last executing test programs: 39.557062641s ago: executing program 2 (id=3): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd94}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r3, &(0x7f00000003c0)) timer_delete(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) timer_delete(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x14f780, 0x184) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000200000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) 38.957572147s ago: executing program 2 (id=10): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c) fchown(r0, 0xee01, 0x0) listen(r0, 0x54) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x400000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000304816100"/20, @ANYRES32=0x0, @ANYBLOB="d3dd02de0000554e9b8efb79df8bb2c0f100001980000005000902f1dab6090c52ffddcf87dc3e8978bf4404001d2a59378bf6ffff0000000100100000003134a45c7e5d8cc6c5b3fb485543ed08de271baf2b6687e89de8b2d0117998be8123ab1325a1f6b61590b55c97da9374eae1256045fe6d4cf1fa506854eba947"], 0x97}, 0x1, 0x0, 0x0, 0x800}, 0x4830) r3 = socket$kcm(0x29, 0x7, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r8 = syz_open_procfs(r5, &(0x7f0000000400)='stat\x00') ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000000540)) pread64(r8, &(0x7f0000000080)=""/11, 0xb, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r9, 0x891c, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100), 0x4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0xf81a, 0x9, 0x31, 0xa07, 0x8}) 38.529260668s ago: executing program 2 (id=12): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000001540)={[{@nolazytime}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) memfd_create(0x0, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='=@', 0x2}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) inotify_init() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0xa3800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x3b, @local, 0x4e23, 0x4, 'fo\x00', 0x19, 0x7, 0x1e}, {@rand_addr=0x64010100, 0x4e20, 0x10001, 0x7, 0x6, 0x8}}, 0x44) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @multicast1}, &(0x7f00000014c0)=0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001500)={0xffffffffffffffff, 0x1, 0x6, r10}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) 37.940010743s ago: executing program 2 (id=19): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x6, 0x3, 0x4, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000400)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80) unshare(0x6020400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x8) 37.883237704s ago: executing program 0 (id=20): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xa, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xffffffffffffff30, 0xffffffff}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd94}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r3, &(0x7f00000003c0)) timer_delete(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) timer_delete(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x14f780, 0x184) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000200000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) 37.585412263s ago: executing program 0 (id=25): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x4, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 37.531861884s ago: executing program 4 (id=26): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.508814454s ago: executing program 0 (id=28): socket$kcm(0x10, 0x2, 0x0) futex_waitv(&(0x7f0000000440)=[{0x3, 0xffffffffffffffff, 0x2}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x801946}, 0x10000, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000c0000000020000a01"], 0x0, 0x26, 0x0, 0x8, 0x80000001}, 0x28) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) futex$unlock_pi_list32(&(0x7f0000000140)=0x1, 0x687, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)=0x5, 0xfffffff9) timer_getoverrun(r3) get_mempolicy(0x0, &(0x7f0000000100), 0x1005, &(0x7f0000ffa000/0x3000)=nil, 0x3) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x40080) 37.424790807s ago: executing program 4 (id=29): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @mcast2, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x8}, 0x3400c8d4) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) syz_emit_ethernet(0x9f7, &(0x7f0000000900)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x9c1, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0xf, 0xd, "f53222cc3490379e69a90c48390eb36f80a05e6e5a36bc92fdbca7557c9df38d3e8fdf3ba93c5d8d1589696f7a050003c54e44c864c179a7ededfeeecda1370cc99b74fe885aab74bc5ae1ed428c19a3e10d78dc228da2178fbb8d2741feb8c793ad0ecb231b59a065"}, {0x19, 0x127, "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"}]}}}}}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x9, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r8}, 0x10, &(0x7f0000000080)={&(0x7f00000009c0)=@canfd={{0x4, 0x1}, 0x32, 0x0, 0x0, 0x0, "a1e626f8facc08238b9b756c56cd3765933ad3164db946825a24d1dbd4cf293d3bce76815d0aa531dc2aee4c8863050750c42cd7b949efca0b90790220752309"}, 0x80c}, 0x1, 0x0, 0x0, 0x84844}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800058004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x0, 0x12, 0x3, r4}, &(0x7f0000000280)=0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00001b", @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf251400000008000d000500000008001100000000000500190001000000"], 0x2c}}, 0x20008800) 37.324661399s ago: executing program 0 (id=30): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000001540)={[{@nolazytime}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) memfd_create(0x0, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='=@', 0x2}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) inotify_init() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0xa3800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x3b, @local, 0x4e23, 0x4, 'fo\x00', 0x19, 0x7, 0x1e}, {@rand_addr=0x64010100, 0x4e20, 0x10001, 0x7, 0x6, 0x8}}, 0x44) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @multicast1}, &(0x7f00000014c0)=0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001500)={0xffffffffffffffff, 0x1, 0x6, r10}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) 37.101535295s ago: executing program 4 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x2284, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001002c000000000000000000000000ff02000000000000000000000000000100000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000600000000000000000a000000000000000000000080400000000000000000080000000000000002000000000000000044000500ff010000000000000000000000000001000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00000002100010000feffffff000000000000000000000000000000004000000000000000000000000000001d4e21000100000a00e080ff00000000a8fed4c95c337970a144bdcfaefca376355961cbe1f52c1ffb12c2579241dfcf175aaaa4081ee4080015d6dfd6b5b6000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011e000000200000000000000000000000000000000000000000000ffffac141443fe8000000000000000000000000000bb3c0000000000035002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x8, 0x3, 0x9) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000700)=ANY=[], &(0x7f0000001f00)=""/4096, 0x56, 0x1000, 0x3}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c0003801400010077673000000000000000000000000000140001"], 0xc8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0xd8, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r7, 0x4, 0x78, 0x81, 0x2, 0x24, @mcast2, @private1, 0x10, 0x700, 0x1, 0x5}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 36.90570688s ago: executing program 0 (id=33): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000200)="a7a96c5a4d5f4d7cbd4fe2c7925d93e1920dfe465315c81f0d51131cf90d056c26dbfbb61532bc6dbee9e4688070d97f50f7d9a557f6682a0000000000007b510db0c6f5070000007f46eb3ef68724a9a6abe2a2372a360060ac10cbd80f18f7992a2b19da94b50e05007f7e0000faeb182e3a51eb1a3a57cc39191c0d74d1551626185e1546e2681086b7d880396e5607499c2191d4e52345cf159b3016c58835f2f8d8249c1e0c2f228a0a30e649810eaefcc14010c32302750616f99b31305dec", 0xc2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r4, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fcntl$notify(r1, 0x402, 0x3f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x8, 0x0, 0x8000, 0x3, 0x3e, 0xffffffeb, 0x78, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}]}, 0x78) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) 36.641596597s ago: executing program 0 (id=37): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e22, 0xc, @private1, 0x7fff}}}, 0x32) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x2, 0x3, 0x0, 0x9, {0x2, 0x1, 0xfff, 0x6, 0x8dff}, {0x0, 0x0, 0x2, 0x6, 0x679, 0x5}, 0x8000, 0x2, 0x8}}]}]}}]}, 0x7c}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000280)={0x2c, 0x1, 0x1, 0x0, r0}, 0x10) ftruncate(0xffffffffffffffff, 0x200000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x1}}, 0x2e) close(0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 36.595099108s ago: executing program 32 (id=37): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e22, 0xc, @private1, 0x7fff}}}, 0x32) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x2, 0x3, 0x0, 0x9, {0x2, 0x1, 0xfff, 0x6, 0x8dff}, {0x0, 0x0, 0x2, 0x6, 0x679, 0x5}, 0x8000, 0x2, 0x8}}]}]}}]}, 0x7c}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000280)={0x2c, 0x1, 0x1, 0x0, r0}, 0x10) ftruncate(0xffffffffffffffff, 0x200000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x1}}, 0x2e) close(0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 36.408183683s ago: executing program 2 (id=39): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.384890604s ago: executing program 33 (id=39): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.069578748s ago: executing program 4 (id=51): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000040000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000940)=ANY=[@ANYRES8=r2, @ANYRESDEC=0x0, @ANYRESHEX=r4, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRES8=r0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1bb0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x2004c011) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000580)={{r4, &(0x7f00000001c0)='\x00', 0x46100, &(0x7f0000000200)={@align=0x1, {0x728, 0x9, 0xff, 0xc9d2}}, 0xa3, &(0x7f0000000280), &(0x7f00000002c0)=0x1}, {[0x6, 0x43, 0x81, 0xbd1]}, 0xa, 0x9b, &(0x7f00000004c0)=""/155}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000017140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf250a0000000c0003"], 0x20}}, 0x20008880) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, r13, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x373d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20000}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 34.447195124s ago: executing program 4 (id=53): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1041c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10020d, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f00000000c0)={'L+', 0x93}, 0x16, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x2a82, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) read(r2, &(0x7f0000000c00)=""/242, 0xf2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001", @ANYRESHEX=r0], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c0002800800090003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H!\a\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400fd7f26000100627269646765004504000280"], 0x3c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x40000) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x2) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r11, 0x40047440, 0xf0ff1f00000000) 33.681000684s ago: executing program 4 (id=59): mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x2, 0x7, 0x1) 18.612443086s ago: executing program 34 (id=59): mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x2, 0x7, 0x1) 9.858220144s ago: executing program 6 (id=313): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x7, 0x0, &(0x7f0000000500)="11223344556677", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.736794507s ago: executing program 6 (id=315): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 9.693349928s ago: executing program 6 (id=317): timerfd_create(0x1, 0x80800) close(0x3) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0), 0xa4}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x841}}], 0x2, 0x11) 9.59287761s ago: executing program 6 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0x3}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff8e, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x6a, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec779000) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x111200, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000180)='./my_debugfs/usb/devices/../file0\x00', 0x4000, 0x84) pipe(&(0x7f0000000340)) read$qrtrtun(r7, &(0x7f0000000080)=""/32, 0x20) sendto$packet(r4, &(0x7f0000000140)="01154e000100001122334455892f", 0xe, 0x44011, &(0x7f0000000040)={0x11, 0x0, r5, 0x0, 0x0, 0x0, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000185400000400"/40], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 9.557702881s ago: executing program 6 (id=321): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) 9.316611617s ago: executing program 6 (id=322): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2720, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf2507000000140001800800050003000000060001000a00000014000180060002002b000000060004004e210000080004000400000014000180060001000200000006000100020000001400028006000b000a00000006000b000e000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'gretap0\x00', r7, 0x80, 0x8000, 0xf4b3, 0x6, {{0x16, 0x4, 0x1, 0x1e, 0x58, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x3f, 0x0, 0x4, [0x6, 0x8]}, @timestamp={0x44, 0x20, 0x84, 0x0, 0x3, [0x8000, 0x3, 0xe14, 0x0, 0x2, 0xff, 0x6]}, @noop, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x8, [{@remote, 0x101}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}]}]}}}}}) r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f000000d140)={0x0, 0x0, &(0x7f000000d100)={&(0x7f000000d080)=ANY=[@ANYBLOB="2000000005140db92dbd7000fddbdf25080012"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') fallocate(r0, 0x11, 0x0, 0x2005347) 9.100747244s ago: executing program 35 (id=322): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f190900000000000171250000000000017000", [0x7, 0xffffffff9673e35d]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2720, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000ffdbdf2507000000140001800800050003000000060001000a00000014000180060002002b000000060004004e210000080004000400000014000180060001000200000006000100020000001400028006000b000a00000006000b000e000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'gretap0\x00', r7, 0x80, 0x8000, 0xf4b3, 0x6, {{0x16, 0x4, 0x1, 0x1e, 0x58, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x3f, 0x0, 0x4, [0x6, 0x8]}, @timestamp={0x44, 0x20, 0x84, 0x0, 0x3, [0x8000, 0x3, 0xe14, 0x0, 0x2, 0xff, 0x6]}, @noop, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x8, [{@remote, 0x101}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}]}]}}}}}) r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f000000d140)={0x0, 0x0, &(0x7f000000d100)={&(0x7f000000d080)=ANY=[@ANYBLOB="2000000005140db92dbd7000fddbdf25080012"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') fallocate(r0, 0x11, 0x0, 0x2005347) 4.61489519s ago: executing program 5 (id=359): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2000, 0x8, 0x3, 0x2, 0x5f23, 0x6, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 4.436780254s ago: executing program 5 (id=361): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='-294967-95 2000000000 0\n', 0x18) 4.371544216s ago: executing program 5 (id=363): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000001c0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x16, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x1, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0x7, @mcast2}, r2}}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x6, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sync() ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000180000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x16, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x1, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0x7, @mcast2}, r2}}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) clock_gettime(0x6, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) sync() (async) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000180000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) 3.897759139s ago: executing program 5 (id=366): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x0, 0x170) (async) openat$dir(0xffffff9c, &(0x7f0000000100)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x0, 0x170) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143943, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) lgetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) 3.791159841s ago: executing program 5 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00112233445566778899aabbccdd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000003}, 0x17) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/class/net\x00', 0x80000, 0x1) getdents64(r2, &(0x7f0000000540)=""/1000, 0x3e8) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000040)=0x3) 3.734660213s ago: executing program 3 (id=370): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x70, 0x6, 0x0, 0x0, 0x0, 0x8, 0x71034, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1121769e, 0x7, @perf_bp={0x0, 0xb}, 0x1a3ed, 0x3, 0x11000, 0x3, 0x4000000000, 0x5, 0xa5, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100001000130700000041cd936a00fe80000000000000000000cf67245700000000000000000005008000", @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="fe8000000000000000000000000000bb000004d633000000ff01000000000000000000000000000103000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000220000000000000027bd7000000000000a00000000000000000000004c001400636d6163286165732900"/244], 0x13c}}, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6, 0x0, 0xe0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0x8}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r4, 0x0, 0x0, 0x2, 0x2000) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x8, 0x800) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000300)={0x0, 0x8, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000700)={r5, 0xfffffffffffffffe, 0x0, [0x3, 0x8, 0x0, 0x3, 0x8001], [0xfffffffffffffffd, 0x40, 0x62, 0xffffffff00000001, 0x3, 0x7ffffffd, 0x9, 0x10000, 0xffffffff, 0x74, 0x0, 0x1, 0x80000001, 0x0, 0xfffffffffffeffff, 0xf399, 0x100000000010002, 0x6, 0x0, 0x1, 0x0, 0x62, 0x400000, 0x201, 0x7, 0xf1a, 0x7, 0x6, 0x4, 0x7fffffff, 0x6f, 0xfc, 0x8000000000000000, 0x4, 0xda50, 0x7ff, 0xc, 0x7fffffffffffffff, 0x0, 0x7, 0xe5, 0x8, 0xe61a, 0xfffffffffffffffd, 0x10001, 0x59b, 0x6, 0xfffffffffffffff9, 0x3, 0x50000000000000, 0x6, 0x0, 0xfffffffffffff8c3, 0x3, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x2, 0xfffffffffffffff8, 0x9, 0x4, 0x6, 0x10000, 0x566350df, 0x2, 0x1, 0x8, 0x893, 0x3ff, 0x10001, 0x2, 0x6, 0x5, 0x2, 0x7, 0x7, 0x5, 0x7, 0x6, 0x3, 0x6b1b, 0x7, 0x360, 0x5, 0x80, 0x7, 0x401, 0x6, 0xffffffffffffffff, 0x0, 0x40, 0x7fffffff, 0xc, 0x9, 0x9, 0x3, 0x8, 0x8bcf, 0x5, 0x7fff, 0x3, 0x8000000000000001, 0x6, 0x6, 0x5, 0x1, 0x2d, 0xae7, 0xc, 0x43dff8c0, 0xffff, 0xf2d1, 0xf1, 0x5, 0xe, 0x1, 0x0, 0x8000000000000001, 0x8, 0x8, 0xa8]}) syz_emit_ethernet(0x22, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffffaaaaaaaaaaaaaaaaaa3a080045d900140067000001299078ac1414bbe0000001e90943b233f4c3169015e4f02a5aa8908a88c9c4256eadad58f6eb5ebc9a6cac865da83f0223ead7c5b93176a57ba42eb670e1207434fd9207aa66e63c54084c25e71d4d98efbd412d1db0ee2d66a479244a0498fc579b62658296009c98d827491dfeec9212a09c90c4c7644568e824d42124f8123755c5b4c879f673e4b279343e59c1ea1b417983173b8f4638c47b2a71e485dd078fd559a577dae9f8f7fb0443e94a2bc840d5757a3e4647f913e8facc9a86bc374a6421bd7d64a52afcc8daec67bf1f5c4146229d9a302fc954e4a5a764ac838c2d48dbdf9fd726c34b8467d96623da25a78893733478ef1c8cf8f02bc8c3fd266779eb82c605d1ee0ced60396b8ca34d698aa14062ea92b748ebc74071076df7f39efd82e5fa0fb58e3f72d113059137d30b6fa936a11c9a918f91f941431f84d6893973a05a8ef2c4540776d7"], 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, [0x89b, 0x34c, 0x3ca, 0x10e]}) timer_create(0x8, &(0x7f0000000080)={0x0, 0x1b}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r6, 0xc0686611, &(0x7f0000000080)=0x68) fchdir(r0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x88000, 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3e5405, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") 3.555117968s ago: executing program 5 (id=373): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) 3.529497288s ago: executing program 36 (id=373): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) 3.422894371s ago: executing program 1 (id=376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000840)={r2, 0xffffffa9}, &(0x7f0000000880)=0x8) 2.994194732s ago: executing program 7 (id=383): file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x44810}, 0x20000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"], 0x5f) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0xff, 0x20ec, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'ip6gretap0\x00', @broadcast}) 2.841082336s ago: executing program 7 (id=385): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$unix(r1, &(0x7f0000005c40)=[{{&(0x7f0000000000)=@file={0x0, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x7ffffffe, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38, 0x1001}}], 0x1, 0x0) 2.835900366s ago: executing program 3 (id=386): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xd) 2.66824642s ago: executing program 7 (id=387): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000040)={0x0, 0x8001}) getdents64(r1, &(0x7f0000000000)=""/42, 0x2a) getdents(r2, 0xffffffffffffffff, 0x5a) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.512970564s ago: executing program 1 (id=388): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010040, &(0x7f0000000680)={[{@lazytime}, {@discard}, {@nodelalloc}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_nolock}]}, 0xff, 0x54a, &(0x7f0000001300)="$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") 2.343397699s ago: executing program 7 (id=389): r0 = mq_open(&(0x7f00000000c0)='*,-[+[H+]\x00\xb1\xb6\xa3\xf2\xb7\x90\x14\xca\xef\x1fkd\xa6\xf72\xcb\xb86\xc6\xaaw\xe7\xfc\xcd\xa2\xad\x00|\x9bW\x7f\xe4\xd5\xd8\xfe\xb9\xecu6P\x04C\a\xf8l\xe5\r\t%\xbc\x1a\x98\x16\x91\vF\xa6#\xdahP\x87b\xb9B\xda\xa7\xfc\xdc\xe2\x85\xc2\xdc\x10\x89{~&v.\xbc:jNx\xaak\x94\x8b\xe5}^\xb2\xfc\x99\x10\xd7*J\xb9\xe1rM\xde\xc1\xab\xa9I\xe2p\xdfHls\xfek\xfcDs\x05\xe4\x19.\xbd\x0f\xb5\xbb\\\xd7\xa6\xed\x86Fl\xdf\xd6\xb8.\xb8(\xc8)3\xad\x80y(\xb3\xe5\xba\xcb\x02\xc3\x8dK\xc2\x9b\x17\\\x04^\xf2*\x92k\xb5\xc4\x8c\xf8G\xf0\x89%\x91\xbf\x1c\t\v\xc3\x0f]\xfb\xea\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\b\x9cX!\x1c4\x83\vF\r\xedht\x14h\xe4\xa1\xd37\xf5\x10\x84t\xc8\x87D\xd7\xe9\xe8', 0x40, 0x0, 0x0) read(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/169, 0xa9}, 0x3}], 0x1, 0x120, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}, {@nodelalloc}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@dax_inode}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000240)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r3, @ANYRESHEX=r1], 0x18}, 0x40088c0) r4 = socket$nl_route(0x10, 0x3, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x1040) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r6, 0xa) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4088}, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40c7c2, 0x0) fchmod(r7, 0x19) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0xfe53, 0xfe53, 0x4) 2.340667069s ago: executing program 8 (id=390): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x301002, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000001c0)) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @multicast, @void, {@x25={0x805, {0x3, 0x5, 0xfd, "902643f90f59cbcf68c82bc4ea9ec26821d727af6807e31273690e0576d5cf85a9"}}}}, &(0x7f0000000100)={0x1, 0x3, [0x6f7, 0x2da, 0xa44, 0xfbe]}) chdir(&(0x7f0000000140)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00', 0x3) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1909491, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x7fff}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file2\x00', 0x3000000, &(0x7f0000000840)={[{@block={'block', 0x3d, 0x800}}, {@nocompress}, {@cruft}, {@unhide}, {@dmode={'dmode', 0x3d, 0x4}}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@uid_eq}]}, 0x2, 0x3ec, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40040, 0x57) 2.335940999s ago: executing program 3 (id=391): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x1, 0xff, 0x8, 0x1, 0xdffe}, 0x20) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2693, 0x4) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0, 0xfffffffffffffdf8}}], 0x1, 0x0) r2 = dup2(r0, r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x1, 0x6, 0x31, @private1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x8, 0x1, 0xda}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r3, 0x700, 0x80, 0x7bb, 0x8b, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x51, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast]}]}}}}}) 2.121011274s ago: executing program 3 (id=392): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040100}, 0x2c000015) mount$bpf(0x0, 0x0, 0x0, 0x1e6064, &(0x7f0000000100)=ANY=[]) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000d86dd6000000800783afffe80000000000000000000000000003fff02000000"], 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x2, 0x0) fcntl$lock(r1, 0x24, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = socket(0x2d, 0x2, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, 0x0, 0x0, 0x1) sendfile(0xffffffffffffffff, r5, 0x0, 0xbc44) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x14) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x200001, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xffc, 0x10ffff, 0xffffff88}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = syz_open_dev$sg(0x0, 0x0, 0x142000) ioctl$SG_IO(r7, 0x2285, 0x0) 2.111233505s ago: executing program 1 (id=393): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x8, 0x0, &(0x7f0000000180)="ce45357bc8a90635", 0x0, 0x8d01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"/318, @ANYRES16=0x0], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x4f, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'netpci0\x00'}) 1.575323189s ago: executing program 3 (id=394): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000001fc0)=""/4112, 0x1010}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.448761912s ago: executing program 1 (id=395): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000002c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x4040001) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="8004", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'dummy0\x00', 0x4001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000ffffffffffffffc1"], 0x4a) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000007c0)={@null, 0x1, 'vcan0\x00'}) (async) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000007c0)={@null, 0x1, 'vcan0\x00'}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) setresgid(0xee00, 0xee01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setgroups(0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) (async) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) inotify_init1(0x80000) 1.448197692s ago: executing program 3 (id=396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0x2, 0x8}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000008ff90850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x27, 0x18, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0xb}, @cb_func={0x18, 0x1}, @ringbuf_query, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func, @ringbuf_query, @alu={0x7, 0x0, 0x9, 0x1, 0x7, 0x50, 0x10}]}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0x7c, &(0x7f0000000740)=""/124, 0x40f00, 0x2, '\x00', r3, @fallback=0xf, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x6, 0x200}, 0x10, r5, 0xffffffffffffffff, 0xa, &(0x7f0000001040)=[r6, r7], &(0x7f0000001080)=[{0x2, 0xfff, 0x2, 0xa}, {0x4, 0x5, 0x4, 0x9}, {0x3, 0x5, 0x9, 0x9}, {0x0, 0x1, 0x1, 0x7}, {0x3, 0x5, 0x5, 0x5}, {0x1, 0x2, 0x6, 0x8}, {0x4, 0x3, 0x3, 0x1}, {0x2, 0x3, 0x6, 0x5}, {0x4, 0x3, 0xe, 0x6}, {0x2, 0x2, 0xb, 0x5}], 0x10, 0x3ff}, 0x94) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000000)={0xc000000000000000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7698474e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000100000a00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x48) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x5}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80}]}}]}, 0x3c}}, 0x24040084) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e339dbd36b34c6a2b15fd03bc0e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd036bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72f", 0x6}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x300) 1.16796319s ago: executing program 1 (id=397): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000840)={r2, 0xffffffa9}, &(0x7f0000000880)=0x8) 1.15512707s ago: executing program 8 (id=398): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0xce1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x50}}], 0x2, 0x800) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0xa, 0x300) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2c409, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0xffff, 0x5}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) sendfile(r6, r4, 0x0, 0x100000000) 1.064871472s ago: executing program 7 (id=399): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$eJzs3M1vFOUfAPDvTF94/7U/xBcQpIpG4ktLy4scvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhOejHqRROvejckxHAB9bJmdmZgWXbbLd12affzSab7PDNP93m+M/PsPjPP7gbQtYayP0nE9oj4PSIG8uzdBYbyh1s3Lk38fePSRBKVytt/JdVyN29cmiiLlv+3Lc9UKkV+U4N6L78XMT4zM3W+yI/Mn/1wZO7CxRenz46fnjo9dW7s+PEjh/f1Hxs72pY4s7hu7vlkdu/uE+9eeXPi5JX3f0rSyOOOujjaZSjfuw090+7KOmxHTTrprd2y/5c76UZnAp3UExHZ4eqr9v+B6Iktt7cNxOufd7RxwKqqVCqVRV6VFyrABpZEp1sAdEb5Rp9d/5bLGg09HgjXX8kvgLK4bxVLvqU30jyxv6/u+nZ7G+sfioiTC/98nS2xSvchAABqfZeNf15oNP5L45E80Z/9+V8xhzIYEf+PiJ0R8VBE7IqIhyOqZR+NiMeWWX/9DMm945/02n0H14Js/PdyMbd19/gvLYsM9hS5HdX4+5JT0zNTh4p9cjD6Np2aTqZGF6nj+9d++7LZttrxX7Zk9ZdjwaId13rrbtBNjs+PryTmWtc/i9jT2yj+JMppnCQidkfEnvusY/q53qbblo5/Ec2ftmWVbyKezY//QtTFX0qazk+OvnRs7OjI5piZOjRSnhX3+vnXy281q39F8bdBdvy3Njz/b8c/mGyOmLtw8Ux1vnZuWU+fdZ24/McXTa9piviz7tXK+X9iR3H+9yfvVFf0Fxs+Hp+fPz8a0Z+8ce/6sTvPVubL8ln8Bw807v87486eeDwi9kbEvoh4IrsoLNr+ZEQ8FREHFtkJP7769AdLxN/g+K/NXGkW/+RSxz9qj//yEz1nfri6dPybI6LZ8T9STR0s1rTy+tdqA1ey7wAAAGC9yD8Dn6TDt9NpOjycf4Z/V2xNZ2bn5p8/NfvRucl83nsw+tLyTtdAzf3Q0eLecJkfq8sfLu4bf9WzpZofnpidmex08NDltjXp/5k/ezrdOmDVtWEeDVin9H/oXvo/dKdE/4eupv9D92rU/z9tWnr421VtDLCmWn//v7rY95yAdaiF/r+QPzQfFQDrk+t/6F76P3Slpt+NT1f0lf81T/xb/J7hg9KejZ+I9IFoxsZP9Lb8YxbLSFQG8v6frdnUsEynX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD///u35Ec=") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000040)={0x0, 0x8001}) getdents64(r1, &(0x7f0000000000)=""/42, 0x2a) getdents(r2, 0xffffffffffffffff, 0x5a) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 702.739872ms ago: executing program 8 (id=400): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xd) 562.917115ms ago: executing program 8 (id=401): r0 = socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x6, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x20000000000000e, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000005c0)) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) write(r3, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x1, 0xff, 0x8, 0x1, 0xdffe}, 0x20) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2693, 0x4) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x3, @empty}, 0x1c, 0x0, 0xfffffffffffffdf8}}], 0x1, 0x0) r7 = dup2(r0, r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x7bb, 0x8b, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x51, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast]}]}}}}}) 547.295586ms ago: executing program 7 (id=402): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x183280, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r1}}, './proc\x00'}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0x6, 0x200, 0x9, 0x1, 0x82, 0x1, 0x70}, &(0x7f0000000340)=0x9c) r4 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 224.946944ms ago: executing program 1 (id=403): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) munlockall() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x521000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0xf0ff1f00000000) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x8) 218.205664ms ago: executing program 8 (id=404): r0 = socket(0x1e, 0x4, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x4a}) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$nfc_llcp(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x27, r2, 0x0, 0x3, 0x7f, 0xdd, "ab7917c348f14ee0834a235be5826c23c46ed3a338b1b5de4755cce4410baa0bd00e9658d0908bb6a2eeb17c8ada88fdb7f054836ae4d4b65b2594bcdd75d6", 0x23}, 0x60, &(0x7f0000000440)=[{&(0x7f0000000300)="eb042bef39a94badaa31da8aeb5aa7f58e7d1d7d01fb1a998f044fbf213e671e11c46c9b6f3da6bc7f8903ebc87709f5c9ae0dc36bdd9f28196beb1f8d35fea10d6467f978e2a18b3166fb6f8a868e79cefb9e3948c4020af2fcbbd8f90db4b4fc1703581dff9256025b45c3dd6e99f3ef62dc3210b6f0e8299773d7ab5a223edb036999b7b0a48c78872dec5373e4db5b7bb6149172ecdc93c562e12e98dfe22d7706f524b4636d9d83d7641914e70d9eb6a83fa0b290b036acbd9f651ea1fd3a7382096525ce850f4ad69aa29380225e15bd9f270de70b87fd62e629bf62f6eb31dc055fcdb1525b", 0xe9}, {&(0x7f0000000400)="740fb8f612a922015f5196f4c030ad34e3727df9", 0x14}], 0x2, &(0x7f0000000480)={0x30, 0x119, 0x7, "a72ba315941f1ff7aa560c4e9d386851f36ef4da42266cf08f66b7eb"}, 0x30, 0x4000000}, 0x4040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x1, 0x6) openat(r3, &(0x7f0000000100)='\x00', 0x4000, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000004000000040000000900010073797a3000000000090002006f303030000000000800034000000807200004800600010000020000050002001100006b9c00c300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f1494eaa20000000800034000000007200004"], 0x3204}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) recvmmsg$unix(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a0, 0x0) 106.258958ms ago: executing program 8 (id=405): syz_read_part_table(0x105b, &(0x7f0000001080)="$eJzsz7FtwkAYBeDn5ApLTmKPkCYjhQ2QaNnAEtuwCrvQIIQ7kM8UTAAU31c96d076Q8v9p2UZDXN+bxNLv26nXOz1J859DV8JOnm0C5FSTL+1qakKSk5bcZuV2c/Q/7qo+naPEyq41eG+9/53z/pSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4a7cAAAD//0UEDJY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000203000000092110000001221800090581030000000000"], 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x80180, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x4000000001}, 0x0, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0x6, 0x0, 0x10000}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x10000, 0x2, 0x5, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0xa, 0x300, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x40, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1, 0x88, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0xfffffffffffffffb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xec, 0x4, 0x7, 0x6, 0x0, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9f, 0x5, @perf_config_ext={0x8, 0xfffffffffffff56f}, 0xa061, 0x8, 0xe, 0x9, 0x7, 0x6, 0x80, 0x0, 0xffffffff, 0x0, 0x2}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="8c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="580a01002312010064001280080001007369740058000280060010000104000008000c000600000008000300ffffffff14000b00fc01000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="05000008000100"/20, @ANYRES32, @ANYBLOB="060012004e22000008000400fc44"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$int_in(r1, 0x5452, &(0x7f0000001000)=0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x10c08, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002800ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="133c0300092000001000128008000100687372000400028008002900e424000008001b0087000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) 0s ago: executing program 9 (id=374): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xfc, 0x1}, 0x8) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000004c0)={0x4, 0x5}) kernel console output (not intermixed with test programs): +0x656/0x680 [ 45.035663][ T3961] netlink_sendmsg+0x5be/0x6f0 [ 45.035742][ T3961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.035769][ T3961] ____sys_sendmsg+0x532/0x580 [ 45.035842][ T3961] ___sys_sendmsg+0x195/0x1e0 [ 45.035995][ T3961] __x64_sys_sendmsg+0xd4/0x160 [ 45.036027][ T3961] x64_sys_call+0x22ab/0x2550 [ 45.036056][ T3961] do_syscall_64+0x112/0x360 [ 45.036090][ T3961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.036130][ T3961] RIP: 0033:0x7fef64bbe159 [ 45.036150][ T3961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.036169][ T3961] RSP: 002b:00007fef63617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.036192][ T3961] RAX: ffffffffffffffda RBX: 00007fef64e45fa0 RCX: 00007fef64bbe159 [ 45.036210][ T3961] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 45.036249][ T3961] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 45.036261][ T3961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.036274][ T3961] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 45.036294][ T3961] [ 45.218815][ T3968] loop3: detected capacity change from 0 to 128 [ 45.479621][ T3978] netlink: 28 bytes leftover after parsing attributes in process `syz.6.78'. [ 45.492193][ T3989] syz.5.82 uses obsolete (PF_INET,SOCK_PACKET) [ 46.142252][ T4038] loop1: detected capacity change from 0 to 2048 [ 46.143278][ T4038] EXT4-fs: Ignoring removed nobh option [ 46.143373][ T4038] EXT4-fs: Ignoring removed i_version option [ 46.143419][ T4038] EXT4-fs: Ignoring removed nobh option [ 46.183216][ T4038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.222104][ T4038] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.222257][ T4038] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 46.222298][ T4038] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.222298][ T4038] [ 46.222325][ T4038] EXT4-fs (loop1): Total free blocks count 0 [ 46.222371][ T4038] EXT4-fs (loop1): Free/Dirty block details [ 46.222397][ T4038] EXT4-fs (loop1): free_blocks=2415919104 [ 46.222450][ T4038] EXT4-fs (loop1): dirty_blocks=16 [ 46.222472][ T4038] EXT4-fs (loop1): Block reservation details [ 46.222498][ T4038] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 46.369601][ T4031] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 46.391589][ T4047] loop5: detected capacity change from 0 to 512 [ 46.439947][ T4047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.440050][ T4047] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.529936][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.579096][ T4058] loop5: detected capacity change from 0 to 512 [ 46.597221][ T4058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.597351][ T4058] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.652561][ T4064] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 46.666069][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.924597][ T4076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 46.985410][ T4084] loop5: detected capacity change from 0 to 128 [ 47.282644][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 47.282677][ T29] audit: type=1400 audit(1788298169.952:544): avc: denied { name_bind } for pid=4096 comm="syz.5.103" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.398208][ T4102] loop6: detected capacity change from 0 to 512 [ 47.449492][ T29] audit: type=1400 audit(1788298170.112:545): avc: denied { bind } for pid=4101 comm="syz.6.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.468730][ T29] audit: type=1400 audit(1788298170.122:546): avc: denied { name_bind } for pid=4101 comm="syz.6.104" src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 47.468851][ T29] audit: type=1400 audit(1788298170.122:547): avc: denied { node_bind } for pid=4101 comm="syz.6.104" saddr=172.20.0.1 src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 47.512703][ T29] audit: type=1400 audit(1788298170.142:548): avc: denied { bind } for pid=4101 comm="syz.6.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.512783][ T29] audit: type=1400 audit(1788298170.172:549): avc: denied { write } for pid=4101 comm="syz.6.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.679339][ T4108] netlink: 32 bytes leftover after parsing attributes in process `syz.6.107'. [ 47.851179][ T4106] loop1: detected capacity change from 0 to 512 [ 47.885770][ T4106] ext4: Unknown parameter 'euid<00000000004294967295' [ 47.974718][ T29] audit: type=1400 audit(1788298170.642:550): avc: denied { create } for pid=4119 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 47.974751][ T29] audit: type=1400 audit(1788298170.642:551): avc: denied { write } for pid=4119 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 47.975879][ T4120] Cannot find del_set index 0 as target [ 48.074636][ T29] audit: type=1400 audit(1788298170.742:552): avc: denied { mounton } for pid=4121 comm="syz.5.112" path="/proc/38/cgroup" dev="proc" ino=8112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 48.130603][ T4106] macvtap2: entered allmulticast mode [ 48.130703][ T4106] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 48.130953][ T4106] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 48.161505][ T4106] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 48.185847][ T4129] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 48.215977][ T4106] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 48.309511][ T3379] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 48.322630][ T4129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.327082][ T4131] vlan2: entered allmulticast mode [ 48.327100][ T4131] bond1: entered allmulticast mode [ 48.334398][ T4132] bond1: (slave dummy0): making interface the new active one [ 48.334452][ T4132] dummy0: entered allmulticast mode [ 48.347123][ T4132] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 48.362670][ T29] audit: type=1400 audit(1788298171.012:553): avc: denied { write } for pid=4128 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.365234][ T4122] wg1 speed is unknown, defaulting to 1000 [ 48.410484][ T4129] loop3: detected capacity change from 0 to 512 [ 48.418271][ T4129] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.418301][ T4129] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 48.439322][ T4129] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.114: bad orphan inode 15 [ 48.439426][ T4129] loop3: lost filesystem error report for type 5 error -117 [ 48.439476][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 48.439493][ C0] EXT4-fs (loop3): initial error at time 1788298171: ext4_orphan_get:1429 [ 48.439518][ C0] EXT4-fs (loop3): last error at time 1788298171: ext4_orphan_get:1429 [ 48.487681][ T4129] ext4_test_bit(bit=14, block=18) = 1 [ 48.487702][ T4129] is_bad_inode(inode)=0 [ 48.487714][ T4129] NEXT_ORPHAN(inode)=1023 [ 48.487722][ T4129] max_ino=32 [ 48.487737][ T4129] i_nlink=0 [ 48.496613][ T4129] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #15: comm syz.3.114: corrupted xattr block 19: bad e_name length [ 48.496652][ T4129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.496873][ T4129] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 48.497307][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.507367][ T4129] EXT4-fs (loop3): shut down requested (0) [ 48.637541][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.754373][ T4141] loop5: detected capacity change from 0 to 1024 [ 48.767760][ T4141] EXT4-fs: Ignoring removed orlov option [ 48.768340][ T4141] EXT4-fs: Ignoring removed orlov option [ 48.862784][ T4141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.886877][ T4139] loop6: detected capacity change from 0 to 512 [ 48.921420][ T4139] ext4: Unknown parameter 'euid<00000000004294967295' [ 48.929342][ T4141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.116'. [ 48.998443][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.018040][ T4154] loop3: detected capacity change from 0 to 764 [ 49.028087][ T4154] rock: directory entry would overflow storage [ 49.028104][ T4154] rock: sig=0x5850, size=36, remaining=22 [ 49.056167][ T4163] loop5: detected capacity change from 0 to 128 [ 49.195537][ T4171] FAULT_INJECTION: forcing a failure. [ 49.195537][ T4171] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.195574][ T4171] CPU: 0 UID: 0 PID: 4171 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.195611][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.195624][ T4171] Call Trace: [ 49.195631][ T4171] [ 49.195646][ T4171] __dump_stack+0x1d/0x30 [ 49.195670][ T4171] dump_stack_lvl+0x95/0xd0 [ 49.195700][ T4171] dump_stack+0x15/0x1b [ 49.195738][ T4171] should_fail_ex+0x262/0x280 [ 49.195767][ T4171] should_fail+0xb/0x20 [ 49.195787][ T4171] should_fail_usercopy+0x1a/0x20 [ 49.195809][ T4171] _copy_to_user+0x20/0xa0 [ 49.195835][ T4171] simple_read_from_buffer+0xb5/0x130 [ 49.195917][ T4171] proc_fail_nth_read+0x10e/0x150 [ 49.195956][ T4171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.196021][ T4171] vfs_read+0x18e/0x7c0 [ 49.196047][ T4171] ? __rcu_read_unlock+0x4e/0x70 [ 49.196148][ T4171] ? __fget_files+0x184/0x1c0 [ 49.196228][ T4171] ? mutex_lock+0x57/0x90 [ 49.196254][ T4171] ksys_read+0xdc/0x1a0 [ 49.196282][ T4171] __x64_sys_read+0x40/0x50 [ 49.196316][ T4171] x64_sys_call+0x2135/0x2550 [ 49.196362][ T4171] do_syscall_64+0x112/0x360 [ 49.196392][ T4171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.196418][ T4171] RIP: 0033:0x7fef64b7e98e [ 49.196436][ T4171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.196499][ T4171] RSP: 002b:00007fef63616fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.196524][ T4171] RAX: ffffffffffffffda RBX: 00007fef636176c0 RCX: 00007fef64b7e98e [ 49.196539][ T4171] RDX: 000000000000000f RSI: 00007fef636170a0 RDI: 0000000000000003 [ 49.196551][ T4171] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 49.196564][ T4171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.196576][ T4171] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 49.196667][ T4171] [ 49.250811][ T4172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 49.279772][ T4139] macvtap1: entered allmulticast mode [ 49.279930][ T4139] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 49.280520][ T4139] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 49.304755][ T4139] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 49.358668][ T4139] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 49.365853][ T4179] FAULT_INJECTION: forcing a failure. [ 49.365853][ T4179] name failslab, interval 1, probability 0, space 0, times 0 [ 49.365880][ T4179] CPU: 1 UID: 0 PID: 4179 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.365935][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.365989][ T4179] Call Trace: [ 49.365996][ T4179] [ 49.366004][ T4179] __dump_stack+0x1d/0x30 [ 49.366031][ T4179] dump_stack_lvl+0x95/0xd0 [ 49.366061][ T4179] dump_stack+0x15/0x1b [ 49.366083][ T4179] should_fail_ex+0x262/0x280 [ 49.366105][ T4179] ? rtnl_newlink+0x5c/0x1510 [ 49.366129][ T4179] should_failslab+0x8c/0xb0 [ 49.366212][ T4179] __kmalloc_cache_noprof+0x7a/0x400 [ 49.366245][ T4179] ? rtnl_newlink+0x5c/0x1510 [ 49.366273][ T4179] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.366297][ T4179] rtnl_newlink+0x5c/0x1510 [ 49.366393][ T4179] ? __siphash_unaligned+0x185/0x2d0 [ 49.366425][ T4179] ? __rcu_read_unlock+0x4e/0x70 [ 49.366457][ T4179] ? avc_has_perm_noaudit+0xa3/0x120 [ 49.366499][ T4179] ? cred_has_capability+0x224/0x2a0 [ 49.366537][ T4179] ? selinux_capable+0x31/0x40 [ 49.366563][ T4179] ? security_capable+0x7b/0x90 [ 49.366605][ T4179] ? ns_capable+0x80/0xb0 [ 49.366641][ T4179] ? __pfx_rtnl_newlink+0x10/0x10 [ 49.366664][ T4179] rtnetlink_rcv_msg+0x64b/0x720 [ 49.366691][ T4179] netlink_rcv_skb+0x11e/0x220 [ 49.366746][ T4179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.366774][ T4179] rtnetlink_rcv+0x1c/0x30 [ 49.366805][ T4179] netlink_unicast+0x5a9/0x680 [ 49.366840][ T4179] netlink_sendmsg+0x5be/0x6f0 [ 49.366870][ T4179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.366899][ T4179] ____sys_sendmsg+0x532/0x580 [ 49.367005][ T4179] ___sys_sendmsg+0x195/0x1e0 [ 49.367099][ T4179] __x64_sys_sendmsg+0xd4/0x160 [ 49.367185][ T4179] x64_sys_call+0x22ab/0x2550 [ 49.367213][ T4179] do_syscall_64+0x112/0x360 [ 49.367324][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.367427][ T4179] RIP: 0033:0x7fef64bbe159 [ 49.367444][ T4179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.367464][ T4179] RSP: 002b:00007fef63617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.367486][ T4179] RAX: ffffffffffffffda RBX: 00007fef64e45fa0 RCX: 00007fef64bbe159 [ 49.367513][ T4179] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 49.367528][ T4179] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 49.367543][ T4179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.367556][ T4179] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 49.367576][ T4179] [ 49.619234][ T3394] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 49.765742][ T4206] FAULT_INJECTION: forcing a failure. [ 49.765742][ T4206] name failslab, interval 1, probability 0, space 0, times 0 [ 49.765837][ T4206] CPU: 1 UID: 0 PID: 4206 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.765863][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.765877][ T4206] Call Trace: [ 49.765885][ T4206] [ 49.765950][ T4206] __dump_stack+0x1d/0x30 [ 49.765977][ T4206] dump_stack_lvl+0x95/0xd0 [ 49.766001][ T4206] dump_stack+0x15/0x1b [ 49.766054][ T4206] should_fail_ex+0x262/0x280 [ 49.766084][ T4206] ? ep_insert+0x13b/0xd70 [ 49.766111][ T4206] should_failslab+0x8c/0xb0 [ 49.766141][ T4206] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 49.766224][ T4206] ? ep_insert+0x13b/0xd70 [ 49.766327][ T4206] ? percpu_counter_add_batch+0xb5/0x120 [ 49.766366][ T4206] ep_insert+0x13b/0xd70 [ 49.766393][ T4206] ? kstrtouint_from_user+0xa8/0xf0 [ 49.766472][ T4206] ? proc_fail_nth_write+0x13b/0x160 [ 49.766509][ T4206] do_epoll_ctl_file+0x645/0x700 [ 49.766543][ T4206] __se_sys_epoll_ctl+0xf1/0x190 [ 49.766589][ T4206] __x64_sys_epoll_ctl+0x55/0x70 [ 49.766639][ T4206] x64_sys_call+0x6a5/0x2550 [ 49.766667][ T4206] do_syscall_64+0x112/0x360 [ 49.766699][ T4206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.766723][ T4206] RIP: 0033:0x7fef64bbe159 [ 49.766781][ T4206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.766800][ T4206] RSP: 002b:00007fef63617028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 49.766822][ T4206] RAX: ffffffffffffffda RBX: 00007fef64e45fa0 RCX: 00007fef64bbe159 [ 49.766837][ T4206] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 49.766912][ T4206] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 49.766926][ T4206] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 49.766941][ T4206] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 49.766962][ T4206] [ 49.871593][ T4210] cgroup: Setting release_agent not allowed [ 50.022420][ T4214] wg1 speed is unknown, defaulting to 1000 [ 50.105116][ T4229] loop3: detected capacity change from 0 to 128 [ 50.268873][ T4236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.139'. [ 50.471034][ T4259] loop6: detected capacity change from 0 to 512 [ 50.471527][ T4259] ext4: Unknown parameter 'euid<00000000004294967295' [ 50.497191][ T4259] macvtap1: entered allmulticast mode [ 50.497222][ T4259] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 50.497301][ T4259] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 50.498222][ T4259] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 50.511046][ T4259] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 50.564336][ T3437] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 50.790655][ T4262] loop1: detected capacity change from 0 to 1024 [ 50.806395][ T4262] EXT4-fs: Ignoring removed orlov option [ 50.807184][ T4262] EXT4-fs: Ignoring removed orlov option [ 50.838737][ T4262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.864687][ T4262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 50.900280][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.923200][ T4275] netlink: 'syz.1.146': attribute type 5 has an invalid length. [ 51.065249][ T4241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.209159][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.149'. [ 51.304770][ T4287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.304845][ T4287] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.358034][ T4282] vlan0: entered promiscuous mode [ 51.358125][ T4282] virtio_net virtio1 eth0: entered promiscuous mode [ 51.430923][ T4291] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 51.430950][ T4291] FAT-fs (loop3): Filesystem has been set read-only [ 51.431132][ T4291] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 51.479022][ T4300] FAULT_INJECTION: forcing a failure. [ 51.479022][ T4300] name failslab, interval 1, probability 0, space 0, times 0 [ 51.479098][ T4300] CPU: 1 UID: 0 PID: 4300 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.479231][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.479246][ T4300] Call Trace: [ 51.479253][ T4300] [ 51.479261][ T4300] __dump_stack+0x1d/0x30 [ 51.479374][ T4300] dump_stack_lvl+0x95/0xd0 [ 51.479398][ T4300] dump_stack+0x15/0x1b [ 51.479460][ T4300] should_fail_ex+0x262/0x280 [ 51.479483][ T4300] ? dst_alloc+0xbd/0x100 [ 51.479533][ T4300] should_failslab+0x8c/0xb0 [ 51.479564][ T4300] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 51.479593][ T4300] ? dst_alloc+0xbd/0x100 [ 51.479626][ T4300] dst_alloc+0xbd/0x100 [ 51.479689][ T4300] ? ip_vs_lblcr_check_expire+0x1d2/0x690 [ 51.479713][ T4300] ip_route_output_key_hash_rcu+0xed9/0x1320 [ 51.479748][ T4300] ip_route_output_flow+0x65/0x110 [ 51.479858][ T4300] udp_sendmsg+0x12ce/0x14e0 [ 51.479892][ T4300] udpv6_sendmsg+0x8ee/0x1700 [ 51.479962][ T4300] ? security_inode_alloc+0x37/0x100 [ 51.479986][ T4300] ? __rcu_read_unlock+0x4e/0x70 [ 51.480026][ T4300] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 51.480105][ T4300] inet6_sendmsg+0xac/0xd0 [ 51.480125][ T4300] ? __pfx_inet6_sendmsg+0x10/0x10 [ 51.480146][ T4300] ____sys_sendmsg+0x390/0x580 [ 51.480222][ T4300] ___sys_sendmsg+0x195/0x1e0 [ 51.480291][ T4300] __sys_sendmmsg+0x185/0x320 [ 51.480332][ T4300] __x64_sys_sendmmsg+0x57/0x70 [ 51.480403][ T4300] x64_sys_call+0x1fb4/0x2550 [ 51.480430][ T4300] do_syscall_64+0x112/0x360 [ 51.480460][ T4300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.480505][ T4300] RIP: 0033:0x7fd63eb9e159 [ 51.480521][ T4300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.480541][ T4300] RSP: 002b:00007fd63d5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.480562][ T4300] RAX: ffffffffffffffda RBX: 00007fd63ee25fa0 RCX: 00007fd63eb9e159 [ 51.480578][ T4300] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 51.480596][ T4300] RBP: 00007fd63d5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.480610][ T4300] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.480625][ T4300] R13: 00007fd63ee26038 R14: 00007fd63ee25fa0 R15: 00007ffc53106698 [ 51.480645][ T4300] [ 51.706596][ T4303] netlink: 'syz.3.154': attribute type 10 has an invalid length. [ 51.706627][ T4303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 52.067055][ T4303] veth0_macvtap: entered allmulticast mode [ 52.068007][ T4303] bridge0: port 3(veth0_macvtap) entered blocking state [ 52.068107][ T4303] bridge0: port 3(veth0_macvtap) entered disabled state [ 52.070464][ T4303] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 52.091372][ T4312] geneve0: entered allmulticast mode [ 52.130703][ T3635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.436730][ T4334] FAULT_INJECTION: forcing a failure. [ 52.436730][ T4334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.436764][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.436840][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.436911][ T4334] Call Trace: [ 52.436918][ T4334] [ 52.436925][ T4334] __dump_stack+0x1d/0x30 [ 52.437028][ T4334] dump_stack_lvl+0x95/0xd0 [ 52.437049][ T4334] dump_stack+0x15/0x1b [ 52.437069][ T4334] should_fail_ex+0x262/0x280 [ 52.437091][ T4334] should_fail+0xb/0x20 [ 52.437108][ T4334] should_fail_usercopy+0x1a/0x20 [ 52.437171][ T4334] _copy_from_iter+0xcc/0xe70 [ 52.437192][ T4334] ? _copy_from_iter+0x13b/0xe70 [ 52.437215][ T4334] copy_page_from_iter+0x15d/0x1f0 [ 52.437284][ T4334] skb_copy_datagram_from_iter+0x22d/0x480 [ 52.437323][ T4334] tun_get_user+0xc1e/0x2870 [ 52.437356][ T4334] ? ref_tracker_alloc+0x1eb/0x2f0 [ 52.437400][ T4334] tun_chr_write_iter+0x15a/0x210 [ 52.437427][ T4334] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 52.437477][ T4334] vfs_write+0x57f/0x9a0 [ 52.437507][ T4334] ksys_write+0xdc/0x1a0 [ 52.437617][ T4334] __x64_sys_write+0x40/0x50 [ 52.437716][ T4334] x64_sys_call+0x154e/0x2550 [ 52.437741][ T4334] do_syscall_64+0x112/0x360 [ 52.437820][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.437843][ T4334] RIP: 0033:0x7fd63eb9e159 [ 52.437861][ T4334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.437882][ T4334] RSP: 002b:00007fd63d5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.437943][ T4334] RAX: ffffffffffffffda RBX: 00007fd63ee25fa0 RCX: 00007fd63eb9e159 [ 52.437960][ T4334] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 0000000000000003 [ 52.438034][ T4334] RBP: 00007fd63d5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.438048][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.438061][ T4334] R13: 00007fd63ee26038 R14: 00007fd63ee25fa0 R15: 00007ffc53106698 [ 52.438079][ T4334] [ 52.629326][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 52.629341][ T29] audit: type=1400 audit(1788298175.302:669): avc: denied { ioctl } for pid=4342 comm="syz.1.169" path="socket:[8560]" dev="sockfs" ino=8560 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.646147][ T29] audit: type=1400 audit(1788298175.322:670): avc: denied { mount } for pid=4342 comm="syz.1.169" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.709450][ T4327] set_capacity_and_notify: 2 callbacks suppressed [ 52.716029][ T4327] loop5: detected capacity change from 0 to 512 [ 52.726086][ T4327] ext4: Unknown parameter 'euid<00000000004294967295' [ 52.776281][ T29] audit: type=1326 audit(1788298175.432:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776335][ T29] audit: type=1326 audit(1788298175.432:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776363][ T29] audit: type=1326 audit(1788298175.432:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776441][ T29] audit: type=1326 audit(1788298175.432:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776470][ T29] audit: type=1326 audit(1788298175.432:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776559][ T29] audit: type=1326 audit(1788298175.432:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776587][ T29] audit: type=1326 audit(1788298175.432:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.776615][ T29] audit: type=1326 audit(1788298175.432:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.3.170" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63eb9e159 code=0x7ffc0000 [ 52.957445][ T4354] loop6: detected capacity change from 0 to 512 [ 52.997467][ T4327] macvtap1: entered allmulticast mode [ 52.997641][ T4327] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 52.997958][ T4327] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 52.998566][ T4354] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 52.998619][ T4354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 52.998682][ T4354] EXT4-fs (loop6): orphan cleanup on readonly fs [ 52.998864][ T4354] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #13: comm syz.6.171: iget: bad i_size value: 12154761577498 [ 52.998938][ T4354] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 53.002990][ T4354] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.171: couldn't read orphan inode 13 (err -117) [ 53.003019][ T4354] loop6: lost filesystem error report for type 5 error -117 [ 53.003588][ T4354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.032356][ T4354] FAULT_INJECTION: forcing a failure. [ 53.032356][ T4354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.032384][ T4354] CPU: 1 UID: 0 PID: 4354 Comm: syz.6.171 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.032412][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.032425][ T4354] Call Trace: [ 53.032432][ T4354] [ 53.032442][ T4354] __dump_stack+0x1d/0x30 [ 53.032470][ T4354] dump_stack_lvl+0x95/0xd0 [ 53.032495][ T4354] dump_stack+0x15/0x1b [ 53.032516][ T4354] should_fail_ex+0x262/0x280 [ 53.032540][ T4354] should_fail+0xb/0x20 [ 53.032576][ T4354] should_fail_usercopy+0x1a/0x20 [ 53.032601][ T4354] strncpy_from_user+0x27/0x250 [ 53.032635][ T4354] do_getname+0x59/0x1c0 [ 53.032701][ T4354] __se_sys_mkdirat+0x21/0xf0 [ 53.032777][ T4354] __x64_sys_mkdirat+0x43/0x50 [ 53.032809][ T4354] x64_sys_call+0x368/0x2550 [ 53.032879][ T4354] do_syscall_64+0x112/0x360 [ 53.032917][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.032943][ T4354] RIP: 0033:0x7f9c1cafcfc7 [ 53.032961][ T4354] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.032989][ T4354] RSP: 002b:00007f9c1b556e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 53.033011][ T4354] RAX: ffffffffffffffda RBX: 00007f9c1b556ee0 RCX: 00007f9c1cafcfc7 [ 53.033027][ T4354] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 53.033042][ T4354] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000 [ 53.033057][ T4354] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000005c0 [ 53.033131][ T4354] R13: 00007f9c1b556ea0 R14: 0000000000000000 R15: 0000000000000000 [ 53.033151][ T4354] [ 53.094282][ T3635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.177951][ T4327] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 53.231507][ T4344] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 53.296605][ T4327] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 53.372801][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 53.437401][ T3437] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 53.795004][ T4385] xt_connbytes: Forcing CT accounting to be enabled [ 53.795039][ T4385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.939909][ T4389] ªªªªª»: renamed from lo (while UP) [ 54.670890][ T4434] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 54.852637][ T4433] loop5: detected capacity change from 0 to 32768 [ 54.869065][ T4434] ipvlan1: entered allmulticast mode [ 54.869090][ T4434] veth0_vlan: entered allmulticast mode [ 54.875387][ T4434] team0: Device ipvlan1 failed to register rx_handler [ 54.893385][ T4433] loop5: p1 < > p3 < p5 > p4 < > [ 54.906523][ T4434] syz.3.184 (4434) used greatest stack depth: 9344 bytes left [ 54.935144][ T4437] loop6: detected capacity change from 0 to 512 [ 54.947322][ T4437] ext4: Unknown parameter 'euid<00000000004294967295' [ 54.971453][ T4433] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 55.279747][ T4481] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 55.296146][ T4481] Illegal XDP return value 65535 on prog (id 51) dev N/A, expect packet loss! [ 55.321230][ T4437] macvtap1: entered allmulticast mode [ 55.321399][ T4437] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 55.321798][ T4437] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 55.355082][ T4437] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 55.442364][ T4479] loop3: detected capacity change from 0 to 256 [ 55.449722][ T4437] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 55.472996][ T4481] loop1: detected capacity change from 0 to 1024 [ 55.481412][ T4481] EXT4-fs: Ignoring removed bh option [ 55.487844][ T4479] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.508307][ T4481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 55.545121][ T3379] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 55.565183][ T4486] batman_adv: batadv0: Adding interface: macvtap1 [ 55.565202][ T4486] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.565239][ T4486] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 55.569584][ T4490] netlink: 140 bytes leftover after parsing attributes in process `syz.3.193'. [ 55.574104][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 55.664039][ T3995] IPVS: starting estimator thread 0... [ 55.688924][ T4499] loop3: detected capacity change from 0 to 512 [ 55.695712][ T4499] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.718726][ T4499] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.196: corrupted in-inode xattr: e_value size too large [ 55.718765][ T4499] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.732791][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 55.732809][ C1] EXT4-fs (loop3): initial error at time 1788298178: ext4_iget_extra_inode:5210: inode 15 [ 55.732835][ C1] EXT4-fs (loop3): last error at time 1788298178: ext4_iget_extra_inode:5210: inode 15 [ 55.733054][ T4499] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.196: couldn't read orphan inode 15 (err -117) [ 55.733078][ T4499] loop3: lost filesystem error report for type 5 error -117 [ 55.749582][ T4495] IPVS: using max 2352 ests per chain, 117600 per kthread [ 55.781370][ T4499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.840634][ T4499] xt_CONNSECMARK: invalid mode: 0 [ 55.930538][ T4493] loop1: detected capacity change from 0 to 1024 [ 55.945893][ T4493] ext4: Unknown parameter 'smackfsfloor' [ 56.034751][ T4514] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.196: Logical block already allocated [ 56.073169][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.096333][ T4502] loop6: detected capacity change from 0 to 512 [ 56.161669][ T4502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.161859][ T4502] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.208654][ T4526] loop3: detected capacity change from 0 to 4096 [ 56.225749][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.307296][ T4544] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 56.307351][ T4544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 56.307439][ T4544] EXT4-fs (loop5): orphan cleanup on readonly fs [ 56.334850][ T4544] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.204: iget: bad i_size value: 12154761577498 [ 56.334886][ T4544] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.347596][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 56.347619][ C1] EXT4-fs (loop5): initial error at time 1788298179: ext4_orphan_get:1403: inode 13 [ 56.347660][ C1] EXT4-fs (loop5): last error at time 1788298179: ext4_orphan_get:1403: inode 13 [ 56.348540][ T4544] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.204: couldn't read orphan inode 13 (err -117) [ 56.348569][ T4544] loop5: lost filesystem error report for type 5 error -117 [ 56.382729][ T4544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.397715][ T4544] FAULT_INJECTION: forcing a failure. [ 56.397715][ T4544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.397824][ T4544] CPU: 0 UID: 0 PID: 4544 Comm: syz.5.204 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.397851][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.397865][ T4544] Call Trace: [ 56.397931][ T4544] [ 56.397939][ T4544] __dump_stack+0x1d/0x30 [ 56.397967][ T4544] dump_stack_lvl+0x95/0xd0 [ 56.397991][ T4544] dump_stack+0x15/0x1b [ 56.398014][ T4544] should_fail_ex+0x262/0x280 [ 56.398096][ T4544] should_fail+0xb/0x20 [ 56.398116][ T4544] should_fail_usercopy+0x1a/0x20 [ 56.398141][ T4544] strncpy_from_user+0x27/0x250 [ 56.398215][ T4544] do_getname+0x59/0x1c0 [ 56.398251][ T4544] getname_flags+0x1d/0x30 [ 56.398285][ T4544] do_sys_openat2+0x6c/0x130 [ 56.398316][ T4544] __x64_sys_openat+0xf2/0x120 [ 56.398341][ T4544] x64_sys_call+0x1f72/0x2550 [ 56.398389][ T4544] do_syscall_64+0x112/0x360 [ 56.398420][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.398444][ T4544] RIP: 0033:0x7f1bb24fe159 [ 56.398461][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.398481][ T4544] RSP: 002b:00007f1bb0f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.398570][ T4544] RAX: ffffffffffffffda RBX: 00007f1bb2785fa0 RCX: 00007f1bb24fe159 [ 56.398586][ T4544] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 56.398602][ T4544] RBP: 00007f1bb0f57090 R08: 0000000000000000 R09: 0000000000000000 [ 56.398665][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.398679][ T4544] R13: 00007f1bb2786038 R14: 00007f1bb2785fa0 R15: 00007ffe10985e48 [ 56.398701][ T4544] [ 56.452751][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.475663][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.627925][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.628063][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.630295][ T3635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.640194][ T4554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 56.640227][ T4554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 56.670558][ T4551] bridge0: entered allmulticast mode [ 56.673096][ T4553] loop1: p1 p4 [ 56.677618][ T4553] loop1: p4 start 184549376 is beyond EOD, truncated [ 56.699618][ T2982] loop1: p1 p4 [ 56.708760][ T2982] loop1: p4 start 184549376 is beyond EOD, truncated [ 56.714154][ T4554] ip6gretap0: entered promiscuous mode [ 56.723381][ T4554] syz_tun: entered promiscuous mode [ 56.845050][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 57.020060][ T4562] ext4: Unknown parameter 'euid<00000000004294967295' [ 57.180123][ T4562] macvtap2: entered allmulticast mode [ 57.180264][ T4562] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 57.182245][ T4562] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 57.207905][ T4562] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 57.242105][ T4562] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 57.371826][ T11] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 57.381278][ T4597] batman_adv: batadv0: Adding interface: macvtap2 [ 57.381295][ T4597] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.381326][ T4597] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 57.584327][ T4634] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.216'. [ 57.692221][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 57.692251][ T29] audit: type=1400 audit(1788298180.362:1022): avc: denied { bind } for pid=4643 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.731229][ T29] audit: type=1400 audit(1788298180.402:1023): avc: denied { listen } for pid=4643 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.744897][ T29] audit: type=1400 audit(1788298180.402:1024): avc: denied { write } for pid=4643 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.776313][ T29] audit: type=1400 audit(1788298180.442:1025): avc: denied { write } for pid=4633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.801387][ T29] audit: type=1400 audit(1788298180.472:1026): avc: denied { name_connect } for pid=4655 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 57.836360][ T29] audit: type=1400 audit(1788298180.502:1027): avc: denied { mounton } for pid=4659 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 57.854197][ T29] audit: type=1400 audit(1788298180.522:1028): avc: denied { listen } for pid=4655 comm="syz.1.220" lport=55210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.857766][ T29] audit: type=1400 audit(1788298180.522:1029): avc: denied { accept } for pid=4655 comm="syz.1.220" lport=55210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.859291][ T29] audit: type=1400 audit(1788298180.522:1030): avc: denied { write } for pid=4658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.897370][ T4657] netlink: 'syz.1.220': attribute type 10 has an invalid length. [ 57.906267][ T4657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.907910][ T4653] set_capacity_and_notify: 4 callbacks suppressed [ 57.907975][ T4653] loop3: detected capacity change from 0 to 1764 [ 57.918225][ T4657] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 57.934057][ T364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.938313][ T4657] netlink: 14 bytes leftover after parsing attributes in process `syz.1.220'. [ 57.939066][ T4653] syz.3.219: attempt to access beyond end of device [ 57.939066][ T4653] loop3: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 57.939095][ T4653] Buffer I/O error on dev loop3, logical block 1795162143, async page read [ 57.939275][ T4653] syz.3.219: attempt to access beyond end of device [ 57.939275][ T4653] loop3: rw=8388608, sector=7180648572, nr_sectors = 4 limit=1764 [ 57.939300][ T4653] Buffer I/O error on dev loop3, logical block 1795162143, async page read [ 57.964544][ T4657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.038708][ T4657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.048841][ T4657] bond0 (unregistering): (slave netdevsim2): Releasing backup interface [ 58.058244][ T4657] bond0 (unregistering): Released all slaves [ 58.068184][ T364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.108408][ T29] audit: type=1400 audit(1788298180.772:1031): avc: denied { write } for pid=4666 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.153187][ T4659] wg1 speed is unknown, defaulting to 1000 [ 58.161910][ T364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.207096][ T4689] loop5: detected capacity change from 0 to 1764 [ 58.218317][ T4689] FAULT_INJECTION: forcing a failure. [ 58.218317][ T4689] name failslab, interval 1, probability 0, space 0, times 0 [ 58.218348][ T4689] CPU: 1 UID: 0 PID: 4689 Comm: syz.5.224 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.218382][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.218396][ T4689] Call Trace: [ 58.218466][ T4689] [ 58.218474][ T4689] __dump_stack+0x1d/0x30 [ 58.218504][ T4689] dump_stack_lvl+0x95/0xd0 [ 58.218530][ T4689] dump_stack+0x15/0x1b [ 58.218591][ T4689] should_fail_ex+0x262/0x280 [ 58.218641][ T4689] ? isofs_lookup+0x52/0x7e0 [ 58.218664][ T4689] should_failslab+0x8c/0xb0 [ 58.218736][ T4689] __kmalloc_cache_noprof+0x7a/0x400 [ 58.218764][ T4689] ? isofs_lookup+0x52/0x7e0 [ 58.218831][ T4689] ? __rcu_read_unlock+0x4e/0x70 [ 58.218860][ T4689] ? __pfx_isofs_lookup+0x10/0x10 [ 58.218956][ T4689] isofs_lookup+0x52/0x7e0 [ 58.218998][ T4689] ? __rcu_read_unlock+0x4e/0x70 [ 58.219035][ T4689] ? __pfx_isofs_lookup+0x10/0x10 [ 58.219072][ T4689] lookup_open+0x984/0x10d0 [ 58.219103][ T4689] path_openat+0x415/0x10d0 [ 58.219195][ T4689] do_file_open+0x16c/0x290 [ 58.219235][ T4689] do_open_execat+0xab/0x240 [ 58.219299][ T4689] alloc_bprm+0x24/0x430 [ 58.219333][ T4689] do_execveat_common+0x110/0x8a0 [ 58.219408][ T4689] __x64_sys_execve+0x5f/0x80 [ 58.219437][ T4689] x64_sys_call+0x1cd2/0x2550 [ 58.219465][ T4689] do_syscall_64+0x112/0x360 [ 58.219569][ T4689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.219594][ T4689] RIP: 0033:0x7f1bb24fe159 [ 58.219611][ T4689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.219693][ T4689] RSP: 002b:00007f1bb0f57028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 58.219714][ T4689] RAX: ffffffffffffffda RBX: 00007f1bb2785fa0 RCX: 00007f1bb24fe159 [ 58.219730][ T4689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 58.219744][ T4689] RBP: 00007f1bb0f57090 R08: 0000000000000000 R09: 0000000000000000 [ 58.219759][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.219779][ T4689] R13: 00007f1bb2786038 R14: 00007f1bb2785fa0 R15: 00007ffe10985e48 [ 58.219800][ T4689] [ 58.295669][ T364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.306849][ T4685] netlink: 68 bytes leftover after parsing attributes in process `syz.1.223'. [ 58.314477][ T4685] loop1: detected capacity change from 0 to 512 [ 58.336425][ T4685] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.223: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 58.336473][ T4685] loop1: lost filesystem error report for type 5 error -117 [ 58.339992][ T4685] EXT4-fs (loop1): 1 orphan inode deleted [ 58.340396][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.472569][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.472601][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.472769][ T4659] bridge_slave_0: entered allmulticast mode [ 58.473672][ T4659] bridge_slave_0: entered promiscuous mode [ 58.485560][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.485591][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.485672][ T4659] bridge_slave_1: entered allmulticast mode [ 58.489264][ T4659] bridge_slave_1: entered promiscuous mode [ 58.520543][ T4659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.523464][ T4659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.541919][ T4706] loop5: detected capacity change from 0 to 128 [ 58.547506][ T364] bridge_slave_1: left allmulticast mode [ 58.547543][ T364] bridge_slave_1: left promiscuous mode [ 58.547620][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.562765][ T364] bridge_slave_0: left allmulticast mode [ 58.562825][ T364] bridge_slave_0: left promiscuous mode [ 58.563020][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.653878][ T4706] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.666111][ T4706] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.684074][ T364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.721265][ T364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.722278][ T364] bond0 (unregistering): Released all slaves [ 58.798484][ T4659] team0: Port device team_slave_0 added [ 58.805016][ T4659] team0: Port device team_slave_1 added [ 58.829134][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.829156][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.829235][ T4659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.832121][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.832137][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.832174][ T4659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.963823][ T4659] hsr_slave_0: entered promiscuous mode [ 58.964265][ T4659] hsr_slave_1: entered promiscuous mode [ 58.964509][ T4659] debugfs: 'hsr0' already exists in 'hsr' [ 58.964525][ T4659] Cannot create hsr debugfs directory [ 59.034297][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.047549][ T3619] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.079623][ T364] hsr_slave_0: left promiscuous mode [ 59.086027][ T364] hsr_slave_1: left promiscuous mode [ 59.086537][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.086556][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.092408][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.092423][ T364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.114384][ T364] veth1_macvtap: left promiscuous mode [ 59.114410][ T364] veth0_macvtap: left promiscuous mode [ 59.114477][ T364] veth1_vlan: left promiscuous mode [ 59.114513][ T364] veth0_vlan: left promiscuous mode [ 59.210788][ T4726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.230'. [ 59.212968][ T4729] loop1: detected capacity change from 0 to 512 [ 59.246421][ T4729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.246502][ T4729] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.257053][ T4729] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: comm syz.1.228: invalid size [ 59.257142][ T4729] EXT4-fs (loop1): Remounting filesystem read-only [ 59.374672][ T4746] FAULT_INJECTION: forcing a failure. [ 59.374672][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 59.374713][ T4746] CPU: 0 UID: 0 PID: 4746 Comm: syz.6.231 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.374806][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.374872][ T4746] Call Trace: [ 59.374878][ T4746] [ 59.374886][ T4746] __dump_stack+0x1d/0x30 [ 59.374920][ T4746] dump_stack_lvl+0x95/0xd0 [ 59.375016][ T4746] dump_stack+0x15/0x1b [ 59.375041][ T4746] should_fail_ex+0x262/0x280 [ 59.375066][ T4746] ? security_inode_alloc+0x37/0x100 [ 59.375093][ T4746] should_failslab+0x8c/0xb0 [ 59.375214][ T4746] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 59.375317][ T4746] ? security_inode_alloc+0x37/0x100 [ 59.375344][ T4746] security_inode_alloc+0x37/0x100 [ 59.375369][ T4746] inode_init_always_gfp+0x495/0x4e0 [ 59.375594][ T4746] ? __pfx_sock_alloc_inode+0x10/0x10 [ 59.375620][ T4746] alloc_inode+0x58/0x170 [ 59.375766][ T4746] __sock_create+0x121/0x580 [ 59.375792][ T4746] ? xfd_validate_state+0x45/0xf0 [ 59.375823][ T4746] __sys_socket+0xaf/0x180 [ 59.375850][ T4746] __x64_sys_socket+0x3f/0x50 [ 59.375885][ T4746] x64_sys_call+0x246e/0x2550 [ 59.375914][ T4746] do_syscall_64+0x112/0x360 [ 59.376026][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.376072][ T4746] RIP: 0033:0x7f9c1cafe159 [ 59.376095][ T4746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.376115][ T4746] RSP: 002b:00007f9c1b515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 59.376213][ T4746] RAX: ffffffffffffffda RBX: 00007f9c1cd86180 RCX: 00007f9c1cafe159 [ 59.376229][ T4746] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 59.376243][ T4746] RBP: 00007f9c1cb95024 R08: 0000000000000000 R09: 0000000000000000 [ 59.376258][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.376272][ T4746] R13: 00007f9c1cd86218 R14: 00007f9c1cd86180 R15: 00007ffe0394cca8 [ 59.376293][ T4746] [ 59.380598][ T4746] socket: no more sockets [ 59.447135][ T4731] loop5: detected capacity change from 0 to 512 [ 59.449299][ T4731] EXT4-fs: Mount option(s) incompatible with ext2 [ 60.392000][ T364] team0 (unregistering): Port device team_slave_1 removed [ 60.392020][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.395084][ T42] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.395128][ T42] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.421993][ T364] team0 (unregistering): Port device team_slave_0 removed [ 60.445938][ T4748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 60.463220][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 60.658262][ T4659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 60.677175][ T4659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.677759][ T4750] Ÿë: port 1(gretap0) entered blocking state [ 60.677787][ T4750] Ÿë: port 1(gretap0) entered disabled state [ 60.677841][ T4750] gretap0: entered allmulticast mode [ 60.678375][ T4750] gretap0: left allmulticast mode [ 60.678752][ T4659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 60.697793][ T4659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.698464][ T4659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 60.708283][ T4659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.713177][ T4659] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 60.741618][ T4659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.749161][ T4763] loop1: detected capacity change from 0 to 256 [ 60.757183][ T4772] loop3: detected capacity change from 0 to 164 [ 60.765971][ T4763] FAT-fs (loop1): bogus number of FAT sectors [ 60.766084][ T4763] FAT-fs (loop1): Can't find a valid FAT filesystem [ 60.792429][ T4773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 60.804141][ T4774] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 60.808251][ T4773] sd 0:0:1:0: PR command failed: 1026 [ 60.808279][ T4773] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 60.808374][ T4773] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 60.850307][ T4772] rock: directory entry would overflow storage [ 60.850323][ T4772] rock: sig=0x4543, size=28, remaining=18 [ 60.903224][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 60.969327][ T4797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.243'. [ 60.975606][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.001196][ T4659] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.008959][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.008992][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.017946][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.017978][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.100883][ T4804] loop6: detected capacity change from 0 to 4096 [ 61.114239][ T4814] loop1: detected capacity change from 0 to 512 [ 61.115149][ T4804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.136198][ T4814] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.145300][ T4814] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.245: corrupted in-inode xattr: e_value size too large [ 61.145336][ T4814] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.159372][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 61.159391][ C0] EXT4-fs (loop1): initial error at time 1788298183: ext4_iget_extra_inode:5210: inode 15 [ 61.159438][ C0] EXT4-fs (loop1): last error at time 1788298183: ext4_iget_extra_inode:5210: inode 15 [ 61.159559][ T4814] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.245: couldn't read orphan inode 15 (err -117) [ 61.159626][ T4814] loop1: lost filesystem error report for type 5 error -117 [ 61.208203][ T4814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.251186][ T4814] xt_CONNSECMARK: invalid mode: 0 [ 61.347670][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 61.405901][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.441412][ T4659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.442613][ T3635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.521362][ T4848] FAULT_INJECTION: forcing a failure. [ 61.521362][ T4848] name failslab, interval 1, probability 0, space 0, times 0 [ 61.521396][ T4848] CPU: 0 UID: 0 PID: 4848 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.521439][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.521453][ T4848] Call Trace: [ 61.521468][ T4848] [ 61.521477][ T4848] __dump_stack+0x1d/0x30 [ 61.521505][ T4848] dump_stack_lvl+0x95/0xd0 [ 61.521526][ T4848] dump_stack+0x15/0x1b [ 61.521590][ T4848] should_fail_ex+0x262/0x280 [ 61.521614][ T4848] ? skb_clone+0x151/0x1f0 [ 61.521648][ T4848] should_failslab+0x8c/0xb0 [ 61.521676][ T4848] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 61.521817][ T4848] ? skb_clone+0x151/0x1f0 [ 61.521848][ T4848] skb_clone+0x151/0x1f0 [ 61.521879][ T4848] __netlink_deliver_tap+0x2be/0x510 [ 61.521913][ T4848] netlink_unicast+0x656/0x680 [ 61.521959][ T4848] netlink_sendmsg+0x5be/0x6f0 [ 61.521990][ T4848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.522020][ T4848] ____sys_sendmsg+0x532/0x580 [ 61.522106][ T4848] ___sys_sendmsg+0x195/0x1e0 [ 61.522183][ T4848] __x64_sys_sendmsg+0xd4/0x160 [ 61.522308][ T4848] x64_sys_call+0x22ab/0x2550 [ 61.522337][ T4848] do_syscall_64+0x112/0x360 [ 61.522407][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.522431][ T4848] RIP: 0033:0x7fef64bbe159 [ 61.522522][ T4848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.522543][ T4848] RSP: 002b:00007fef63617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.522603][ T4848] RAX: ffffffffffffffda RBX: 00007fef64e45fa0 RCX: 00007fef64bbe159 [ 61.522618][ T4848] RDX: 0000000000004010 RSI: 0000200000008400 RDI: 0000000000000003 [ 61.522630][ T4848] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 61.522643][ T4848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.522657][ T4848] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 61.522681][ T4848] [ 61.739809][ T4848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 61.827276][ T4659] veth0_vlan: entered promiscuous mode [ 61.835613][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 61.843285][ T4659] veth1_vlan: entered promiscuous mode [ 61.880028][ T4659] veth0_macvtap: entered promiscuous mode [ 61.890994][ T4659] veth1_macvtap: entered promiscuous mode [ 61.913493][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.922256][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.499758][ T364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.499915][ T364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.499958][ T364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.500066][ T364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.543032][ T4877] wg1 speed is unknown, defaulting to 1000 [ 62.559057][ T4891] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.619752][ T4901] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 62.672605][ T4895] bridge_slave_0: left allmulticast mode [ 62.672648][ T4895] bridge_slave_0: left promiscuous mode [ 62.672861][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.685180][ T4895] bridge_slave_1: left allmulticast mode [ 62.685200][ T4895] bridge_slave_1: left promiscuous mode [ 62.685322][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.711778][ T4895] bond0: (slave bond_slave_0): Releasing backup interface [ 62.719012][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 62.719104][ T29] audit: type=1400 audit(1788298185.392:1177): avc: denied { getopt } for pid=4903 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.746963][ T4895] bond0: (slave bond_slave_1): Releasing backup interface [ 62.760706][ T4895] team0: Port device team_slave_0 removed [ 62.765311][ T4895] team0: Port device team_slave_1 removed [ 62.766198][ T4895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.766214][ T4895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.806396][ T4895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.806419][ T4895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.830654][ T4895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.865111][ T4912] FAULT_INJECTION: forcing a failure. [ 62.865111][ T4912] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.865148][ T4912] CPU: 0 UID: 0 PID: 4912 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.865178][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.865195][ T4912] Call Trace: [ 62.865202][ T4912] [ 62.865209][ T4912] __dump_stack+0x1d/0x30 [ 62.865238][ T4912] dump_stack_lvl+0x95/0xd0 [ 62.865318][ T4912] dump_stack+0x15/0x1b [ 62.865361][ T4912] should_fail_ex+0x262/0x280 [ 62.865392][ T4912] should_fail_alloc_page+0xf2/0x100 [ 62.865426][ T4912] __alloc_frozen_pages_noprof+0x157/0x400 [ 62.865517][ T4912] alloc_pages_mpol+0xaf/0x1d0 [ 62.865607][ T4912] alloc_pages_noprof+0x94/0x140 [ 62.865631][ T4912] pte_alloc_one+0x1c/0xc0 [ 62.865655][ T4912] __pte_alloc+0x32/0x2a0 [ 62.865686][ T4912] handle_mm_fault+0x3083/0x3bb0 [ 62.865714][ T4912] do_user_addr_fault+0x636/0x1060 [ 62.865812][ T4912] ? ksys_mmap_pgoff+0xc1/0x310 [ 62.865846][ T4912] ? __x64_sys_mmap+0x49/0x70 [ 62.865907][ T4912] ? trace_page_fault_user+0x1f/0xa0 [ 62.865940][ T4912] exc_page_fault+0x62/0xa0 [ 62.866008][ T4912] asm_exc_page_fault+0x26/0x30 [ 62.866031][ T4912] RIP: 0033:0x7fef64a7524e [ 62.866046][ T4912] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 62.866064][ T4912] RSP: 002b:00007fef63616470 EFLAGS: 00010246 [ 62.866080][ T4912] RAX: 0000000000000001 RBX: 00007fef63616530 RCX: 0000000000000101 [ 62.866149][ T4912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fef636165d0 [ 62.866162][ T4912] RBP: 0000000000000102 R08: 00007fef5b1f7000 R09: 0000000000000000 [ 62.866176][ T4912] R10: 0000000000000000 R11: 00007fef63616540 R12: 0000000000000001 [ 62.866244][ T4912] R13: 00007fef64c75000 R14: 0000000000000000 R15: 00007fef636165d0 [ 62.866267][ T4912] [ 62.876133][ T4912] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 62.888672][ T4912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.888903][ T4912] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.889325][ T4912] JBD2: no valid journal superblock found [ 62.889335][ T4912] EXT4-fs (loop1): Could not load journal inode [ 62.940477][ T29] audit: type=1400 audit(1788298185.612:1178): avc: denied { read write } for pid=4914 comm="syz.5.262" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.940554][ T29] audit: type=1400 audit(1788298185.612:1179): avc: denied { open } for pid=4914 comm="syz.5.262" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.941823][ T29] audit: type=1400 audit(1788298185.612:1180): avc: denied { ioctl } for pid=4914 comm="syz.5.262" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.955656][ T4915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.955741][ T4915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.012560][ T29] audit: type=1400 audit(1788298185.682:1181): avc: denied { connect } for pid=4916 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.014119][ T4917] set_capacity_and_notify: 3 callbacks suppressed [ 63.014133][ T4917] loop3: detected capacity change from 0 to 164 [ 63.129383][ T29] audit: type=1400 audit(1788298185.792:1182): avc: denied { accept } for pid=4920 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 63.192649][ T29] audit: type=1400 audit(1788298185.852:1183): avc: denied { read } for pid=4920 comm="syz.1.264" lport=35969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.242423][ T29] audit: type=1400 audit(1788298185.912:1184): avc: denied { listen } for pid=4920 comm="syz.1.264" lport=35969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.245886][ T29] audit: type=1400 audit(1788298185.912:1185): avc: denied { accept } for pid=4920 comm="syz.1.264" lport=35969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.317697][ T29] audit: type=1400 audit(1788298185.982:1186): avc: denied { write } for pid=4928 comm="syz.3.267" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.347264][ T4931] netlink: 236 bytes leftover after parsing attributes in process `syz.3.267'. [ 63.362584][ T4923] loop6: detected capacity change from 0 to 512 [ 63.439062][ T4929] wg1 speed is unknown, defaulting to 1000 [ 63.464365][ T4923] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #2: block 8: comm syz.6.265: lblock 0 mapped to illegal pblock 8 (length 1) [ 63.467906][ T4923] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 63.468609][ T4923] EXT4-fs (loop6): Remounting filesystem read-only [ 63.468711][ T4923] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.265: error -EUCLEAN reading directory block [ 63.468806][ T4923] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 63.469259][ T4923] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.265: error -EUCLEAN reading directory block [ 63.469419][ T4923] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 63.492401][ T4923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.568775][ T3635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.584212][ T4943] loop5: detected capacity change from 0 to 1024 [ 63.592176][ T4943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.601667][ T4943] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.613442][ T4943] JBD2: no valid journal superblock found [ 63.613515][ T4943] EXT4-fs (loop5): Could not load journal inode [ 63.851251][ T4962] loop6: detected capacity change from 0 to 1024 [ 63.851598][ T4962] EXT4-fs: Ignoring removed orlov option [ 63.865732][ T4962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 63.865765][ T4962] System zones: 0-1, 3-36 [ 63.885294][ T4962] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.276: bad orphan inode 134217728 [ 63.885330][ T4962] loop6: lost filesystem error report for type 5 error -117 [ 63.895932][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 63.895960][ C1] EXT4-fs (loop6): initial error at time 1788298186: ext4_orphan_get:1429 [ 63.895978][ C1] EXT4-fs (loop6): last error at time 1788298186: ext4_orphan_get:1429 [ 63.896549][ T4962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.908128][ T4967] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.108942][ T4974] FAULT_INJECTION: forcing a failure. [ 64.108942][ T4974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.108985][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.109015][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.109029][ T4974] Call Trace: [ 64.109036][ T4974] [ 64.109096][ T4974] __dump_stack+0x1d/0x30 [ 64.109126][ T4974] dump_stack_lvl+0x95/0xd0 [ 64.109152][ T4974] dump_stack+0x15/0x1b [ 64.109262][ T4974] should_fail_ex+0x262/0x280 [ 64.109324][ T4974] should_fail+0xb/0x20 [ 64.109345][ T4974] should_fail_usercopy+0x1a/0x20 [ 64.109486][ T4974] _copy_from_user+0x1c/0xb0 [ 64.109515][ T4974] ___sys_sendmsg+0xc1/0x1e0 [ 64.109560][ T4974] __sys_sendmmsg+0x185/0x320 [ 64.109639][ T4974] __x64_sys_sendmmsg+0x57/0x70 [ 64.109695][ T4974] x64_sys_call+0x1fb4/0x2550 [ 64.109723][ T4974] do_syscall_64+0x112/0x360 [ 64.109762][ T4974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.109941][ T4974] RIP: 0033:0x7fef64bbe159 [ 64.109959][ T4974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.109981][ T4974] RSP: 002b:00007fef63617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.110004][ T4974] RAX: ffffffffffffffda RBX: 00007fef64e45fa0 RCX: 00007fef64bbe159 [ 64.110027][ T4974] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 64.110087][ T4974] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 64.110102][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.110132][ T4974] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 64.110153][ T4974] [ 64.169327][ T4958] wg1 speed is unknown, defaulting to 1000 [ 64.187774][ T3635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.295552][ T9] kernel read not supported for file /mdstat (pid: 9 comm: kworker/0:0) [ 64.325887][ T4984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 64.366118][ T4984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.284'. [ 64.544942][ T4995] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 64.556728][ T4995] bond1 (unregistering): Released all slaves [ 64.654903][ T4984] loop3: detected capacity change from 0 to 512 [ 64.717377][ T4984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.717796][ T4984] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.717957][ T4984] EXT4-fs (loop3): invalid inodes per group: 0 [ 65.051356][ T5015] FAULT_INJECTION: forcing a failure. [ 65.051356][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 65.051434][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.3.293 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.051464][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.051478][ T5015] Call Trace: [ 65.051485][ T5015] [ 65.051498][ T5015] __dump_stack+0x1d/0x30 [ 65.051525][ T5015] dump_stack_lvl+0x95/0xd0 [ 65.051564][ T5015] dump_stack+0x15/0x1b [ 65.051587][ T5015] should_fail_ex+0x262/0x280 [ 65.051681][ T5015] ? __kernfs_new_node+0x70/0x440 [ 65.051716][ T5015] should_failslab+0x8c/0xb0 [ 65.051789][ T5015] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 65.051871][ T5015] ? __kernfs_new_node+0x70/0x440 [ 65.051906][ T5015] __kernfs_new_node+0x70/0x440 [ 65.051985][ T5015] kernfs_new_node+0xcf/0xf0 [ 65.052019][ T5015] kernfs_create_link+0x70/0x130 [ 65.052060][ T5015] sysfs_do_create_link_sd+0x6a/0x100 [ 65.052092][ T5015] sysfs_create_link+0x51/0x70 [ 65.052121][ T5015] module_add_driver+0x1c7/0x250 [ 65.052229][ T5015] bus_add_driver+0x2a8/0x450 [ 65.052262][ T5015] driver_register+0x162/0x220 [ 65.052349][ T5015] usb_gadget_register_driver_owner+0x92/0x1a0 [ 65.052389][ T5015] raw_ioctl+0xc5b/0x1df0 [ 65.052435][ T5015] ? ioctl_has_perm+0x273/0x2c0 [ 65.052473][ T5015] ? do_vfs_ioctl+0x848/0xe50 [ 65.052503][ T5015] ? selinux_file_ioctl+0x33c/0x3c0 [ 65.052537][ T5015] ? __fget_files+0x184/0x1c0 [ 65.052599][ T5015] ? __pfx_raw_ioctl+0x10/0x10 [ 65.052625][ T5015] __se_sys_ioctl+0xce/0x140 [ 65.052655][ T5015] __x64_sys_ioctl+0x43/0x50 [ 65.052796][ T5015] x64_sys_call+0x239d/0x2550 [ 65.052824][ T5015] do_syscall_64+0x112/0x360 [ 65.052855][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.052879][ T5015] RIP: 0033:0x7fd63eb9ddeb [ 65.052921][ T5015] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 65.052940][ T5015] RSP: 002b:00007fd63d5f4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.052963][ T5015] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd63eb9ddeb [ 65.052978][ T5015] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 65.052993][ T5015] RBP: 00007fd63d5f5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 65.053008][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.053037][ T5015] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.053056][ T5015] [ 65.066541][ T5015] bus_add_driver: failed to create module links for raw-gadget.0 [ 65.066563][ T5015] UDC core: USB Raw Gadget: driver registration failed: -12 [ 65.066580][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 65.281712][ T5011] loop1: detected capacity change from 0 to 512 [ 65.351237][ T5011] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.292: bg 0: block 5: invalid block bitmap [ 65.351384][ T5011] loop1: lost filesystem error report for type 5 error -117 [ 65.351914][ T5011] EXT4-fs (loop1): Remounting filesystem read-only [ 65.352248][ T5011] EXT4-fs (loop1): 2 truncates cleaned up [ 65.358438][ T5011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.427960][ T5020] FAULT_INJECTION: forcing a failure. [ 65.427960][ T5020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.428000][ T5020] CPU: 0 UID: 0 PID: 5020 Comm: syz.6.295 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.428032][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.428044][ T5020] Call Trace: [ 65.428051][ T5020] [ 65.428059][ T5020] __dump_stack+0x1d/0x30 [ 65.428099][ T5020] dump_stack_lvl+0x95/0xd0 [ 65.428120][ T5020] dump_stack+0x15/0x1b [ 65.428141][ T5020] should_fail_ex+0x262/0x280 [ 65.428171][ T5020] should_fail+0xb/0x20 [ 65.428193][ T5020] should_fail_usercopy+0x1a/0x20 [ 65.428220][ T5020] _copy_to_user+0x20/0xa0 [ 65.428249][ T5020] simple_read_from_buffer+0xb5/0x130 [ 65.428341][ T5020] proc_fail_nth_read+0x10e/0x150 [ 65.428491][ T5020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.428525][ T5020] vfs_read+0x18e/0x7c0 [ 65.428548][ T5020] ? __rcu_read_unlock+0x4e/0x70 [ 65.428581][ T5020] ? __fget_files+0x184/0x1c0 [ 65.428643][ T5020] ? mutex_lock+0x57/0x90 [ 65.428782][ T5020] ksys_read+0xdc/0x1a0 [ 65.428807][ T5020] __x64_sys_read+0x40/0x50 [ 65.428832][ T5020] x64_sys_call+0x2135/0x2550 [ 65.428937][ T5020] do_syscall_64+0x112/0x360 [ 65.428970][ T5020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.428992][ T5020] RIP: 0033:0x7f9c1cabe98e [ 65.429007][ T5020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.429042][ T5020] RSP: 002b:00007f9c1b556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.429065][ T5020] RAX: ffffffffffffffda RBX: 00007f9c1b5576c0 RCX: 00007f9c1cabe98e [ 65.429082][ T5020] RDX: 000000000000000f RSI: 00007f9c1b5570a0 RDI: 0000000000000005 [ 65.429152][ T5020] RBP: 00007f9c1b557090 R08: 0000000000000000 R09: 0000000000000000 [ 65.429170][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.429182][ T5020] R13: 00007f9c1cd86038 R14: 00007f9c1cd85fa0 R15: 00007ffe0394cca8 [ 65.429200][ T5020] [ 65.474753][ T5022] loop5: detected capacity change from 0 to 1024 [ 65.476834][ T5022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.477497][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.480212][ T5022] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.296: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3089, max 4(4), depth 0(0) [ 65.480259][ T5022] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 65.482818][ T5022] EXT4-fs (loop5): get root inode failed [ 65.482844][ T5022] EXT4-fs (loop5): mount failed [ 65.856413][ T5033] loop1: detected capacity change from 0 to 512 [ 65.918464][ T5042] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 65.965383][ T5042] loop3: detected capacity change from 0 to 2048 [ 65.994689][ T5042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.044908][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.241546][ T5055] loop5: detected capacity change from 0 to 256 [ 66.244745][ T5054] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 66.262247][ T5054] bond2 (unregistering): Released all slaves [ 66.278876][ T5055] FAT-fs (loop5): bogus number of FAT sectors [ 66.278899][ T5055] FAT-fs (loop5): Can't find a valid FAT filesystem [ 66.306063][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.309'. [ 66.306084][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.309'. [ 66.306112][ T5061] netlink: 'syz.7.309': attribute type 15 has an invalid length. [ 66.471964][ T5071] 9pnet_fd: Insufficient options for proto=fd [ 66.556763][ T5074] vlan2: entered promiscuous mode [ 66.556791][ T5074] bond0: entered promiscuous mode [ 66.556872][ T5074] bond_slave_0: entered promiscuous mode [ 66.556939][ T5074] bond_slave_1: entered promiscuous mode [ 66.595244][ T5074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.595412][ T5074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.672016][ T5087] netlink: 24 bytes leftover after parsing attributes in process `syz.6.319'. [ 66.825029][ T5091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5091 comm=syz.7.320 [ 66.932811][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.001660][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.036100][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.108054][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.277721][ T51] bridge_slave_1: left allmulticast mode [ 67.277752][ T51] bridge_slave_1: left promiscuous mode [ 67.277918][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.302496][ T51] bridge_slave_0: left allmulticast mode [ 67.302523][ T51] bridge_slave_0: left promiscuous mode [ 67.302707][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.372068][ T51] batman_adv: batadv0: Removing interface: macvtap1 [ 67.386776][ T51] batman_adv: batadv0: Removing interface: macvtap2 [ 67.411751][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.421758][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.431277][ T51] bond0 (unregistering): Released all slaves [ 67.431759][ T5104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 67.488717][ T51] hsr_slave_0: left promiscuous mode [ 67.489009][ T51] hsr_slave_1: left promiscuous mode [ 67.489711][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.489752][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.495187][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.495203][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.508031][ T51] veth1_macvtap: left promiscuous mode [ 67.508055][ T51] veth0_macvtap: left promiscuous mode [ 67.508109][ T51] veth1_vlan: left promiscuous mode [ 67.508143][ T51] veth0_vlan: left promiscuous mode [ 67.674769][ T51] team0 (unregistering): Port device team_slave_1 removed [ 67.683337][ T51] team0 (unregistering): Port device team_slave_0 removed [ 67.732091][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 67.843372][ T5094] wg1 speed is unknown, defaulting to 1000 [ 67.987378][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 67.987406][ T29] audit: type=1400 audit(1788298190.652:1230): avc: denied { write } for pid=5125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.102996][ T29] audit: type=1400 audit(1788298190.772:1231): avc: denied { write } for pid=5140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.178349][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 68.212048][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.212087][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.212159][ T5094] bridge_slave_0: entered allmulticast mode [ 68.212646][ T5094] bridge_slave_0: entered promiscuous mode [ 68.217998][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.218030][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.218084][ T5094] bridge_slave_1: entered allmulticast mode [ 68.218666][ T5094] bridge_slave_1: entered promiscuous mode [ 68.258316][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.260913][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.336718][ T5094] team0: Port device team_slave_0 added [ 68.340770][ T5094] team0: Port device team_slave_1 added [ 68.390578][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.390627][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.390662][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.396993][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.397007][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.397037][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.487211][ T5094] hsr_slave_0: entered promiscuous mode [ 68.487715][ T5094] hsr_slave_1: entered promiscuous mode [ 68.487922][ T5094] debugfs: 'hsr0' already exists in 'hsr' [ 68.487938][ T5094] Cannot create hsr debugfs directory [ 68.534746][ T29] audit: type=1400 audit(1788298191.202:1232): avc: denied { write } for pid=5150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.572320][ T29] audit: type=1400 audit(1788298191.242:1233): avc: denied { setopt } for pid=5158 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.628490][ T29] audit: type=1400 audit(1788298191.292:1234): avc: denied { write } for pid=5166 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.684912][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 68.738644][ T5094] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 68.752496][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.764014][ T5094] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 68.766227][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.767058][ T5094] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 68.772738][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.773374][ T5094] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 68.789045][ T5094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.850889][ T5184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'. [ 68.860114][ T29] audit: type=1400 audit(1788298191.522:1235): avc: denied { write } for pid=5183 comm="syz.1.329" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.893765][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.908289][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.911688][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.911719][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.915472][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.915508][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.997878][ T5196] set_capacity_and_notify: 1 callbacks suppressed [ 68.997913][ T5196] loop7: detected capacity change from 0 to 512 [ 69.020047][ T5196] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.029578][ T29] audit: type=1400 audit(1788298191.692:1236): avc: denied { write } for pid=5173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.036435][ T5196] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.332: corrupted in-inode xattr: e_value size too large [ 69.036466][ T5196] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.038317][ T5196] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.332: couldn't read orphan inode 15 (err -117) [ 69.038345][ T5196] loop7: lost filesystem error report for type 5 error -117 [ 69.039476][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 69.039500][ C0] EXT4-fs (loop7): initial error at time 1788298191: ext4_iget_extra_inode:5210: inode 15 [ 69.039531][ C0] EXT4-fs (loop7): last error at time 1788298191: ext4_orphan_get:1408 [ 69.041524][ T5196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.049552][ T29] audit: type=1400 audit(1788298191.712:1237): avc: denied { write } for pid=5195 comm="syz.7.332" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.060198][ T5196] xt_CONNSECMARK: invalid mode: 0 [ 69.063259][ T29] audit: type=1400 audit(1788298191.732:1238): avc: denied { write } for pid=5195 comm="syz.7.332" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.067602][ T29] audit: type=1400 audit(1788298191.732:1239): avc: denied { write } for pid=5195 comm="syz.7.332" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.147524][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 69.204394][ T4659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.233642][ T5220] loop7: detected capacity change from 0 to 1024 [ 69.240641][ T5220] EXT4-fs: Ignoring removed oldalloc option [ 69.254045][ T5220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.298524][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.376054][ T4659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.482936][ T5246] loop5: detected capacity change from 0 to 512 [ 69.489067][ T5094] veth0_vlan: entered promiscuous mode [ 69.497053][ T5246] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.501852][ T5094] veth1_vlan: entered promiscuous mode [ 69.514729][ T5246] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.337: corrupted in-inode xattr: e_value size too large [ 69.514816][ T5246] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.515197][ T5246] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.337: couldn't read orphan inode 15 (err -117) [ 69.515228][ T5246] loop5: lost filesystem error report for type 5 error -117 [ 69.515998][ T5246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.535419][ T5094] veth0_macvtap: entered promiscuous mode [ 69.543152][ T5094] veth1_macvtap: entered promiscuous mode [ 69.563678][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.565850][ T5246] xt_CONNSECMARK: invalid mode: 0 [ 69.570206][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.572557][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 69.574776][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5250 comm=syz.1.338 [ 69.576259][ T3995] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576385][ T3995] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576429][ T3995] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576464][ T3995] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.591012][ T5245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.335'. [ 69.735034][ T3619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.801219][ T5258] can: request_module (can-proto-3) failed. [ 69.809768][ T5260] can: request_module (can-proto-3) failed. [ 69.906733][ T5266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5266 comm=syz.5.340 [ 70.035429][ T5267] loop8: detected capacity change from 0 to 128 [ 70.046175][ T5267] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.230120][ T5270] IPv6: addrconf: prefix option has invalid lifetime [ 70.310639][ T5272] loop1: detected capacity change from 0 to 512 [ 70.310983][ T5272] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.318174][ T5272] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.343: corrupted in-inode xattr: e_value size too large [ 70.318214][ T5272] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.318350][ T5272] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.343: couldn't read orphan inode 15 (err -117) [ 70.318377][ T5272] loop1: lost filesystem error report for type 5 error -117 [ 70.318735][ T5272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.321157][ T5272] xt_CONNSECMARK: invalid mode: 0 [ 70.384242][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.420863][ T5277] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 70.443097][ T5278] loop7: detected capacity change from 0 to 512 [ 70.447160][ T5278] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 70.451026][ T5278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 70.451055][ T5278] System zones: 1-12 [ 70.453419][ T5278] EXT4-fs (loop7): 1 truncate cleaned up [ 70.453800][ T5278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.459924][ T5278] FAULT_INJECTION: forcing a failure. [ 70.459924][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 70.459949][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.7.345 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.459974][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.460015][ T5278] Call Trace: [ 70.460021][ T5278] [ 70.460028][ T5278] __dump_stack+0x1d/0x30 [ 70.460052][ T5278] dump_stack_lvl+0x95/0xd0 [ 70.460109][ T5278] dump_stack+0x15/0x1b [ 70.460128][ T5278] should_fail_ex+0x262/0x280 [ 70.460207][ T5278] ? __es_insert_extent+0x50e/0xee0 [ 70.460228][ T5278] should_failslab+0x8c/0xb0 [ 70.460306][ T5278] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 70.460340][ T5278] ? __es_insert_extent+0x50e/0xee0 [ 70.460363][ T5278] ? __rmqueue_pcplist+0x964/0xb30 [ 70.460393][ T5278] __es_insert_extent+0x50e/0xee0 [ 70.460436][ T5278] ? put_dec_trunc8+0x119/0x140 [ 70.460489][ T5278] ext4_es_cache_extent+0x386/0x5b0 [ 70.460516][ T5278] ext4_map_query_blocks+0x34c/0x500 [ 70.460547][ T5278] ? ext4_es_lookup_extent+0x390/0x4f0 [ 70.460570][ T5278] ext4_map_blocks+0x300/0x9a0 [ 70.460687][ T5278] _ext4_get_block+0x117/0x370 [ 70.460708][ T5278] ext4_get_block+0x39/0x50 [ 70.460796][ T5278] ext4_block_write_begin+0x695/0xcb0 [ 70.460831][ T5278] ? __pfx_ext4_get_block+0x10/0x10 [ 70.460895][ T5278] ? folio_mapping+0xb9/0xe0 [ 70.460922][ T5278] ext4_write_begin+0x657/0xeb0 [ 70.460964][ T5278] generic_perform_write+0x186/0x490 [ 70.460996][ T5278] ext4_buffered_write_iter+0x2e3/0x480 [ 70.461099][ T5278] ext4_file_write_iter+0x36e/0x1020 [ 70.461126][ T5278] ? __rcu_read_unlock+0x4e/0x70 [ 70.461239][ T5278] ? get_pid_task+0x92/0xc0 [ 70.461262][ T5278] ? avc_policy_seqno+0x15/0x30 [ 70.461285][ T5278] ? selinux_file_permission+0x1dc/0x310 [ 70.461319][ T5278] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 70.461345][ T5278] vfs_write+0x57f/0x9a0 [ 70.461396][ T5278] __x64_sys_pwrite64+0xfd/0x150 [ 70.461427][ T5278] x64_sys_call+0x23be/0x2550 [ 70.461455][ T5278] do_syscall_64+0x112/0x360 [ 70.461577][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.461603][ T5278] RIP: 0033:0x7fc0ce2ce159 [ 70.461621][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.461641][ T5278] RSP: 002b:00007fc0ccd27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 70.461663][ T5278] RAX: ffffffffffffffda RBX: 00007fc0ce555fa0 RCX: 00007fc0ce2ce159 [ 70.461678][ T5278] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 70.461746][ T5278] RBP: 00007fc0ccd27090 R08: 0000000000000000 R09: 0000000000000000 [ 70.461761][ T5278] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 70.461775][ T5278] R13: 00007fc0ce556038 R14: 00007fc0ce555fa0 R15: 00007ffce296eda8 [ 70.461796][ T5278] [ 70.561007][ T4659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.664376][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 70.664423][ T5292] FAULT_INJECTION: forcing a failure. [ 70.664423][ T5292] name failslab, interval 1, probability 0, space 0, times 0 [ 70.664491][ T5292] CPU: 0 UID: 0 PID: 5292 Comm: syz.1.350 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.664518][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.664531][ T5292] Call Trace: [ 70.664538][ T5292] [ 70.664546][ T5292] __dump_stack+0x1d/0x30 [ 70.664653][ T5292] dump_stack_lvl+0x95/0xd0 [ 70.664677][ T5292] dump_stack+0x15/0x1b [ 70.664699][ T5292] should_fail_ex+0x262/0x280 [ 70.664792][ T5292] should_failslab+0x8c/0xb0 [ 70.664866][ T5292] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 70.664962][ T5292] ? lookup_one_qstr_excl+0x160/0x240 [ 70.664989][ T5292] ? debugfs_alloc_inode+0x34/0x40 [ 70.665021][ T5292] ? debugfs_alloc_inode+0x34/0x40 [ 70.665124][ T5292] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 70.665200][ T5292] debugfs_alloc_inode+0x34/0x40 [ 70.665224][ T5292] alloc_inode+0x40/0x170 [ 70.665254][ T5292] new_inode+0x1d/0xe0 [ 70.665351][ T5292] __debugfs_create_file+0x97/0x2b0 [ 70.665376][ T5292] debugfs_create_file_full+0x3f/0x60 [ 70.665451][ T5292] ? __pfx_macvtap_setup+0x10/0x10 [ 70.665478][ T5292] ref_tracker_dir_debugfs+0x10e/0x220 [ 70.665584][ T5292] alloc_netdev_mqs+0x1a9/0xa90 [ 70.665652][ T5292] rtnl_create_link+0x239/0x720 [ 70.665685][ T5292] rtnl_newlink_create+0x17a/0x4a0 [ 70.665713][ T5292] ? security_capable+0x7b/0x90 [ 70.665750][ T5292] ? netlink_ns_capable+0x86/0xa0 [ 70.665817][ T5292] rtnl_newlink+0x1255/0x1510 [ 70.665846][ T5292] ? __memcg_slab_free_hook+0x154/0x340 [ 70.665949][ T5292] ? __rcu_read_unlock+0x4e/0x70 [ 70.665982][ T5292] ? avc_has_perm_noaudit+0xa3/0x120 [ 70.666008][ T5292] ? cred_has_capability+0x224/0x2a0 [ 70.666065][ T5292] ? selinux_capable+0x31/0x40 [ 70.666091][ T5292] ? security_capable+0x7b/0x90 [ 70.666126][ T5292] ? ns_capable+0x80/0xb0 [ 70.666188][ T5292] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.666208][ T5292] rtnetlink_rcv_msg+0x64b/0x720 [ 70.666248][ T5292] netlink_rcv_skb+0x11e/0x220 [ 70.666278][ T5292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.666306][ T5292] rtnetlink_rcv+0x1c/0x30 [ 70.666365][ T5292] netlink_unicast+0x5a9/0x680 [ 70.666391][ T5292] netlink_sendmsg+0x5be/0x6f0 [ 70.666421][ T5292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.666450][ T5292] ____sys_sendmsg+0x532/0x580 [ 70.666544][ T5292] ___sys_sendmsg+0x195/0x1e0 [ 70.666637][ T5292] __x64_sys_sendmsg+0xd4/0x160 [ 70.666696][ T5292] x64_sys_call+0x22ab/0x2550 [ 70.666785][ T5292] do_syscall_64+0x112/0x360 [ 70.666822][ T5292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.666847][ T5292] RIP: 0033:0x7fef64bbe159 [ 70.666864][ T5292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.666905][ T5292] RSP: 002b:00007fef63617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.666927][ T5292] RAX: ffffffffffffffda RBX: 00007fef64e45fa0 RCX: 00007fef64bbe159 [ 70.666998][ T5292] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 70.667010][ T5292] RBP: 00007fef63617090 R08: 0000000000000000 R09: 0000000000000000 [ 70.667022][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.667036][ T5292] R13: 00007fef64e46038 R14: 00007fef64e45fa0 R15: 00007ffd722083c8 [ 70.667055][ T5292] [ 70.674620][ T5292] debugfs: out of free dentries, can not create file 'netdev@ffff88811b0905e0' [ 70.682927][ T5290] loop7: detected capacity change from 0 to 512 [ 70.703771][ T5290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.703842][ T5290] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.838090][ T4659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.942043][ T5298] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 70.949823][ T5298] bond1 (unregistering): Released all slaves [ 71.078610][ T5287] pim6reg: entered allmulticast mode [ 71.119027][ T5287] pim6reg: left allmulticast mode [ 71.291009][ T5313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.355'. [ 71.303616][ T5306] loop8: detected capacity change from 0 to 8192 [ 71.371579][ T5318] loop1: detected capacity change from 0 to 512 [ 71.384902][ T5318] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 71.385808][ T5318] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.356: bad orphan inode 15 [ 71.385910][ T5318] loop1: lost filesystem error report for type 5 error -117 [ 71.386229][ T5318] ext4_test_bit(bit=14, block=18) = 1 [ 71.386244][ T5318] is_bad_inode(inode)=0 [ 71.386254][ T5318] NEXT_ORPHAN(inode)=1023 [ 71.386262][ T5318] max_ino=32 [ 71.386270][ T5318] i_nlink=0 [ 71.386926][ T5318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.356: bg 0: block 161: padding at end of block bitmap is not set [ 71.386956][ T5318] loop1: lost filesystem error report for type 5 error -117 [ 71.387137][ T5318] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 71.387155][ T5318] loop1: lost filesystem error report for type 5 error -117 [ 71.387713][ T5318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.387803][ T5318] ext2 filesystem being mounted at /108/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 71.623104][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.679123][ T5329] loop1: detected capacity change from 0 to 512 [ 71.706546][ T5329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.706661][ T5329] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.754614][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.754696][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.754860][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.782207][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.782226][ T5335] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.817151][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.817573][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.817960][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.835619][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.835939][ T5335] gretap0 speed is unknown, defaulting to 1000 [ 71.852293][ T5340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.852415][ T5340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.869069][ T5340] netlink: zone id is out of range [ 71.869084][ T5340] netlink: zone id is out of range [ 71.869095][ T5340] netlink: zone id is out of range [ 71.885641][ T5340] netlink: zone id is out of range [ 71.885848][ T5340] netlink: set zone limit has 4 unknown bytes [ 71.898650][ T5340] netlink: zone id is out of range [ 71.898666][ T5340] netlink: zone id is out of range [ 71.898678][ T5340] netlink: zone id is out of range [ 71.899357][ T5340] netlink: zone id is out of range [ 71.914144][ T5344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.929190][ T5344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.400063][ T5370] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.412365][ T5370] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.466351][ T3619] EXT4-fs error (device loop5): ext4_readdir:226: inode #11: comm syz-executor: path /65/mnt/lost+found: directory fails checksum at offset 1024 [ 72.466804][ T3619] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.467106][ T3619] EXT4-fs error (device loop5): ext4_readdir:226: inode #11: comm syz-executor: path /65/mnt/lost+found: directory fails checksum at offset 1024 [ 72.467614][ T3619] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.467844][ T3619] EXT4-fs error (device loop5): ext4_readdir:226: inode #11: comm syz-executor: path /65/mnt/lost+found: directory fails checksum at offset 1024 [ 72.468315][ T3619] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.468625][ T3619] EXT4-fs error (device loop5): ext4_readdir:226: inode #11: comm syz-executor: path /65/mnt/lost+found: directory fails checksum at offset 1024 [ 72.469079][ T3619] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.469353][ T3619] EXT4-fs error (device loop5): ext4_readdir:226: inode #11: comm syz-executor: path /65/mnt/lost+found: directory fails checksum at offset 1024 [ 72.470106][ T3619] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.632015][ T5380] EXT4-fs (loop1): unable to read superblock [ 72.705595][ T3619] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.728725][ T4006] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.810977][ T4006] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.852448][ T4006] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.910698][ T4006] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.976587][ T4006] bridge_slave_1: left allmulticast mode [ 72.976614][ T4006] bridge_slave_1: left promiscuous mode [ 72.976722][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.977542][ T4006] bridge_slave_0: left allmulticast mode [ 72.977559][ T4006] bridge_slave_0: left promiscuous mode [ 72.977739][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.090196][ T4006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.090372][ T4006] bond_slave_0: left promiscuous mode [ 73.105432][ T4006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.105695][ T4006] bond_slave_1: left promiscuous mode [ 73.106431][ T4006] bond0 (unregistering): Released all slaves [ 73.162856][ T5401] wg1 speed is unknown, defaulting to 1000 [ 73.163190][ T5401] gretap0 speed is unknown, defaulting to 1000 [ 73.193705][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 73.193726][ T29] audit: type=1400 audit(1788298195.862:1408): avc: denied { create } for pid=5430 comm="syz.7.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.226457][ T29] audit: type=1400 audit(1788298195.892:1409): avc: denied { sqpoll } for pid=5434 comm="syz.8.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.237021][ T5435] FAULT_INJECTION: forcing a failure. [ 73.237021][ T5435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.237049][ T5435] CPU: 1 UID: 0 PID: 5435 Comm: syz.8.382 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.237075][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.237087][ T5435] Call Trace: [ 73.237095][ T5435] [ 73.237103][ T5435] __dump_stack+0x1d/0x30 [ 73.237128][ T5435] dump_stack_lvl+0x95/0xd0 [ 73.237151][ T5435] dump_stack+0x15/0x1b [ 73.237172][ T5435] should_fail_ex+0x262/0x280 [ 73.237194][ T5435] should_fail_alloc_page+0xf2/0x100 [ 73.237225][ T5435] __alloc_frozen_pages_noprof+0x157/0x400 [ 73.237257][ T5435] alloc_pages_mpol+0xaf/0x1d0 [ 73.237280][ T5435] alloc_pages_noprof+0x94/0x140 [ 73.237305][ T5435] __pud_alloc+0x47/0x460 [ 73.237326][ T5435] copy_page_range+0x3140/0x33c0 [ 73.237354][ T5435] ? __account_obj_stock+0x43d/0x720 [ 73.237378][ T5435] ? __rcu_read_unlock+0x4e/0x70 [ 73.237413][ T5435] ? mas_prealloc_calc+0x253/0x2a0 [ 73.237442][ T5435] ? mas_store+0x42b/0x5b0 [ 73.237477][ T5435] dup_mmap+0x874/0x10c0 [ 73.237499][ T5435] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 73.237531][ T5435] ? __list_add_valid_or_report+0x38/0xe0 [ 73.237564][ T5435] copy_mm+0xfa/0x340 [ 73.237588][ T5435] copy_process+0x10ad/0x2340 [ 73.237617][ T5435] kernel_clone+0x1c0/0x5f0 [ 73.237644][ T5435] __x64_sys_clone+0x143/0x180 [ 73.237674][ T5435] x64_sys_call+0x2479/0x2550 [ 73.237699][ T5435] do_syscall_64+0x112/0x360 [ 73.237732][ T5435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.237754][ T5435] RIP: 0033:0x7fd8cbe2e159 [ 73.237770][ T5435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.237791][ T5435] RSP: 002b:00007fd8ca886fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 73.237813][ T5435] RAX: ffffffffffffffda RBX: 00007fd8cc0b5fa0 RCX: 00007fd8cbe2e159 [ 73.237827][ T5435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000411 [ 73.237841][ T5435] RBP: 00007fd8ca887090 R08: 0000000000000000 R09: 0000000000000000 [ 73.237854][ T5435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 73.237867][ T5435] R13: 00007fd8cc0b6038 R14: 00007fd8cc0b5fa0 R15: 00007ffd4196f6c8 [ 73.237886][ T5435] [ 73.284964][ T4006] hsr_slave_0: left promiscuous mode [ 73.293968][ T4006] hsr_slave_1: left promiscuous mode [ 73.294384][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.294398][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.299345][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.299360][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.313954][ T4006] veth1_macvtap: left promiscuous mode [ 73.313981][ T4006] veth0_macvtap: left promiscuous mode [ 73.314086][ T4006] veth1_vlan: left promiscuous mode [ 73.314151][ T4006] veth0_vlan: left promiscuous mode [ 73.334514][ T29] audit: type=1326 audit(1788298196.012:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.338519][ T29] audit: type=1326 audit(1788298196.012:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.338683][ T29] audit: type=1326 audit(1788298196.012:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.344725][ T29] audit: type=1326 audit(1788298196.022:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.347832][ T29] audit: type=1326 audit(1788298196.022:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.348184][ T29] audit: type=1326 audit(1788298196.022:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.348212][ T29] audit: type=1326 audit(1788298196.022:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.348285][ T29] audit: type=1326 audit(1788298196.022:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.8.384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbe2e159 code=0x7ffc0000 [ 73.350753][ T5444] vhci_hcd vhci_hcd.3: invalid port number 236 [ 73.350773][ T5444] vhci_hcd vhci_hcd.3: invalid port number 236 [ 73.623169][ T4006] team0 (unregistering): Port device team_slave_1 removed [ 73.680209][ T4006] team0 (unregistering): Port device team_slave_0 removed [ 73.685349][ T5461] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.728689][ T5461] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.387: corrupted in-inode xattr: e_value size too large [ 73.728757][ T5461] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.728920][ T5461] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.387: couldn't read orphan inode 15 (err -117) [ 73.728948][ T5461] loop7: lost filesystem error report for type 5 error -117 [ 73.743623][ T5461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.773468][ T5461] xt_CONNSECMARK: invalid mode: 0 [ 73.836582][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 73.956680][ T4659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.973544][ T5466] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.011948][ T5466] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.388: Failed to acquire dquot type 1 [ 74.011977][ T5466] loop1: lost filesystem error report for type 5 error -117 [ 74.013795][ T5466] EXT4-fs (loop1): 1 truncate cleaned up [ 74.014299][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 74.145235][ T5488] set_capacity_and_notify: 4 callbacks suppressed [ 74.145267][ T5488] loop7: detected capacity change from 0 to 2048 [ 74.145688][ T5488] EXT4-fs: quotafile must be on filesystem root [ 74.177299][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 74.225525][ T5488] loop7: detected capacity change from 0 to 128 [ 74.238119][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.238161][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.238223][ T5401] bridge_slave_0: entered allmulticast mode [ 74.238765][ T5401] bridge_slave_0: entered promiscuous mode [ 74.240179][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.240210][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.240263][ T5401] bridge_slave_1: entered allmulticast mode [ 74.240713][ T5401] bridge_slave_1: entered promiscuous mode [ 74.251860][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.253150][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.263932][ T5401] team0: Port device team_slave_0 added [ 74.264791][ T5401] team0: Port device team_slave_1 added [ 74.276778][ T5488] syz.7.389: attempt to access beyond end of device [ 74.276778][ T5488] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 74.277101][ T5488] syz.7.389: attempt to access beyond end of device [ 74.277101][ T5488] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 74.277551][ T5488] syz.7.389: attempt to access beyond end of device [ 74.277551][ T5488] loop7: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 74.277577][ T5488] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 74.277633][ T5488] syz.7.389: attempt to access beyond end of device [ 74.277633][ T5488] loop7: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 74.277656][ T5488] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 74.277979][ T5488] syz.7.389: attempt to access beyond end of device [ 74.277979][ T5488] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 74.278668][ T5488] syz.7.389: attempt to access beyond end of device [ 74.278668][ T5488] loop7: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 74.278698][ T5488] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 74.278717][ T5488] syz.7.389: attempt to access beyond end of device [ 74.278717][ T5488] loop7: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 74.278780][ T5488] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 74.278823][ T5488] syz.7.389: attempt to access beyond end of device [ 74.278823][ T5488] loop7: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 74.279431][ T5488] syz.7.389: attempt to access beyond end of device [ 74.279431][ T5488] loop7: rw=2049, sector=218, nr_sectors = 6 limit=128 [ 74.279751][ T5488] syz.7.389: attempt to access beyond end of device [ 74.279751][ T5488] loop7: rw=8390657, sector=222, nr_sectors = 2 limit=128 [ 74.279802][ T5488] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 74.279820][ T5488] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 74.281450][ T5488] Buffer I/O error on dev loop7, logical block 115, lost async page write [ 74.281477][ T5488] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 74.283629][ T5488] Buffer I/O error on dev loop7, logical block 87, lost async page write [ 74.283692][ T5488] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 74.297972][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.298000][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.298071][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.302207][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.302220][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.302316][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.352068][ T5503] loop1: detected capacity change from 0 to 512 [ 74.411371][ T5401] hsr_slave_0: entered promiscuous mode [ 74.422238][ T5401] hsr_slave_1: entered promiscuous mode [ 74.825777][ T5401] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 74.846881][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.850249][ T5401] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 74.861584][ T5480] loop8: detected capacity change from 0 to 136 [ 75.017745][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.021600][ T5401] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 75.029964][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.030483][ T5401] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 75.034293][ T5401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.076865][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.076924][ T5401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.077085][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.077119][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.217579][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.229242][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.241488][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.267923][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.277396][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.277443][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.284844][ T3995] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.284876][ T3995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.374903][ T5568] loop7: detected capacity change from 0 to 512 [ 75.376761][ T5568] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.400493][ T5568] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.399: corrupted in-inode xattr: e_value size too large [ 75.400530][ T5568] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.405532][ T5568] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.399: couldn't read orphan inode 15 (err -117) [ 75.405570][ T5568] loop7: lost filesystem error report for type 5 error -117 [ 75.415695][ T5568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.433887][ T5568] xt_CONNSECMARK: invalid mode: 0 [ 75.595198][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.740815][ T4659] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.937851][ T5401] veth0_vlan: entered promiscuous mode [ 75.944368][ T5401] veth1_vlan: entered promiscuous mode [ 75.973764][ T5401] veth0_macvtap: entered promiscuous mode [ 75.978301][ T5401] veth1_macvtap: entered promiscuous mode [ 76.030182][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.052680][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.079634][ T364] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079694][ T364] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079777][ T364] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079812][ T364] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.318927][ T5609] ================================================================== [ 76.318962][ T5609] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 76.319000][ T5609] [ 76.319007][ T5609] write to 0xffffea0004c27e98 of 8 bytes by task 5453 on cpu 1: [ 76.319024][ T5609] __filemap_remove_folio+0x201/0x2e0 [ 76.319055][ T5609] filemap_remove_folio+0x6d/0x1d0 [ 76.319085][ T5609] truncate_inode_folio+0x42/0x50 [ 76.319111][ T5609] shmem_undo_range+0x27f/0xb60 [ 76.319136][ T5609] shmem_evict_inode+0x12d/0x580 [ 76.319171][ T5609] evict+0x2a5/0x510 [ 76.319194][ T5609] iput+0x430/0x5a0 [ 76.319210][ T5609] dentry_unlink_inode+0x24a/0x260 [ 76.319236][ T5609] dentry_kill+0x184/0x500 [ 76.319262][ T5609] finish_dput+0x16/0x1d0 [ 76.319280][ T5609] dput+0x48/0x50 [ 76.319296][ T5609] __fput+0x43e/0x630 [ 76.319313][ T5609] ____fput+0x1c/0x30 [ 76.319335][ T5609] task_work_run+0x130/0x1a0 [ 76.319358][ T5609] do_exit+0x4a4/0x1510 [ 76.319383][ T5609] do_group_exit+0xfe/0x140 [ 76.319409][ T5609] get_signal+0xe07/0xf10 [ 76.319440][ T5609] arch_do_signal_or_restart+0x96/0x480 [ 76.319471][ T5609] irqentry_exit+0x14d/0x610 [ 76.319491][ T5609] asm_exc_page_fault+0x26/0x30 [ 76.319510][ T5609] [ 76.319515][ T5609] read to 0xffffea0004c27e98 of 8 bytes by task 5609 on cpu 0: [ 76.319531][ T5609] folio_mapping+0xa1/0xe0 [ 76.319551][ T5609] move_folios_to_lru+0x227/0x810 [ 76.319572][ T5609] evict_folios+0x245c/0x2830 [ 76.319590][ T5609] try_to_shrink_lruvec+0x8fd/0xb30 [ 76.319610][ T5609] shrink_lruvec+0x252/0x1d40 [ 76.319638][ T5609] shrink_node+0x67c/0x2000 [ 76.319657][ T5609] do_try_to_free_pages+0x408/0xca0 [ 76.319684][ T5609] try_to_free_mem_cgroup_pages+0x201/0x420 [ 76.319712][ T5609] mem_cgroup_force_empty_write+0x77/0x100 [ 76.319736][ T5609] cgroup_file_write+0x197/0x350 [ 76.319763][ T5609] kernfs_fop_write_iter+0x1d2/0x2e0 [ 76.319783][ T5609] vfs_write+0x57f/0x9a0 [ 76.319806][ T5609] ksys_write+0xdc/0x1a0 [ 76.319830][ T5609] __x64_sys_write+0x40/0x50 [ 76.319856][ T5609] x64_sys_call+0x154e/0x2550 [ 76.319881][ T5609] do_syscall_64+0x112/0x360 [ 76.319906][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.319926][ T5609] [ 76.319930][ T5609] value changed: 0xffff88811a87d238 -> 0x0000000000000000 [ 76.319942][ T5609] [ 76.319946][ T5609] Reported by Kernel Concurrency Sanitizer on: [ 76.319956][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.7.402 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.319980][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.319992][ T5609] ================================================================== [ 76.631446][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.631601][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.699367][ T5623] loop8: detected capacity change from 0 to 8192 [ 76.723084][ T5630] netlink: 24 bytes leftover after parsing attributes in process `syz.8.405'. [ 76.793138][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 76.915977][ T5634] FAULT_INJECTION: forcing a failure. [ 76.915977][ T5634] name failslab, interval 1, probability 0, space 0, times 0 [ 76.916012][ T5634] CPU: 1 UID: 0 PID: 5634 Comm: syz.7.402 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.916092][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.916108][ T5634] Call Trace: [ 76.916124][ T5634] [ 76.916132][ T5634] __dump_stack+0x1d/0x30 [ 76.916156][ T5634] dump_stack_lvl+0x95/0xd0 [ 76.916187][ T5634] dump_stack+0x15/0x1b [ 76.916293][ T5634] should_fail_ex+0x262/0x280 [ 76.916313][ T5634] ? hugetlbfs_fill_super+0x4c/0x400 [ 76.916339][ T5634] should_failslab+0x8c/0xb0 [ 76.916369][ T5634] __kmalloc_cache_noprof+0x7a/0x400 [ 76.916399][ T5634] ? hugetlbfs_fill_super+0x4c/0x400 [ 76.916470][ T5634] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 76.916493][ T5634] hugetlbfs_fill_super+0x4c/0x400 [ 76.916520][ T5634] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 76.916542][ T5634] get_tree_nodev+0x83/0x100 [ 76.916604][ T5634] hugetlbfs_get_tree+0x1c3/0x1f0 [ 76.916668][ T5634] vfs_get_tree+0x57/0x1d0 [ 76.916693][ T5634] vfs_cmd_create+0x8a/0x140 [ 76.916778][ T5634] vfs_fsconfig_locked+0x6f/0x210 [ 76.916808][ T5634] __se_sys_fsconfig+0x671/0x7e0 [ 76.916839][ T5634] __x64_sys_fsconfig+0x67/0x80 [ 76.916863][ T5634] x64_sys_call+0xaa0/0x2550 [ 76.916955][ T5634] do_syscall_64+0x112/0x360 [ 76.916988][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.917016][ T5634] RIP: 0033:0x7fc0ce2ce159 [ 76.917036][ T5634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.917055][ T5634] RSP: 002b:00007fc0ccd06028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 76.917125][ T5634] RAX: ffffffffffffffda RBX: 00007fc0ce556090 RCX: 00007fc0ce2ce159 [ 76.917141][ T5634] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 76.917153][ T5634] RBP: 00007fc0ce365024 R08: 0000000000000000 R09: 0000000000000000 [ 76.917216][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.917232][ T5634] R13: 00007fc0ce556128 R14: 00007fc0ce556090 R15: 00007ffce296eda8 [ 76.917276][ T5634] [ 77.409040][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 77.532590][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 81.221543][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 81.221564][ T29] audit: type=1400 audit(1788298203.892:1560): avc: denied { write } for pid=5671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.273167][ T29] audit: type=1400 audit(1788298203.942:1561): avc: denied { write } for pid=5682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.373941][ T29] audit: type=1400 audit(1788298204.042:1562): avc: denied { write } for pid=5685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.414866][ T29] audit: type=1400 audit(1788298204.082:1563): avc: denied { write } for pid=5696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.689590][ T29] audit: type=1400 audit(1788298204.352:1564): avc: denied { write } for pid=5699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.735478][ T29] audit: type=1400 audit(1788298204.402:1565): avc: denied { write } for pid=5710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.289144][ T29] audit: type=1400 audit(1788298204.952:1566): avc: denied { write } for pid=5713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.330731][ T29] audit: type=1400 audit(1788298205.002:1567): avc: denied { write } for pid=5724 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1