T6842] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 140.668358][ T6842] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 140.675921][ T6842] vhci_hcd vhci_hcd.0: Device attached [ 140.702176][ T6840] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 140.733955][ T6844] vhci_hcd: connection closed [ 140.734256][ T5956] vhci_hcd vhci_hcd.1: stop threads [ 140.744848][ T5956] vhci_hcd vhci_hcd.1: release socket [ 140.750431][ T5956] vhci_hcd vhci_hcd.1: disconnect device [ 140.757045][ T6840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.784914][ T28] audit: type=1400 audit(2000000102.219:1295): avc: denied { write } for pid=6838 comm="syz.5.988" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.808043][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.818424][ T28] audit: type=1400 audit(2000000102.219:1296): avc: denied { write } for pid=6838 comm="syz.5.988" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.952643][ T6858] loop6: detected capacity change from 0 to 4096 [ 140.971287][ T6865] loop3: detected capacity change from 0 to 1024 [ 140.986527][ T6858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.990514][ T6865] EXT4-fs: Ignoring removed orlov option [ 141.009333][ T6858] EXT4-fs (loop6): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 141.027847][ T6865] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 141.135480][ T6855] syz.6.991 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 141.146207][ T6865] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 141.149751][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.6.991 Not tainted syzkaller #0 PREEMPT(lazy) [ 141.149775][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.149832][ T6855] Call Trace: [ 141.149839][ T6855] [ 141.149848][ T6855] __dump_stack+0x1d/0x30 [ 141.149873][ T6855] dump_stack_lvl+0x95/0xd0 [ 141.149894][ T6855] dump_stack+0x15/0x1b [ 141.149913][ T6855] dump_header+0x80/0x240 [ 141.149944][ T6855] oom_kill_process+0x295/0x350 [ 141.150022][ T6855] out_of_memory+0x981/0xbc0 [ 141.150049][ T6855] try_charge_memcg+0x621/0xa00 [ 141.150089][ T6855] __memcg_kmem_charge_page+0x199/0x3a0 [ 141.150113][ T6855] __alloc_frozen_pages_noprof+0x18a/0x350 [ 141.150160][ T6855] alloc_pages_mpol+0xa9/0x1d0 [ 141.150184][ T6855] alloc_pages_noprof+0x8f/0x140 [ 141.150209][ T6855] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 141.150256][ T6855] __kvmalloc_node_noprof+0x3d4/0x640 [ 141.150327][ T6855] ? futex_hash_allocate+0x192/0x920 [ 141.150391][ T6855] ? futex_hash_allocate+0x192/0x920 [ 141.150412][ T6855] futex_hash_allocate+0x192/0x920 [ 141.150432][ T6855] ? cap_task_prctl+0x13f/0x6b0 [ 141.150458][ T6855] futex_hash_prctl+0xd8/0xf0 [ 141.150552][ T6855] __se_sys_prctl+0x4f4/0x13c0 [ 141.150618][ T6855] __x64_sys_prctl+0x67/0x80 [ 141.150642][ T6855] x64_sys_call+0x2533/0x3020 [ 141.150703][ T6855] do_syscall_64+0x136/0x3c0 [ 141.150733][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.150755][ T6855] RIP: 0033:0x7f4ce532ce59 [ 141.150773][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.150791][ T6855] RSP: 002b:00007f4ce3d7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 141.150882][ T6855] RAX: ffffffffffffffda RBX: 00007f4ce55a5fa0 RCX: 00007f4ce532ce59 [ 141.150897][ T6855] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 141.150910][ T6855] RBP: 00007f4ce53c2e6f R08: 0000000000000000 R09: 0000000000000000 [ 141.150923][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.150952][ T6855] R13: 00007f4ce55a6038 R14: 00007f4ce55a5fa0 R15: 00007ffead865ff8 [ 141.150981][ T6855] [ 141.151026][ T6855] memory: usage 306964kB, limit 307200kB, failcnt 130 [ 141.160242][ T6865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.167077][ T6855] memory+swap: usage 309188kB, limit 9007199254740988kB, failcnt 0 [ 141.189737][ T6865] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.995: Invalid inode table block 0 in block_group 0 [ 141.206531][ T6855] kmem: usage 293048kB, limit 9007199254740988kB, failcnt 0 [ 141.238965][ T6858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.260340][ T6865] loop3: lost filesystem error report for type 5 error -117 [ 141.579823][ T6871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6871 comm=syz.5.996 [ 141.599589][ T6871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6871 comm=syz.5.996 [ 141.646511][ T28] audit: type=1400 audit(2000000103.019:1297): avc: denied { bind } for pid=6866 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.669679][ T6855] Memory cgroup stats for /syz6: [ 141.670060][ T6855] cache 20480 [ 141.678670][ T6855] rss 4096 [ 141.680946][ T28] audit: type=1400 audit(2000000103.019:1298): avc: denied { write } for pid=6866 comm="syz.5.996" path="socket:[18797]" dev="sockfs" ino=18797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.686695][ T6855] shmem 8192 [ 141.708881][ T6865] EXT4-fs (loop3): Remounting filesystem read-only [ 141.715443][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 141.715467][ C0] EXT4-fs (loop3): initial error at time 2000000103: __ext4_get_inode_loc:4885 [ 141.715493][ C0] EXT4-fs (loop3): last error at time 2000000103: __ext4_get_inode_loc:4885 [ 141.741069][ T6874] netlink: 'syz.1.998': attribute type 10 has an invalid length. [ 141.747933][ T6855] mapped_file 0 [ 141.761971][ T6855] dirty 0 [ 141.768321][ T6865] Quota error (device loop3): write_blk: dquota write failed [ 141.769570][ T6855] writeback 0 [ 141.800782][ T6865] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 141.817743][ T6855] workingset_refault_anon 240 [ 141.826473][ T6865] EXT4-fs (loop3): 1 truncate cleaned up [ 141.839511][ T6855] workingset_refault_file 0 [ 141.846457][ T6865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.866330][ T6855] swap 2260992 [ 141.869791][ T6855] swapcached 3309568 [ 141.873717][ T6855] pgpgin 17285 [ 141.877088][ T6855] pgpgout 17278 [ 141.880574][ T6855] pgfault 25305 [ 141.884103][ T6855] pgmajfault 34 [ 141.887743][ T6855] inactive_anon 0 [ 141.891562][ T6855] active_anon 4096 [ 141.895327][ T6855] inactive_file 0 [ 141.898949][ T6855] active_file 8192 [ 141.902726][ T6855] unevictable 0 [ 141.906225][ T6855] hierarchical_memory_limit 314572800 [ 141.911613][ T6855] hierarchical_memsw_limit 9223372036854771712 [ 141.917957][ T6855] total_cache 20480 [ 141.921811][ T6855] total_rss 4096 [ 141.925373][ T6855] total_shmem 8192 [ 141.929190][ T6855] total_mapped_file 0 [ 141.945550][ T6855] total_dirty 0 [ 141.953341][ T6855] total_writeback 0 [ 141.957328][ T6855] total_workingset_refault_anon 240 [ 141.974069][ T6855] total_workingset_refault_file 0 [ 141.979438][ T6855] total_swap 2260992 [ 141.983815][ T6855] total_swapcached 3309568 [ 141.988736][ T6855] total_pgpgin 17285 [ 142.092752][ T6884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6884 comm=syz.1.999 [ 142.105217][ T6884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6884 comm=syz.1.999 [ 142.136022][ T28] audit: type=1326 audit(2000000103.569:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.3.995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385c9cce59 code=0x7ffc0000 [ 142.171425][ T6855] total_pgpgout 17278 [ 142.186058][ T6855] total_pgfault 25305 [ 142.200031][ T6855] total_pgmajfault 34 [ 142.205107][ T6855] total_inactive_anon 0 [ 142.233756][ T6855] total_active_anon 4096 [ 142.245068][ T28] audit: type=1326 audit(2000000103.569:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.3.995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385c9cce59 code=0x7ffc0000 [ 142.274848][ T6855] total_inactive_file 0 [ 142.288947][ T6855] total_active_file 8192 [ 142.302463][ T6855] total_unevictable 0 [ 142.317409][ T28] audit: type=1326 audit(2000000103.569:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.3.995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385c9cce59 code=0x7ffc0000 [ 142.347912][ T6855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.991,pid=6854,uid=0 [ 142.384207][ T6892] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1004'. [ 142.399148][ T6855] Memory cgroup out of memory: Killed process 6854 (syz.6.991) total-vm:94168kB, anon-rss:1348kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 142.400707][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1004'. [ 142.417002][ T28] audit: type=1326 audit(2000000103.569:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.3.995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385c9cce59 code=0x7ffc0000 [ 142.453320][ T28] audit: type=1326 audit(2000000103.569:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.3.995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f385c9cce59 code=0x7ffc0000 [ 142.473336][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1004'. [ 142.496293][ T28] audit: type=1326 audit(2000000103.569:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.3.995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385c9cce59 code=0x7ffc0000 [ 142.530540][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.541222][ T6896] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1005'. [ 142.594013][ T6900] loop6: detected capacity change from 0 to 1024 [ 142.601822][ T6900] EXT4-fs: Ignoring removed bh option [ 142.608782][ T6900] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 142.623247][ T6900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.636063][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.650549][ T6904] loop5: detected capacity change from 0 to 128 [ 142.682266][ T6904] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.720903][ T6906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 142.727458][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.743411][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 142.754992][ T6907] vhci_hcd: connection closed [ 142.755205][ T5956] vhci_hcd vhci_hcd.3: stop threads [ 142.765366][ T5956] vhci_hcd vhci_hcd.3: release socket [ 142.770774][ T5956] vhci_hcd vhci_hcd.3: disconnect device [ 142.849699][ T6916] netlink: 'syz.6.1006': attribute type 2 has an invalid length. [ 143.099990][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 143.282340][ T6926] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1007'. [ 143.706218][ T360] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.762571][ T6949] loop5: detected capacity change from 0 to 512 [ 144.397537][ T6957] loop3: detected capacity change from 0 to 256 [ 144.409230][ T6956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6956 comm=syz.5.1020 [ 144.421847][ T6956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6956 comm=syz.5.1020 [ 144.908880][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.116544][ T6957] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.495512][ T6967] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 145.502120][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 145.531618][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 145.911773][ T6970] vhci_hcd: connection closed [ 146.266041][ T6975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6975 comm=syz.0.1026 [ 146.283202][ T6975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6975 comm=syz.0.1026 [ 146.340399][ T49] vhci_hcd vhci_hcd.6: stop threads [ 146.360430][ T49] vhci_hcd vhci_hcd.6: release socket [ 146.370306][ T3413] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 146.395084][ T49] vhci_hcd vhci_hcd.6: disconnect device [ 146.532196][ T3413] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 146.543083][ T6980] program syz.3.1028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.543263][ T6978] program syz.3.1028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.568334][ T3413] usb 13-1: enqueue for inactive port 0 [ 146.612138][ T3413] usb 13-1: enqueue for inactive port 0 [ 146.625327][ T3413] usb 13-1: enqueue for inactive port 0 [ 146.662938][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 146.662954][ T28] audit: type=1400 audit(2000000108.109:1384): avc: denied { write } for pid=6988 comm="syz.1.1032" name="file2" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.668558][ T6987] loop5: detected capacity change from 0 to 512 [ 146.672302][ T28] audit: type=1400 audit(2000000108.109:1385): avc: denied { open } for pid=6988 comm="syz.1.1032" path="/221/file2" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.720990][ T3413] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 146.727448][ T28] audit: type=1400 audit(2000000108.109:1386): avc: denied { ioctl } for pid=6988 comm="syz.1.1032" path="/221/file2" dev="tmpfs" ino=1176 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.765281][ T6991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'. [ 146.776449][ T28] audit: type=1400 audit(2000000108.149:1387): avc: denied { setopt } for pid=6990 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.803042][ T6987] serio: Serial port ttyS3 [ 146.804738][ T28] audit: type=1400 audit(2000000108.149:1388): avc: denied { listen } for pid=6990 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.023766][ T28] audit: type=1400 audit(2000000108.459:1389): avc: denied { bind } for pid=7002 comm="syz.3.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.036595][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.049294][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.055391][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.060306][ T28] audit: type=1400 audit(2000000108.459:1390): avc: denied { name_bind } for pid=7002 comm="syz.3.1037" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 147.061515][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.088355][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.094821][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.100929][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.106994][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.113176][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.119241][ T7004] tc action pedit 'at' offset 6 out of bounds [ 147.125339][ T7004] TC_ACT_REPEAT abuse ? [ 147.129567][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c01fc00: rx timeout, send abort [ 147.240190][ T7009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7009 comm=syz.3.1039 [ 147.252683][ T7009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7009 comm=syz.3.1039 [ 147.295225][ T28] audit: type=1400 audit(2000000108.459:1391): avc: denied { node_bind } for pid=7002 comm="syz.3.1037" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 147.352984][ T7007] loop6: detected capacity change from 0 to 1024 [ 147.459683][ T7007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.545629][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.574889][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c173c00: rx timeout, send abort [ 147.575129][ T7026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 147.589575][ T7026] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 147.614958][ T7033] hugetlbfs: Bad value '%' for mount option 'size' [ 147.614958][ T7033] [ 147.615533][ T28] audit: type=1400 audit(2000000109.059:1392): avc: denied { remount } for pid=7032 comm="syz.6.1042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 147.629005][ T7026] vhci_hcd vhci_hcd.0: Device attached [ 147.643786][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c01fc00: abort rx timeout. Force session deactivation [ 147.664274][ T7024] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 147.670803][ T7024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.684672][ T7033] loop6: detected capacity change from 0 to 512 [ 147.686154][ T7024] vhci_hcd vhci_hcd.0: Device attached [ 147.696550][ T7027] vhci_hcd: connection closed [ 147.698783][ T105] vhci_hcd vhci_hcd.1: stop threads [ 147.699388][ T7036] usbip_core: unknown command [ 147.704165][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1041'. [ 147.715435][ T7036] vhci_hcd: unknown pdu 0 [ 147.723878][ T105] vhci_hcd vhci_hcd.1: release socket [ 147.732158][ T28] audit: type=1400 audit(2000000109.169:1393): avc: denied { map } for pid=7023 comm="syz.3.1043" path="socket:[19025]" dev="sockfs" ino=19025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.732646][ T7033] EXT4-fs: Ignoring removed orlov option [ 147.758773][ T7024] loop3: detected capacity change from 0 to 1024 [ 147.765308][ T105] vhci_hcd vhci_hcd.1: disconnect device [ 147.769378][ T7036] usbip_core: unknown command [ 147.788203][ T7024] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 147.789901][ T7039] serio: Serial port ttyS3 [ 147.812118][ T360] vhci_hcd vhci_hcd.3: stop threads [ 147.821434][ T360] vhci_hcd vhci_hcd.3: release socket [ 147.833267][ T7033] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 147.833853][ T360] vhci_hcd vhci_hcd.3: disconnect device [ 147.881822][ T3413] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 147.961427][ T7054] FAULT_INJECTION: forcing a failure. [ 147.961427][ T7054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.974758][ T7054] CPU: 0 UID: 0 PID: 7054 Comm: syz.6.1048 Not tainted syzkaller #0 PREEMPT(lazy) [ 147.974786][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.974796][ T7054] Call Trace: [ 147.974803][ T7054] [ 147.974811][ T7054] __dump_stack+0x1d/0x30 [ 147.974834][ T7054] dump_stack_lvl+0x95/0xd0 [ 147.974902][ T7054] dump_stack+0x15/0x1b [ 147.974992][ T7054] should_fail_ex+0x25e/0x270 [ 147.975013][ T7054] should_fail+0xb/0x20 [ 147.975027][ T7054] should_fail_usercopy+0x1a/0x20 [ 147.975046][ T7054] _copy_from_user+0x1c/0xb0 [ 147.975079][ T7054] generic_map_update_batch+0x4a9/0x680 [ 147.975107][ T7054] ? __pfx_generic_map_update_batch+0x10/0x10 [ 147.975131][ T7054] bpf_map_do_batch+0x25b/0x380 [ 147.975158][ T7054] __sys_bpf+0xa8e/0xc30 [ 147.975239][ T7054] ? vfs_write+0x820/0x990 [ 147.975269][ T7054] __x64_sys_bpf+0x69/0x80 [ 147.975356][ T7054] x64_sys_call+0x10cb/0x3020 [ 147.975376][ T7054] do_syscall_64+0x136/0x3c0 [ 147.975419][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.975441][ T7054] RIP: 0033:0x7f4ce532ce59 [ 147.975458][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.975476][ T7054] RSP: 002b:00007f4ce3d5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.975525][ T7054] RAX: ffffffffffffffda RBX: 00007f4ce55a6090 RCX: 00007f4ce532ce59 [ 147.975536][ T7054] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 147.975548][ T7054] RBP: 00007f4ce3d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 147.975559][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.975569][ T7054] R13: 00007f4ce55a6128 R14: 00007f4ce55a6090 R15: 00007ffead865ff8 [ 147.975587][ T7054] [ 148.158083][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c173c00: abort rx timeout. Force session deactivation [ 148.222335][ T7060] FAULT_INJECTION: forcing a failure. [ 148.222335][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 148.235427][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.0.1052 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.235455][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.235469][ T7060] Call Trace: [ 148.235476][ T7060] [ 148.235482][ T7060] __dump_stack+0x1d/0x30 [ 148.235608][ T7060] dump_stack_lvl+0x95/0xd0 [ 148.235695][ T7060] dump_stack+0x15/0x1b [ 148.235705][ T7060] should_fail_ex+0x25e/0x270 [ 148.235717][ T7060] ? p9_fd_create+0xa5/0x240 [ 148.235727][ T7060] should_failslab+0x8c/0xb0 [ 148.235744][ T7060] __kmalloc_cache_noprof+0x5f/0x400 [ 148.235783][ T7060] p9_fd_create+0xa5/0x240 [ 148.235793][ T7060] p9_client_create+0x22d/0x760 [ 148.235808][ T7060] v9fs_session_init+0x38/0x4c0 [ 148.235864][ T7060] v9fs_get_tree+0x5c/0x5e0 [ 148.235903][ T7060] vfs_get_tree+0x57/0x1d0 [ 148.235918][ T7060] do_new_mount+0x288/0x8d0 [ 148.235955][ T7060] ? security_capable+0x7b/0x90 [ 148.236021][ T7060] path_mount+0x4ad/0xb90 [ 148.236102][ T7060] __se_sys_mount+0x28c/0x2e0 [ 148.236111][ T7060] ? fput+0x8f/0xc0 [ 148.236123][ T7060] __x64_sys_mount+0x67/0x80 [ 148.236186][ T7060] x64_sys_call+0x2d61/0x3020 [ 148.236198][ T7060] do_syscall_64+0x136/0x3c0 [ 148.236217][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.236230][ T7060] RIP: 0033:0x7fbe31afce59 [ 148.236252][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.236262][ T7060] RSP: 002b:00007fbe3054f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.236347][ T7060] RAX: ffffffffffffffda RBX: 00007fbe31d75fa0 RCX: 00007fbe31afce59 [ 148.236397][ T7060] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 148.236405][ T7060] RBP: 00007fbe3054f090 R08: 0000200000000200 R09: 0000000000000000 [ 148.236412][ T7060] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 148.236420][ T7060] R13: 00007fbe31d76038 R14: 00007fbe31d75fa0 R15: 00007ffda8a08878 [ 148.236431][ T7060] [ 148.648204][ T7066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7066 comm=syz.0.1053 [ 148.660715][ T7066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7066 comm=syz.0.1053 [ 149.498327][ T7067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7067 comm=syz.1.1054 [ 149.510804][ T7067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7067 comm=syz.1.1054 [ 149.553584][ T7074] loop6: detected capacity change from 0 to 512 [ 149.566065][ T7072] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.576895][ T7074] serio: Serial port ttyS3 [ 149.580447][ T7072] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.650925][ T7072] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.669920][ T7072] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.723186][ T7086] syzkaller0: entered promiscuous mode [ 149.730008][ T7086] syzkaller0: entered allmulticast mode [ 149.743398][ T7089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 149.749943][ T7089] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 149.790410][ T7089] vhci_hcd vhci_hcd.0: Device attached [ 149.815177][ T7072] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.827436][ T7072] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.840610][ T7090] vhci_hcd: connection closed [ 149.840858][ T40] vhci_hcd vhci_hcd.0: stop threads [ 149.854724][ T40] vhci_hcd vhci_hcd.0: release socket [ 149.878991][ T40] vhci_hcd vhci_hcd.0: disconnect device [ 149.975125][ T7101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7101 comm=syz.3.1065 [ 149.987696][ T7101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7101 comm=syz.3.1065 [ 150.063209][ T7072] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.094869][ T7072] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.290171][ T4915] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.298708][ T4915] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.333432][ T4915] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.341662][ T4915] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.371254][ T40] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.385724][ T40] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.394553][ T40] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.403228][ T40] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.424028][ T7109] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1070'. [ 150.442308][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 150.453608][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1070'. [ 150.482191][ T7114] FAULT_INJECTION: forcing a failure. [ 150.482191][ T7114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.495470][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.0.1072 Not tainted syzkaller #0 PREEMPT(lazy) [ 150.495497][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.495509][ T7114] Call Trace: [ 150.495517][ T7114] [ 150.495524][ T7114] __dump_stack+0x1d/0x30 [ 150.495613][ T7114] dump_stack_lvl+0x95/0xd0 [ 150.495630][ T7114] dump_stack+0x15/0x1b [ 150.495645][ T7114] should_fail_ex+0x25e/0x270 [ 150.495664][ T7114] should_fail+0xb/0x20 [ 150.495687][ T7114] should_fail_usercopy+0x1a/0x20 [ 150.495748][ T7114] _copy_to_user+0x20/0xa0 [ 150.495770][ T7114] simple_read_from_buffer+0xb5/0x130 [ 150.495797][ T7114] proc_fail_nth_read+0x10e/0x150 [ 150.495876][ T7114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.495904][ T7114] vfs_read+0x18e/0x7c0 [ 150.496034][ T7114] ksys_read+0xdc/0x1a0 [ 150.496056][ T7114] __x64_sys_read+0x40/0x50 [ 150.496080][ T7114] x64_sys_call+0x2886/0x3020 [ 150.496103][ T7114] do_syscall_64+0x136/0x3c0 [ 150.496136][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.496154][ T7114] RIP: 0033:0x7fbe31abd68e [ 150.496168][ T7114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.496185][ T7114] RSP: 002b:00007fbe3054efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.496227][ T7114] RAX: ffffffffffffffda RBX: 00007fbe3054f6c0 RCX: 00007fbe31abd68e [ 150.496326][ T7114] RDX: 000000000000000f RSI: 00007fbe3054f0a0 RDI: 0000000000000004 [ 150.496340][ T7114] RBP: 00007fbe3054f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.496354][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.496443][ T7114] R13: 00007fbe31d76038 R14: 00007fbe31d75fa0 R15: 00007ffda8a08878 [ 150.496463][ T7114] [ 150.889506][ T7124] loop6: detected capacity change from 0 to 512 [ 150.974432][ T7126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7126 comm=syz.5.1071 [ 150.986969][ T7126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7126 comm=syz.5.1071 [ 151.235510][ T7124] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.247110][ T7124] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 151.538312][ T7147] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1082'. [ 151.547811][ T7143] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 151.554362][ T7143] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.578401][ T7143] vhci_hcd vhci_hcd.0: Device attached [ 151.589299][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'. [ 151.601235][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 151.611234][ T7144] vhci_hcd: connection closed [ 151.611907][ T360] vhci_hcd vhci_hcd.6: stop threads [ 151.622358][ T360] vhci_hcd vhci_hcd.6: release socket [ 151.721304][ T7155] futex_wake_op: syz.3.1085 tries to shift op by 144; fix this program [ 151.730042][ T7155] futex_wake_op: syz.3.1085 tries to shift op by 144; fix this program [ 151.743684][ T360] vhci_hcd vhci_hcd.6: disconnect device [ 151.811869][ T3406] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 152.701115][ T7173] selinux_netlink_send: 2 callbacks suppressed [ 152.701129][ T7173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7173 comm=syz.6.1090 [ 152.719794][ T7173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7173 comm=syz.6.1090 [ 153.172637][ T7179] loop5: detected capacity change from 0 to 512 [ 153.228098][ T7179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.240875][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 153.240950][ T28] audit: type=1400 audit(2000000114.669:1398): avc: denied { write } for pid=7174 comm="syz.5.1091" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.679987][ T7194] FAULT_INJECTION: forcing a failure. [ 153.679987][ T7194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.701621][ T7194] CPU: 1 UID: 0 PID: 7194 Comm: syz.3.1098 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.701652][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.701665][ T7194] Call Trace: [ 153.701671][ T7194] [ 153.701678][ T7194] __dump_stack+0x1d/0x30 [ 153.701752][ T7194] dump_stack_lvl+0x95/0xd0 [ 153.701772][ T7194] dump_stack+0x15/0x1b [ 153.701791][ T7194] should_fail_ex+0x25e/0x270 [ 153.701812][ T7194] should_fail+0xb/0x20 [ 153.701829][ T7194] should_fail_usercopy+0x1a/0x20 [ 153.701932][ T7194] _copy_from_user+0x1c/0xb0 [ 153.701957][ T7194] __ia32_sys_rt_sigreturn+0x127/0x350 [ 153.702006][ T7194] x64_sys_call+0x2823/0x3020 [ 153.702072][ T7194] do_syscall_64+0x136/0x3c0 [ 153.702103][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.702124][ T7194] RIP: 0033:0x7f385c96e1d9 [ 153.702140][ T7194] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 153.702159][ T7194] RSP: 002b:00007f385b426a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 153.702191][ T7194] RAX: ffffffffffffffda RBX: 00007f385cc45fa0 RCX: 00007f385c96e1d9 [ 153.702206][ T7194] RDX: 00007f385b426a80 RSI: 00007f385b426bb0 RDI: 0000000000000021 [ 153.702220][ T7194] RBP: 00007f385b427090 R08: 0000000000000000 R09: 0000000000000000 [ 153.702234][ T7194] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 153.702247][ T7194] R13: 00007f385cc46038 R14: 00007f385cc45fa0 R15: 00007fff0224fec8 [ 153.702276][ T7194] [ 153.869594][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.943951][ T28] audit: type=1400 audit(2000000115.379:1399): avc: denied { mount } for pid=7195 comm="syz.0.1097" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 154.004642][ T7205] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1095'. [ 154.023833][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'. [ 154.037601][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 154.077723][ T7203] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 154.087778][ T28] audit: type=1400 audit(2000000115.519:1400): avc: denied { load_policy } for pid=7202 comm="syz.5.1100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 154.108133][ T7203] SELinux: failed to load policy [ 154.238753][ T7203] loop5: detected capacity change from 0 to 8192 [ 155.463411][ T7215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7215 comm=syz.1.1103 [ 155.475882][ T7215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7215 comm=syz.1.1103 [ 155.934124][ T7223] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 155.942733][ T7227] loop6: detected capacity change from 0 to 512 [ 156.048925][ T7228] loop3: detected capacity change from 0 to 1024 [ 156.063377][ T7228] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 156.063377][ T7228] [ 156.098843][ T7230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7230 comm=syz.5.1102 [ 156.111408][ T7230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7230 comm=syz.5.1102 [ 156.242289][ T7227] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.494855][ T7237] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1111'. [ 156.504988][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 156.529528][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 156.712869][ T28] audit: type=1400 audit(2000000118.159:1401): avc: denied { cpu } for pid=7226 comm="syz.6.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 157.699015][ T7253] loop5: detected capacity change from 0 to 512 [ 157.731748][ T7253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.901421][ T28] audit: type=1400 audit(2000000119.349:1402): avc: denied { checkpoint_restore } for pid=7243 comm="syz.0.1114" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.296190][ T7250] futex_wake_op: syz.0.1114 tries to shift op by 144; fix this program [ 158.370681][ T7253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.472067][ T7253] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.509602][ T7265] loop3: detected capacity change from 0 to 1024 [ 158.525734][ T7265] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.551357][ T7265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 158.575890][ T7265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.600248][ T28] audit: type=1400 audit(2000000120.039:1403): avc: denied { write } for pid=7252 comm="syz.5.1115" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.625594][ T7263] loop6: detected capacity change from 0 to 512 [ 158.632413][ T7265] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.662305][ T7263] EXT4-fs: Ignoring removed orlov option [ 158.755744][ T28] audit: type=1400 audit(2000000120.119:1404): avc: denied { write } for pid=7264 comm="syz.3.1119" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.870190][ T7263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.921598][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.934054][ T7263] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.067484][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.191670][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.227142][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.253410][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.371944][ T7282] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1124'. [ 159.393493][ T7275] loop5: detected capacity change from 0 to 512 [ 159.408744][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1124'. [ 159.453097][ T7275] ext4: Unknown parameter 'euid' [ 159.465793][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'. [ 159.491850][ T7280] loop3: detected capacity change from 0 to 512 [ 159.511567][ T7280] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.520610][ T7280] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 159.542884][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1121'. [ 159.592963][ T7280] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 159.611650][ T7280] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 159.620206][ T7280] System zones: 0-2, 18-18, 34-35 [ 159.631719][ T7280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.654736][ T7280] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.771970][ T7296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7296 comm=syz.0.1125 [ 159.784505][ T7296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7296 comm=syz.0.1125 [ 160.538037][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 160.638182][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 160.674638][ T7314] loop3: detected capacity change from 0 to 1024 [ 160.688752][ T28] audit: type=1400 audit(2000000122.129:1405): avc: denied { connect } for pid=7309 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.704004][ T7314] EXT4-fs: Ignoring removed oldalloc option [ 160.737252][ T7319] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1136'. [ 160.749256][ T7314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.761218][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1136'. [ 160.771829][ T7314] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.786796][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1136'. [ 160.814090][ T7314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1134: bg 0: block 112: padding at end of block bitmap is not set [ 160.828440][ T28] audit: type=1400 audit(2000000122.259:1406): avc: denied { write } for pid=7313 comm="syz.3.1134" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.953504][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.987551][ T7330] loop6: detected capacity change from 0 to 512 [ 160.988736][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1140'. [ 161.003241][ T7330] EXT4-fs: Ignoring removed i_version option [ 161.009877][ T7330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.023591][ T7330] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 161.052391][ T7330] EXT4-fs (loop6): 1 truncate cleaned up [ 161.104695][ T7330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.133860][ T28] audit: type=1400 audit(2000000122.569:1407): avc: denied { write } for pid=7329 comm="syz.6.1141" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.155881][ T28] audit: type=1400 audit(2000000122.569:1408): avc: denied { write } for pid=7329 comm="syz.6.1141" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.177893][ T28] audit: type=1400 audit(2000000122.569:1409): avc: denied { unlink } for pid=7329 comm="syz.6.1141" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.200883][ T28] audit: type=1400 audit(2000000122.569:1410): avc: denied { rename } for pid=7329 comm="syz.6.1141" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.243953][ T7330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.251176][ T7330] IPv6: NLM_F_CREATE should be set when creating new route [ 161.309306][ T28] audit: type=1400 audit(2000000122.739:1411): avc: denied { read } for pid=7316 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.390613][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.478276][ T7362] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 161.478276][ T7362] program syz.6.1149 not setting count and/or reply_len properly [ 161.651512][ T7367] tipc: Started in network mode [ 161.657469][ T7367] tipc: Node identity 5edad22a861d, cluster identity 4711 [ 161.665092][ T7367] tipc: Enabled bearer , priority 0 [ 161.672567][ T7367] syzkaller0: entered promiscuous mode [ 161.678068][ T7367] syzkaller0: entered allmulticast mode [ 161.700573][ T7367] syzkaller0: mtu greater than device maximum [ 161.710921][ T7366] tipc: Resetting bearer [ 161.725049][ T7366] tipc: Disabling bearer [ 161.782660][ T28] audit: type=1326 audit(2000000123.219:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7371 comm="syz.1.1153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6788ce59 code=0x7ffc0000 [ 161.884024][ T7378] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 162.062515][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.071100][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.086790][ T7392] dummy0: entered allmulticast mode [ 163.358698][ T7389] dummy0: left allmulticast mode [ 163.381905][ T7403] loop3: detected capacity change from 0 to 1024 [ 163.512156][ T7403] EXT4-fs: Ignoring removed oldalloc option [ 164.032959][ T7401] loop6: detected capacity change from 0 to 512 [ 164.389470][ T7405] __nla_validate_parse: 5 callbacks suppressed [ 164.389484][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1162'. [ 164.412805][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.530780][ T7403] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.577720][ T7403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1164: bg 0: block 112: padding at end of block bitmap is not set [ 165.378056][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 165.378228][ T28] audit: type=1400 audit(2000000126.019:1479): avc: denied { write } for pid=7402 comm="syz.3.1164" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.430405][ T7411] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 165.620321][ T7412] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1163'. [ 165.680309][ T28] audit: type=1400 audit(2000000127.099:1480): avc: denied { mounton } for pid=7406 comm="syz.1.1165" path="/253/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 166.158099][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.182647][ T28] audit: type=1400 audit(2000000127.609:1481): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 166.277639][ T28] audit: type=1400 audit(2000000127.719:1482): avc: denied { ioctl } for pid=7422 comm="syz.1.1169" path="socket:[19799]" dev="sockfs" ino=19799 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.344883][ T7423] syzkaller0: entered promiscuous mode [ 166.365434][ T7423] syzkaller0: entered allmulticast mode [ 166.433148][ T7427] loop3: detected capacity change from 0 to 512 [ 166.455313][ T7427] EXT4-fs: Ignoring removed nobh option [ 166.480090][ T7427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.502669][ T7427] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 166.519658][ T7431] sctp: [Deprecated]: syz.0.1168 (pid 7431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.519658][ T7431] Use struct sctp_sack_info instead [ 166.527808][ T7427] EXT4-fs (loop3): 1 truncate cleaned up [ 166.542434][ T7427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.639981][ T28] audit: type=1400 audit(2000000128.079:1483): avc: denied { ioctl } for pid=7426 comm="syz.3.1167" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 166.708866][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.823670][ T28] audit: type=1400 audit(2000000128.269:1484): avc: denied { bind } for pid=7435 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.845384][ T28] audit: type=1400 audit(2000000128.289:1485): avc: denied { listen } for pid=7435 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.848424][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1172'. [ 166.877544][ T7436] netlink: 'syz.3.1170': attribute type 4 has an invalid length. [ 166.956612][ T7441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 167.005733][ T7448] loop3: detected capacity change from 0 to 1024 [ 167.008311][ T28] audit: type=1400 audit(2000000128.449:1486): avc: denied { read } for pid=7450 comm="syz.1.1178" path="socket:[19874]" dev="sockfs" ino=19874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.013388][ T7448] EXT4-fs: Ignoring removed oldalloc option [ 167.081955][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.094533][ T7448] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.154187][ T28] audit: type=1326 audit(2000000128.599:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6788ce59 code=0x7ffc0000 [ 167.180028][ T28] audit: type=1326 audit(2000000128.599:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.1.1178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6788ce59 code=0x7ffc0000 [ 167.214400][ T7448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1177: bg 0: block 112: padding at end of block bitmap is not set [ 167.231411][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 167.275411][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.342750][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'. [ 167.371102][ T7477] tipc: Started in network mode [ 167.375982][ T7477] tipc: Node identity 4ed61cfeec5d, cluster identity 4711 [ 167.383103][ T7477] tipc: Enabled bearer , priority 0 [ 167.390729][ T7477] syzkaller0: entered promiscuous mode [ 167.396183][ T7477] syzkaller0: entered allmulticast mode [ 167.426383][ T7476] tipc: Resetting bearer [ 167.434431][ T7476] tipc: Disabling bearer [ 167.573893][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 167.587905][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1190'. [ 167.643653][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 167.697688][ T7495] futex_wake_op: syz.1.1196 tries to shift op by 144; fix this program [ 167.800764][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 167.870443][ T7514] loop6: detected capacity change from 0 to 512 [ 167.877336][ T7514] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.904032][ T7514] ------------[ cut here ]------------ [ 167.909536][ T7514] EA inode 11 i_nlink=2 [ 167.909562][ T7514] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.6.1201/7514 [ 167.924654][ T7514] Modules linked in: [ 167.928589][ T7514] CPU: 1 UID: 0 PID: 7514 Comm: syz.6.1201 Not tainted syzkaller #0 PREEMPT(lazy) [ 167.937972][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.948109][ T7514] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 167.954864][ T7514] Code: f6 35 97 ff 49 8d 7e 40 4c 8d 2d 2b eb 5a 05 e8 26 07 b6 ff 49 8b 6e 40 4c 89 e7 e8 5a 02 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 61 2a d8 03 90 90 90 90 90 90 90 [ 167.974587][ T7514] RSP: 0000:ffffc9000190f7f8 EFLAGS: 00010246 [ 167.980697][ T7514] RAX: ffff888101d5be30 RBX: ffff8881005b1618 RCX: ffffffff81c23586 [ 167.988710][ T7514] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d20a0 [ 167.996731][ T7514] RBP: 000000000000000b R08: 00018881005b15cb R09: 0000000000000000 [ 168.004828][ T7514] R10: ffffc9000190f728 R11: 0001c9000190f728 R12: ffff8881005b15c8 [ 168.012887][ T7514] R13: ffffffff871d20a0 R14: ffff8881005b1580 R15: 0000000000000001 [ 168.020898][ T7514] FS: 00007f4ce3d7f6c0(0000) GS:ffff8882ae9de000(0000) knlGS:0000000000000000 [ 168.029847][ T7514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.036502][ T7514] CR2: 00007f176dd7c008 CR3: 0000000144960000 CR4: 00000000003506f0 [ 168.044498][ T7514] Call Trace: [ 168.047794][ T7514] [ 168.050763][ T7514] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 168.056679][ T7514] ext4_xattr_delete_inode+0x6b5/0x790 [ 168.062179][ T7514] ext4_evict_inode+0xb18/0xdf0 [ 168.067074][ T7514] ? __pfx_ext4_evict_inode+0x10/0x10 [ 168.072583][ T7514] evict+0x2a5/0x510 [ 168.076544][ T7514] iput+0x430/0x5a0 [ 168.080466][ T7514] ext4_process_orphan+0x1a4/0x1c0 [ 168.085589][ T7514] ext4_orphan_cleanup+0x6a6/0xa10 [ 168.090747][ T7514] ? ext4_register_li_request+0x14c/0x440 [ 168.096494][ T7514] ext4_fill_super+0x33d5/0x3780 [ 168.101480][ T7514] ? set_blocksize+0x14c/0x270 [ 168.106338][ T7514] ? __pfx_ext4_fill_super+0x10/0x10 [ 168.111753][ T7514] get_tree_bdev_flags+0x291/0x300 [ 168.116876][ T7514] ? __pfx_ext4_fill_super+0x10/0x10 [ 168.122191][ T7514] get_tree_bdev+0x1f/0x30 [ 168.126696][ T7514] ext4_get_tree+0x1c/0x30 [ 168.131145][ T7514] vfs_get_tree+0x57/0x1d0 [ 168.135667][ T7514] do_new_mount+0x288/0x8d0 [ 168.140212][ T7514] path_mount+0x4ad/0xb90 [ 168.144584][ T7514] __se_sys_mount+0x28c/0x2e0 [ 168.149284][ T7514] __x64_sys_mount+0x67/0x80 [ 168.153958][ T7514] x64_sys_call+0x2d61/0x3020 [ 168.158727][ T7514] do_syscall_64+0x136/0x3c0 [ 168.163412][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.169321][ T7514] RIP: 0033:0x7f4ce532e0ca [ 168.173792][ T7514] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.175441][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.193430][ T7514] RSP: 002b:00007f4ce3d7ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.193459][ T7514] RAX: ffffffffffffffda RBX: 00007f4ce3d7eee0 RCX: 00007f4ce532e0ca [ 168.193474][ T7514] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4ce3d7eea0 [ 168.193488][ T7514] RBP: 00002000000009c0 R08: 00007f4ce3d7eee0 R09: 0000000000804718 [ 168.193502][ T7514] R10: 0000000000804718 R11: 0000000000000246 R12: 0000200000000540 [ 168.216387][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.218281][ T7514] R13: 00007f4ce3d7eea0 R14: 000000000000048d R15: 00002000000002c0 [ 168.257964][ T7514] [ 168.261089][ T7514] ---[ end trace 0000000000000000 ]--- [ 168.271318][ T7514] EXT4-fs (loop6): 1 orphan inode deleted [ 168.277634][ T7514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.376055][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.493017][ T7575] loop6: detected capacity change from 0 to 1024 [ 168.510827][ T7575] EXT4-fs: Ignoring removed oldalloc option [ 168.540759][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.560010][ T7575] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.622297][ T7575] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1206: bg 0: block 112: padding at end of block bitmap is not set [ 168.681171][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.733748][ T7564] loop5: detected capacity change from 0 to 512 [ 168.767477][ T7587] loop6: detected capacity change from 0 to 512 [ 168.825619][ T7587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.839520][ T7587] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.852310][ T3413] IPVS: starting estimator thread 0... [ 168.940429][ T7592] IPVS: using max 2400 ests per chain, 120000 per kthread [ 168.978721][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.988316][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.006683][ T7608] FAULT_INJECTION: forcing a failure. [ 169.006683][ T7608] name failslab, interval 1, probability 0, space 0, times 0 [ 169.019447][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.5.1215 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 169.019483][ T7608] Tainted: [W]=WARN [ 169.019487][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.019494][ T7608] Call Trace: [ 169.019499][ T7608] [ 169.019566][ T7608] __dump_stack+0x1d/0x30 [ 169.019580][ T7608] dump_stack_lvl+0x95/0xd0 [ 169.019591][ T7608] dump_stack+0x15/0x1b [ 169.019601][ T7608] should_fail_ex+0x25e/0x270 [ 169.019676][ T7608] should_failslab+0x8c/0xb0 [ 169.019693][ T7608] kmem_cache_alloc_noprof+0x66/0x3f0 [ 169.019784][ T7608] ? skb_clone+0x151/0x1f0 [ 169.019800][ T7608] skb_clone+0x151/0x1f0 [ 169.019815][ T7608] __netlink_deliver_tap+0x2be/0x510 [ 169.019870][ T7608] netlink_unicast+0x654/0x680 [ 169.019888][ T7608] netlink_sendmsg+0x5be/0x6f0 [ 169.019907][ T7608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.019955][ T7608] ____sys_sendmsg+0x532/0x580 [ 169.019973][ T7608] ___sys_sendmsg+0x195/0x1e0 [ 169.019993][ T7608] __x64_sys_sendmsg+0xd4/0x160 [ 169.020028][ T7608] x64_sys_call+0x194c/0x3020 [ 169.020119][ T7608] do_syscall_64+0x136/0x3c0 [ 169.020214][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.020226][ T7608] RIP: 0033:0x7ffa00a8ce59 [ 169.020236][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.020276][ T7608] RSP: 002b:00007ff9ff4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.020296][ T7608] RAX: ffffffffffffffda RBX: 00007ffa00d05fa0 RCX: 00007ffa00a8ce59 [ 169.020335][ T7608] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 169.020348][ T7608] RBP: 00007ff9ff4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 169.020359][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.020420][ T7608] R13: 00007ffa00d06038 R14: 00007ffa00d05fa0 R15: 00007ffee6a03d48 [ 169.020431][ T7608] [ 169.252958][ T7612] loop5: detected capacity change from 0 to 1024 [ 169.261567][ T7612] EXT4-fs: Ignoring removed oldalloc option [ 169.274372][ T7612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.288952][ T7612] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.310592][ T7612] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1217: bg 0: block 112: padding at end of block bitmap is not set [ 169.352619][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.389080][ T7621] loop3: detected capacity change from 0 to 512 [ 169.398170][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.438380][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.447037][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.664154][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.084913][ T7645] __nla_validate_parse: 5 callbacks suppressed [ 170.084929][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 170.373182][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.545255][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 170.868490][ T7661] FAULT_INJECTION: forcing a failure. [ 170.868490][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 170.904914][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.3.1235 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 170.905018][ T7661] Tainted: [W]=WARN [ 170.905026][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.905039][ T7661] Call Trace: [ 170.905046][ T7661] [ 170.905055][ T7661] __dump_stack+0x1d/0x30 [ 170.905079][ T7661] dump_stack_lvl+0x95/0xd0 [ 170.905100][ T7661] dump_stack+0x15/0x1b [ 170.905182][ T7661] should_fail_ex+0x25e/0x270 [ 170.905203][ T7661] should_failslab+0x8c/0xb0 [ 170.905234][ T7661] kmem_cache_alloc_noprof+0x66/0x3f0 [ 170.905259][ T7661] ? prepare_creds+0x38/0x550 [ 170.905279][ T7661] prepare_creds+0x38/0x550 [ 170.905302][ T7661] selinux_lsm_setattr+0x196/0x650 [ 170.905403][ T7661] selinux_setprocattr+0x4f/0x70 [ 170.905435][ T7661] security_setprocattr+0x1a7/0x1d0 [ 170.905536][ T7661] proc_pid_attr_write+0x1ea/0x220 [ 170.905566][ T7661] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 170.905593][ T7661] vfs_write+0x252/0x990 [ 170.905619][ T7661] ? __fget_files+0x184/0x1c0 [ 170.905716][ T7661] ? mutex_lock+0x57/0x90 [ 170.905741][ T7661] ksys_write+0xdc/0x1a0 [ 170.905769][ T7661] __x64_sys_write+0x40/0x50 [ 170.905843][ T7661] x64_sys_call+0x27e1/0x3020 [ 170.905864][ T7661] do_syscall_64+0x136/0x3c0 [ 170.905892][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.905922][ T7661] RIP: 0033:0x7f385c9cce59 [ 170.905939][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.905958][ T7661] RSP: 002b:00007f385b427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.905980][ T7661] RAX: ffffffffffffffda RBX: 00007f385cc45fa0 RCX: 00007f385c9cce59 [ 170.906025][ T7661] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000004 [ 170.906038][ T7661] RBP: 00007f385b427090 R08: 0000000000000000 R09: 0000000000000000 [ 170.906052][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.906066][ T7661] R13: 00007f385cc46038 R14: 00007f385cc45fa0 R15: 00007fff0224fec8 [ 170.906087][ T7661] [ 171.134475][ T7663] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1236'. [ 171.143766][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 171.152813][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1236'. [ 171.244693][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.256291][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.080322][ T7688] futex_wake_op: syz.1.1243 tries to shift op by 144; fix this program [ 172.089675][ T7688] futex_wake_op: syz.1.1243 tries to shift op by 144; fix this program [ 174.285123][ T7716] FAULT_INJECTION: forcing a failure. [ 174.285123][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 174.298176][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.3.1256 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 174.298210][ T7716] Tainted: [W]=WARN [ 174.298217][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.298227][ T7716] Call Trace: [ 174.298233][ T7716] [ 174.298241][ T7716] __dump_stack+0x1d/0x30 [ 174.298260][ T7716] dump_stack_lvl+0x95/0xd0 [ 174.298279][ T7716] dump_stack+0x15/0x1b [ 174.298302][ T7716] should_fail_ex+0x25e/0x270 [ 174.298319][ T7716] ? hugetlb_reserve_pages+0x146/0xd60 [ 174.298341][ T7716] should_failslab+0x8c/0xb0 [ 174.298366][ T7716] __kmalloc_cache_noprof+0x5f/0x400 [ 174.298387][ T7716] hugetlb_reserve_pages+0x146/0xd60 [ 174.298414][ T7716] hugetlbfs_file_mmap+0x1f4/0x290 [ 174.298439][ T7716] mmap_region+0x18ee/0x20c0 [ 174.298480][ T7716] do_mmap+0x970/0xbc0 [ 174.298500][ T7716] ? selinux_mmap_file+0x5d/0x70 [ 174.298525][ T7716] vm_mmap_pgoff+0x183/0x2d0 [ 174.298556][ T7716] ksys_mmap_pgoff+0x2c6/0x310 [ 174.298577][ T7716] x64_sys_call+0x14df/0x3020 [ 174.298597][ T7716] do_syscall_64+0x136/0x3c0 [ 174.298622][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.298642][ T7716] RIP: 0033:0x7f385c9cce59 [ 174.298659][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.298676][ T7716] RSP: 002b:00007f385b427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.298697][ T7716] RAX: ffffffffffffffda RBX: 00007f385cc45fa0 RCX: 00007f385c9cce59 [ 174.298712][ T7716] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 174.298725][ T7716] RBP: 00007f385b427090 R08: ffffffffffffffff R09: 0000000000000000 [ 174.298739][ T7716] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002 [ 174.298749][ T7716] R13: 00007f385cc46038 R14: 00007f385cc45fa0 R15: 00007fff0224fec8 [ 174.298765][ T7716] [ 174.298787][ T7716] HugeTLB: unable to allocate vma specific lock [ 174.390674][ T7719] syzkaller0: entered promiscuous mode [ 174.444226][ T7720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.514628][ T7719] syzkaller0: entered allmulticast mode [ 174.630373][ T7716] loop3: detected capacity change from 0 to 512 [ 174.694760][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.733378][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.993794][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 174.993810][ T28] audit: type=1400 audit(2000000007.789:1579): avc: denied { create } for pid=7738 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 175.886504][ T7739] loop5: detected capacity change from 0 to 512 [ 175.900622][ T7739] EXT4-fs: Ignoring removed nobh option [ 176.267392][ T7739] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.274443][ T7739] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #11: block 1: comm syz.5.1264: lblock 0 mapped to illegal pblock 1 (length 1) [ 176.859515][ T7739] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 176.870427][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 176.886737][ C1] EXT4-fs (loop5): initial error at time 2000000009: ext4_map_blocks:791: inode 11: block 1 [ 176.898157][ C1] EXT4-fs (loop5): last error at time 2000000009: ext4_map_blocks:791: inode 11: block 1 [ 176.914656][ T7739] EXT4-fs (loop5): Remounting filesystem read-only [ 176.924819][ T7739] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 176.939513][ T7739] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 177.161884][ T7739] EXT4-fs (loop5): 1 orphan inode deleted [ 177.174011][ T7739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 177.880310][ T28] audit: type=1400 audit(2000000010.689:1580): avc: denied { read append } for pid=7738 comm="syz.5.1264" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 178.928074][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 179.180192][ T28] audit: type=1400 audit(2000000011.979:1581): avc: denied { getopt } for pid=7773 comm="syz.6.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.216718][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.532832][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.542828][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.551623][ T7786] ieee802154 phy0 wpan0: encryption failed: -126 [ 179.557986][ T28] audit: type=1400 audit(2000000012.369:1582): avc: denied { write } for pid=7785 comm="syz.5.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.942790][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 179.954296][ T7790] ip6gre1: entered promiscuous mode [ 179.959593][ T7790] ip6gre1: entered allmulticast mode [ 179.972497][ T28] audit: type=1400 audit(2000000012.789:1583): avc: denied { mount } for pid=7789 comm="syz.0.1276" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.004502][ T28] audit: type=1400 audit(2000000012.819:1584): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 180.076386][ T7792] serio: Serial port ttyS3 [ 180.083856][ T7796] loop6: detected capacity change from 0 to 512 [ 180.143958][ T7796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.291834][ T7817] loop5: detected capacity change from 0 to 1024 [ 180.312713][ T7817] EXT4-fs: Ignoring removed oldalloc option [ 180.559189][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.600654][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.722740][ T7817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.747184][ T7817] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.957458][ T28] audit: type=1400 audit(2000000013.769:1585): avc: denied { write } for pid=7816 comm="syz.5.1284" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.980113][ T7828] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1284: bg 0: block 112: padding at end of block bitmap is not set [ 181.008783][ T7827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1287'. [ 181.104751][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.277566][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.279391][ T7834] loop3: detected capacity change from 0 to 512 [ 181.311798][ T7834] EXT4-fs (loop3): 1 truncate cleaned up [ 181.312464][ T7834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.328174][ T28] audit: type=1400 audit(2000000014.129:1586): avc: denied { write } for pid=7833 comm="syz.3.1290" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.334212][ T7834] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1290: invalid indirect mapped block 4294967295 (level 1) [ 181.371970][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.468347][ T7842] netlink: 'syz.3.1292': attribute type 8 has an invalid length. [ 181.468487][ T7842] sch_fq: defrate 0 ignored. [ 181.638011][ T7840] loop5: detected capacity change from 0 to 512 [ 181.646789][ T7840] EXT4-fs: Ignoring removed nobh option [ 181.672989][ T7840] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 181.673823][ T7840] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.1291: inode has both inline data and extents flags [ 181.673947][ T7840] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.675059][ T7840] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1291: couldn't read orphan inode 13 (err -117) [ 181.675145][ T7840] loop5: lost filesystem error report for type 5 error -117 [ 181.686724][ T7840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.707404][ T28] audit: type=1400 audit(2000000014.519:1587): avc: denied { write } for pid=7839 comm="syz.5.1291" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.716480][ T7840] EXT4-fs warning (device loop5): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 181.774426][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.946700][ T7856] netlink: 'syz.3.1296': attribute type 21 has an invalid length. [ 181.954679][ T7856] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1296'. [ 182.077145][ T7846] 8021q: adding VLAN 0 to HW filter on device eth0 [ 182.090537][ T7846] 8021q: adding VLAN 0 to HW filter on device eth1 [ 182.104640][ T7846] 8021q: adding VLAN 0 to HW filter on device eth2 [ 182.118576][ T7846] 8021q: adding VLAN 0 to HW filter on device eth3 [ 182.133403][ T7846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.145505][ T7856] netlink: 'syz.3.1296': attribute type 5 has an invalid length. [ 182.153717][ T7856] netlink: 'syz.3.1296': attribute type 6 has an invalid length. [ 182.161998][ T7856] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1296'. [ 182.265209][ T28] audit: type=1400 audit(2000000015.079:1588): avc: denied { read write } for pid=7862 comm="syz.1.1298" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 182.295661][ T28] audit: type=1400 audit(2000000015.079:1589): avc: denied { open } for pid=7862 comm="syz.1.1298" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 182.330931][ T7863] bridge0: port 3(gretap0) entered blocking state [ 182.337486][ T7863] bridge0: port 3(gretap0) entered disabled state [ 182.360958][ T7863] gretap0: entered allmulticast mode [ 182.371258][ T7863] gretap0: entered promiscuous mode [ 182.395622][ T7863] bridge0: port 3(gretap0) entered blocking state [ 182.395770][ T7863] bridge0: port 3(gretap0) entered forwarding state [ 182.428052][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1299'. [ 182.442035][ T28] audit: type=1400 audit(2000000015.259:1590): avc: denied { create } for pid=7870 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 182.506358][ T7877] loop6: detected capacity change from 0 to 1024 [ 182.534783][ T7877] EXT4-fs: Ignoring removed oldalloc option [ 182.554934][ T7877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.568842][ T7877] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.574733][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1300'. [ 182.588699][ T28] audit: type=1400 audit(2000000015.399:1591): avc: denied { write } for pid=7876 comm="syz.6.1301" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.610700][ T7877] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1301: bg 0: block 112: padding at end of block bitmap is not set [ 182.642073][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 182.656403][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.666395][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.713006][ T7889] loop6: detected capacity change from 0 to 512 [ 182.813988][ T7899] loop6: detected capacity change from 0 to 512 [ 183.518129][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.530114][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.542449][ T7911] FAULT_INJECTION: forcing a failure. [ 183.542449][ T7911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.556517][ T7911] CPU: 0 UID: 0 PID: 7911 Comm: syz.6.1312 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 183.556557][ T7911] Tainted: [W]=WARN [ 183.556564][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.556577][ T7911] Call Trace: [ 183.556585][ T7911] [ 183.556593][ T7911] __dump_stack+0x1d/0x30 [ 183.556614][ T7911] dump_stack_lvl+0x95/0xd0 [ 183.556682][ T7911] dump_stack+0x15/0x1b [ 183.556701][ T7911] should_fail_ex+0x25e/0x270 [ 183.556721][ T7911] should_fail+0xb/0x20 [ 183.556809][ T7911] should_fail_usercopy+0x1a/0x20 [ 183.556829][ T7911] _copy_from_user+0x1c/0xb0 [ 183.556853][ T7911] __se_sys_mount+0x10d/0x2e0 [ 183.556873][ T7911] ? switch_fpu_return+0xb2/0x1b0 [ 183.556957][ T7911] __x64_sys_mount+0x67/0x80 [ 183.556986][ T7911] x64_sys_call+0x2d61/0x3020 [ 183.557105][ T7911] do_syscall_64+0x136/0x3c0 [ 183.557153][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.557174][ T7911] RIP: 0033:0x7f4ce532ce59 [ 183.557191][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.557209][ T7911] RSP: 002b:00007f4ce3d7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.557268][ T7911] RAX: ffffffffffffffda RBX: 00007f4ce55a5fa0 RCX: 00007f4ce532ce59 [ 183.557280][ T7911] RDX: 0000200000001440 RSI: 0000200000000100 RDI: 00002000000013c0 [ 183.557306][ T7911] RBP: 00007f4ce3d7f090 R08: 0000200000000200 R09: 0000000000000000 [ 183.557321][ T7911] R10: 0000000000200800 R11: 0000000000000246 R12: 0000000000000001 [ 183.557335][ T7911] R13: 00007f4ce55a6038 R14: 00007f4ce55a5fa0 R15: 00007ffead865ff8 [ 183.557356][ T7911] [ 183.937868][ T7913] loop3: detected capacity change from 0 to 1024 [ 183.944753][ T7913] EXT4-fs: Ignoring removed oldalloc option [ 183.964767][ T7913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.977028][ T7913] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.002422][ T7913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1314: bg 0: block 112: padding at end of block bitmap is not set [ 184.016870][ T28] audit: type=1400 audit(2000000016.819:1592): avc: denied { write } for pid=7912 comm="syz.3.1314" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.061111][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.099722][ T7920] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 184.107721][ T7920] loop3: detected capacity change from 0 to 512 [ 184.271692][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'. [ 184.333655][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.340945][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.421090][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 184.436438][ T7936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1319'. [ 184.622034][ T7944] loop6: detected capacity change from 0 to 512 [ 184.673143][ T7947] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 184.679682][ T7947] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.687226][ T7947] vhci_hcd vhci_hcd.0: Device attached [ 184.693542][ T7948] vhci_hcd: connection closed [ 184.693723][ T105] vhci_hcd vhci_hcd.1: stop threads [ 184.703631][ T105] vhci_hcd vhci_hcd.1: release socket [ 184.709024][ T105] vhci_hcd vhci_hcd.1: disconnect device [ 184.750670][ T7952] FAULT_INJECTION: forcing a failure. [ 184.750670][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 184.767887][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.772008][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.5.1324 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 184.772095][ T7952] Tainted: [W]=WARN [ 184.772102][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.772114][ T7952] Call Trace: [ 184.772121][ T7952] [ 184.772129][ T7952] __dump_stack+0x1d/0x30 [ 184.772151][ T7952] dump_stack_lvl+0x95/0xd0 [ 184.772171][ T7952] dump_stack+0x15/0x1b [ 184.772226][ T7952] should_fail_ex+0x25e/0x270 [ 184.772248][ T7952] should_failslab+0x8c/0xb0 [ 184.772296][ T7952] __kmalloc_noprof+0xb8/0x4d0 [ 184.772325][ T7952] ? security_key_alloc+0x50/0x130 [ 184.772348][ T7952] security_key_alloc+0x50/0x130 [ 184.772372][ T7952] key_alloc+0x44a/0x940 [ 184.772472][ T7952] ? sprintf+0x88/0xb0 [ 184.772498][ T7952] request_key_auth_new+0x3ed/0x580 [ 184.772523][ T7952] request_key_and_link+0x8f5/0xe20 [ 184.772633][ T7952] ? __pfx_key_default_cmp+0x10/0x10 [ 184.772656][ T7952] ? __pfx_keyring_search_iterator+0x10/0x10 [ 184.772707][ T7952] __se_sys_request_key+0x1e9/0x2a0 [ 184.772732][ T7952] ? fput+0x8f/0xc0 [ 184.772765][ T7952] __x64_sys_request_key+0x55/0x70 [ 184.772790][ T7952] x64_sys_call+0x28de/0x3020 [ 184.772885][ T7952] do_syscall_64+0x136/0x3c0 [ 184.772916][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.772937][ T7952] RIP: 0033:0x7ffa00a8ce59 [ 184.773008][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.773027][ T7952] RSP: 002b:00007ff9ff4e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 184.773048][ T7952] RAX: ffffffffffffffda RBX: 00007ffa00d05fa0 RCX: 00007ffa00a8ce59 [ 184.773062][ T7952] RDX: 0000200000000880 RSI: 0000200000000840 RDI: 0000200000000800 [ 184.773076][ T7952] RBP: 00007ff9ff4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.773158][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.773171][ T7952] R13: 00007ffa00d06038 R14: 00007ffa00d05fa0 R15: 00007ffee6a03d48 [ 184.773192][ T7952] [ 184.939304][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1328'. [ 184.991949][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.280121][ T7966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7966 comm=syz.5.1329 [ 185.292717][ T7966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7966 comm=syz.5.1329 [ 185.528583][ T28] audit: type=1400 audit(2000000018.339:1593): avc: denied { write } for pid=7971 comm="syz.1.1332" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.782259][ T7986] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1336'. [ 187.061761][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1340'. [ 187.327161][ T8002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 187.333799][ T8002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 187.363349][ T8002] vhci_hcd vhci_hcd.0: Device attached [ 187.431062][ T8003] vhci_hcd: connection closed [ 187.431315][ T40] vhci_hcd vhci_hcd.5: stop threads [ 187.467392][ T40] vhci_hcd vhci_hcd.5: release socket [ 187.489391][ T40] vhci_hcd vhci_hcd.5: disconnect device [ 187.595186][ T3403] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 187.766066][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.782920][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.126869][ T28] audit: type=1400 audit(2000000020.939:1594): avc: denied { map } for pid=8023 comm="syz.5.1350" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 188.204020][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1351'. [ 188.415126][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1352'. [ 188.595063][ T8035] loop0: detected capacity change from 0 to 512 [ 188.741866][ T8035] serio: Serial port ttyS3 [ 188.884149][ T8042] loop5: detected capacity change from 0 to 512 [ 188.984015][ T8042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.018479][ T8044] loop0: detected capacity change from 0 to 512 [ 189.065334][ T8044] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 189.088968][ T8042] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.132541][ T8044] bridge0: port 3(gretap0) entered blocking state [ 190.139513][ T8044] bridge0: port 3(gretap0) entered disabled state [ 190.147009][ T8044] gretap0: entered allmulticast mode [ 190.168362][ T8044] gretap0: entered promiscuous mode [ 190.175551][ T8044] bridge0: port 3(gretap0) entered blocking state [ 190.182431][ T8044] bridge0: port 3(gretap0) entered forwarding state [ 191.146315][ T8056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 191.152965][ T8056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.440422][ T8056] vhci_hcd vhci_hcd.0: Device attached [ 191.475092][ T8057] vhci_hcd: connection closed [ 191.475494][ T7982] vhci_hcd vhci_hcd.1: stop threads [ 191.486180][ T7982] vhci_hcd vhci_hcd.1: release socket [ 191.491787][ T7982] vhci_hcd vhci_hcd.1: disconnect device [ 192.088331][ T8064] FAULT_INJECTION: forcing a failure. [ 192.088331][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.104004][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.3.1361 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 192.104039][ T8064] Tainted: [W]=WARN [ 192.104062][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.104072][ T8064] Call Trace: [ 192.104077][ T8064] [ 192.104083][ T8064] __dump_stack+0x1d/0x30 [ 192.104103][ T8064] dump_stack_lvl+0x95/0xd0 [ 192.104201][ T8064] dump_stack+0x15/0x1b [ 192.104220][ T8064] should_fail_ex+0x25e/0x270 [ 192.104237][ T8064] should_fail+0xb/0x20 [ 192.104280][ T8064] should_fail_usercopy+0x1a/0x20 [ 192.104298][ T8064] _copy_from_user+0x1c/0xb0 [ 192.104404][ T8064] ___sys_sendmsg+0xc1/0x1e0 [ 192.104444][ T8064] __x64_sys_sendmsg+0xd4/0x160 [ 192.104565][ T8064] x64_sys_call+0x194c/0x3020 [ 192.104640][ T8064] do_syscall_64+0x136/0x3c0 [ 192.104686][ T8064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.104707][ T8064] RIP: 0033:0x7f385c9cce59 [ 192.104770][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.104849][ T8064] RSP: 002b:00007f385b427028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.104871][ T8064] RAX: ffffffffffffffda RBX: 00007f385cc45fa0 RCX: 00007f385c9cce59 [ 192.104883][ T8064] RDX: 0000000020084884 RSI: 00002000000000c0 RDI: 0000000000000005 [ 192.104895][ T8064] RBP: 00007f385b427090 R08: 0000000000000000 R09: 0000000000000000 [ 192.104906][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.104919][ T8064] R13: 00007f385cc46038 R14: 00007f385cc45fa0 R15: 00007fff0224fec8 [ 192.104939][ T8064] [ 192.370754][ T28] audit: type=1400 audit(2000000025.149:1595): avc: denied { listen } for pid=8063 comm="syz.3.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.449211][ T8064] loop3: detected capacity change from 0 to 512 [ 192.482163][ T8064] EXT4-fs: Ignoring removed orlov option [ 192.610654][ T8064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.624211][ T8064] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.654758][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.726683][ T8071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8071 comm=syz.1.1362 [ 192.771648][ T8071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8071 comm=syz.1.1362 [ 192.798537][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.846667][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.860459][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.873933][ T28] audit: type=1326 audit(2000000025.689:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.873958][ T28] audit: type=1326 audit(2000000025.689:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874037][ T28] audit: type=1326 audit(2000000025.689:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874059][ T28] audit: type=1326 audit(2000000025.689:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874130][ T28] audit: type=1326 audit(2000000025.689:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874223][ T28] audit: type=1326 audit(2000000025.689:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874321][ T28] audit: type=1326 audit(2000000025.689:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874343][ T28] audit: type=1326 audit(2000000025.689:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 192.874429][ T28] audit: type=1326 audit(2000000025.689:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8072 comm="syz.6.1366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce532ce59 code=0x7ffc0000 [ 193.146545][ T8084] loop6: detected capacity change from 0 to 512 [ 193.155180][ T8084] serio: Serial port ttyS3 [ 193.446796][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1369'. [ 193.728573][ T8107] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 193.738925][ T8107] SELinux: failed to load policy [ 193.822467][ T8117] loop5: detected capacity change from 0 to 512 [ 193.825230][ T8119] loop3: detected capacity change from 0 to 512 [ 193.836470][ T8119] EXT4-fs: Ignoring removed i_version option [ 193.875491][ T8119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.942644][ T8119] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1379: invalid block [ 193.954584][ T8119] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.965802][ T8119] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1379: invalid indirect mapped block 4294967295 (level 1) [ 193.989001][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 193.989019][ C0] EXT4-fs (loop3): initial error at time 2000000026: ext4_get_branch:178: inode 11: block 4294967295 [ 193.989052][ C0] EXT4-fs (loop3): last error at time 2000000026: ext4_get_branch:178: inode 11: block 4294967295 [ 194.104385][ T8119] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.162168][ T8119] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1379: invalid indirect mapped block 4294967295 (level 1) [ 194.188743][ T8119] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.263000][ T8119] EXT4-fs (loop3): 2 truncates cleaned up [ 194.355995][ T8119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.479044][ T8119] Invalid ELF header magic: != ELF [ 194.528080][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.596795][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.612809][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.659348][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1381'. [ 195.009855][ T8144] loop3: detected capacity change from 0 to 1024 [ 195.043502][ T8144] EXT4-fs: Ignoring removed oldalloc option [ 195.111129][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.145499][ T8144] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.165539][ T8144] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1384: bg 0: block 112: padding at end of block bitmap is not set [ 195.194242][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.240156][ T8156] loop3: detected capacity change from 0 to 512 [ 195.267281][ T8156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 195.275713][ T8156] System zones: 0-2, 18-18, 34-34 [ 195.281852][ T8156] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1389: bg 0: block 248: padding at end of block bitmap is not set [ 195.296537][ T8156] loop3: lost filesystem error report for type 5 error -117 [ 195.296723][ T8156] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.1389: Failed to acquire dquot type 1 [ 195.304108][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 195.304147][ C1] EXT4-fs (loop3): last error at time 2000000028: ext4_validate_block_bitmap:441 [ 195.331756][ T8156] loop3: lost filesystem error report for type 5 error -117 [ 195.339506][ T8156] EXT4-fs (loop3): 1 truncate cleaned up [ 195.345983][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.361483][ T8156] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.847883][ T8172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1393'. [ 195.857050][ T8172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.864257][ T8172] IPv6: NLM_F_CREATE should be set when creating new route [ 195.871463][ T8172] IPv6: NLM_F_CREATE should be set when creating new route [ 196.048252][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.074363][ T8176] loop3: detected capacity change from 0 to 512 [ 196.365374][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1396'. [ 196.369170][ T8185] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1397'. [ 196.384088][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1397'. [ 196.393664][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1397'. [ 196.451896][ T8194] loop5: detected capacity change from 0 to 1024 [ 196.458578][ T8194] EXT4-fs: Ignoring removed oldalloc option [ 196.474367][ T8194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.488378][ T8194] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.525828][ T8194] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1399: bg 0: block 112: padding at end of block bitmap is not set [ 196.646115][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.687886][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.696332][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.448807][ T8221] loop0: detected capacity change from 0 to 512 [ 198.587789][ T8227] loop0: detected capacity change from 0 to 512 [ 198.612912][ T8227] EXT4-fs: journaled quota format not specified [ 198.645974][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1409'. [ 198.693340][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1406'. [ 198.818125][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 198.818140][ T28] audit: type=1400 audit(2000000031.629:1842): avc: denied { getopt } for pid=8237 comm="syz.6.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.036175][ T8243] loop0: detected capacity change from 0 to 1024 [ 199.056029][ T8243] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 199.074387][ T8243] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 199.099246][ T8243] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: inode #32: comm syz.0.1413: iget: special inode unallocated [ 199.121736][ T8243] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 199.123296][ T8243] EXT4-fs (loop0): no journal found [ 199.132454][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 199.132474][ C1] EXT4-fs (loop0): initial error at time 2000000031: ext4_get_journal_inode:5896: inode 32 [ 199.132506][ C1] EXT4-fs (loop0): last error at time 2000000031: ext4_get_journal_inode:5896: inode 32 [ 199.163950][ T8243] EXT4-fs (loop0): can't get journal size [ 199.171528][ T8243] EXT4-fs (loop0): filesystem is read-only [ 199.177748][ T8243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.194686][ T8185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.326693][ T8246] loop3: detected capacity change from 0 to 1024 [ 199.864412][ T8246] EXT4-fs: Ignoring removed oldalloc option [ 199.884318][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.918898][ T8246] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.974873][ T28] audit: type=1400 audit(2000000032.789:1843): avc: denied { write } for pid=8245 comm="syz.3.1414" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.108348][ T8246] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1414: bg 0: block 112: padding at end of block bitmap is not set [ 200.129251][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.320278][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 200.624224][ T8265] loop3: detected capacity change from 0 to 512 [ 201.644323][ T8276] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1421'. [ 201.655678][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1419'. [ 201.699424][ T8278] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 202.133601][ T8294] futex_wake_op: syz.5.1424 tries to shift op by 32; fix this program [ 202.289250][ T8296] usb usb5: usbfs: process 8296 (syz.6.1425) did not claim interface 0 before use [ 202.369262][ T8298] loop5: detected capacity change from 0 to 1024 [ 202.403060][ T8298] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 202.458823][ T8298] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 202.501473][ T8298] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.1426: iget: special inode unallocated [ 202.547768][ T8298] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 202.548079][ T8298] EXT4-fs (loop5): no journal found [ 202.557316][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 202.557341][ C1] EXT4-fs (loop5): initial error at time 2000000035: ext4_get_journal_inode:5896: inode 32 [ 202.557372][ C1] EXT4-fs (loop5): last error at time 2000000035: ext4_get_journal_inode:5896: inode 32 [ 202.604448][ T8304] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1429'. [ 202.629121][ T8298] EXT4-fs (loop5): can't get journal size [ 202.640760][ T8298] EXT4-fs (loop5): filesystem is read-only [ 202.647206][ T8298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.714783][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1431'. [ 202.726533][ T8311] loop6: detected capacity change from 0 to 512 [ 202.900917][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1432'. [ 203.265755][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.484818][ T8318] loop6: detected capacity change from 0 to 1024 [ 203.500267][ T8318] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 203.515672][ T8318] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 203.523897][ T8318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.631943][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.818183][ T8346] loop3: detected capacity change from 0 to 512 [ 203.818201][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1444'. [ 204.123265][ T8356] loop3: detected capacity change from 0 to 1024 [ 204.184743][ T8356] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 204.285214][ T8356] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 204.317013][ T8362] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.358792][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.376637][ T8356] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.1446: iget: special inode unallocated [ 204.532114][ T8356] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 204.532500][ T8356] EXT4-fs (loop3): no journal found [ 204.541665][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 204.541694][ C1] EXT4-fs (loop3): initial error at time 2000000037: ext4_get_journal_inode:5896: inode 32 [ 204.541739][ C1] EXT4-fs (loop3): last error at time 2000000037: ext4_get_journal_inode:5896: inode 32 [ 204.604749][ T8366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.612319][ T8366] IPv6: NLM_F_CREATE should be set when creating new route [ 204.620198][ T8366] IPv6: NLM_F_CREATE should be set when creating new route [ 204.627940][ T8366] IPv6: NLM_F_CREATE should be set when creating new route [ 204.721504][ T8356] EXT4-fs (loop3): can't get journal size [ 204.775715][ T8356] EXT4-fs (loop3): filesystem is read-only [ 204.851482][ T8356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.931193][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 205.869911][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.004195][ T8388] SELinux: failed to load policy [ 206.215925][ T8391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8391 comm=syz.3.1455 [ 206.228433][ T8391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8391 comm=syz.3.1455 [ 206.252367][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1456'. [ 206.364481][ T3620] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.433564][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 206.581608][ T8399] loop6: detected capacity change from 0 to 512 [ 206.621774][ T8399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.667735][ T8399] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.742163][ T6009] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.872584][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.890482][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.377896][ T8420] loop3: detected capacity change from 0 to 1024 [ 207.432684][ T8420] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 207.514341][ T8420] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 207.627360][ T8420] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.1465: iget: special inode unallocated [ 207.682114][ T8420] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 207.682231][ T8420] EXT4-fs (loop3): no journal found [ 207.691453][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 207.691474][ C0] EXT4-fs (loop3): initial error at time 2000000040: ext4_get_journal_inode:5896: inode 32 [ 207.691508][ C0] EXT4-fs (loop3): last error at time 2000000040: ext4_get_journal_inode:5896: inode 32 [ 207.848444][ T8420] EXT4-fs (loop3): can't get journal size [ 207.868224][ T28] audit: type=1400 audit(2000000040.679:1844): avc: denied { unmount } for pid=4783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 207.899689][ T8420] EXT4-fs (loop3): filesystem is read-only [ 207.913550][ T8420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 208.597882][ T8436] loop5: detected capacity change from 0 to 256 [ 208.723836][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.745432][ T8446] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.945486][ T8453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8453 comm=syz.6.1473 [ 208.958109][ T8453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8453 comm=syz.6.1473 [ 209.153510][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'. [ 209.361483][ T8459] loop5: detected capacity change from 0 to 512 [ 209.387068][ T8459] serio: Serial port ttyS3 [ 209.421963][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.438972][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.489424][ T8464] loop5: detected capacity change from 0 to 512 [ 209.520714][ T8464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.534371][ T8464] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.818416][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1480'. [ 211.511714][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.543580][ T8486] loop5: detected capacity change from 0 to 1024 [ 211.567983][ T8486] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 211.602295][ T8486] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 211.744045][ T8499] loop6: detected capacity change from 0 to 512 [ 211.756903][ T8486] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.1484: iget: special inode unallocated [ 211.757660][ T8499] serio: Serial port ttyS3 [ 211.783159][ T8486] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 211.790253][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 211.805826][ C1] EXT4-fs (loop5): initial error at time 2000000044: ext4_get_journal_inode:5896: inode 32 [ 211.815844][ C1] EXT4-fs (loop5): last error at time 2000000044: ext4_get_journal_inode:5896: inode 32 [ 212.734053][ T8486] EXT4-fs (loop5): no journal found [ 212.752292][ T8486] EXT4-fs (loop5): can't get journal size [ 212.764945][ T8486] EXT4-fs (loop5): filesystem is read-only [ 212.816565][ T8501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8501 comm=syz.1.1487 [ 212.829205][ T8501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8501 comm=syz.1.1487 [ 212.852535][ T8486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.838795][ T2977] ================================================================== [ 213.846904][ T2977] BUG: KCSAN: data-race in d_delete / path_lookupat [ 213.853501][ T2977] [ 213.855817][ T2977] read-write to 0xffff88811b60e0c0 of 4 bytes by task 3286 on cpu 1: [ 213.863873][ T2977] d_delete+0x15a/0x180 [ 213.868029][ T2977] d_delete_notify+0x32/0x100 [ 213.872700][ T2977] vfs_unlink+0x287/0x490 [ 213.877024][ T2977] filename_unlinkat+0x1dc/0x410 [ 213.881959][ T2977] __se_sys_unlink+0x2b/0xe0 [ 213.886541][ T2977] __x64_sys_unlink+0x1f/0x30 [ 213.891215][ T2977] x64_sys_call+0x2eb6/0x3020 [ 213.895884][ T2977] do_syscall_64+0x136/0x3c0 [ 213.900466][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.906353][ T2977] [ 213.908660][ T2977] read to 0xffff88811b60e0c0 of 4 bytes by task 2977 on cpu 0: [ 213.916194][ T2977] path_lookupat+0x19b/0x4c0 [ 213.920787][ T2977] filename_lookup+0x18f/0x390 [ 213.925550][ T2977] do_readlinkat+0x74/0x2f0 [ 213.930133][ T2977] __x64_sys_readlink+0x47/0x60 [ 213.934972][ T2977] x64_sys_call+0x2b51/0x3020 [ 213.940247][ T2977] do_syscall_64+0x136/0x3c0 [ 213.944830][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.950708][ T2977] [ 213.953017][ T2977] value changed: 0x00300180 -> 0x00004080 [ 213.958712][ T2977] [ 213.961017][ T2977] Reported by Kernel Concurrency Sanitizer on: [ 213.967151][ T2977] CPU: 0 UID: 0 PID: 2977 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.977726][ T2977] Tainted: [W]=WARN [ 213.981511][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.991549][ T2977] ================================================================== [ 214.062054][ T8517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8517 comm=syz.6.1490 [ 214.074720][ T8517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8517 comm=syz.6.1490 [ 214.156767][ T28] audit: type=1400 audit(2000000046.969:1845): avc: denied { getopt } for pid=8516 comm="syz.0.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.220928][ T28] audit: type=1400 audit(2000000046.999:1846): avc: denied { ioctl } for pid=8516 comm="syz.0.1491" path="socket:[23552]" dev="sockfs" ino=23552 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.361376][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.371528][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.398517][ T4783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.