last executing test programs: 4m57.258146251s ago: executing program 32 (id=2053): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=@delchain={0x1b4, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff1, 0xb}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xa9f}, @filter_kind_options=@f_u32={{0x8}, {0x178, 0x2, [@TCA_U32_SEL={0x174, 0x5, {0x1, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2, [{0x7, 0x7, 0x1, 0x9}, {0xfffffffc, 0x7f, 0x10001, 0x7}, {0x4, 0x9, 0x6b40, 0x51f4}, {0x3, 0x1, 0x7, 0x4940}, {0x0, 0xff, 0x12cd, 0xfdcd}, {0x7, 0x3, 0x6, 0x2}, {0xffffffc0, 0x6, 0x0, 0x7d}, {0x1, 0x0, 0xd, 0xfdba}, {0x3e, 0xc0, 0x3, 0x5f}, {0x210000, 0x5b98, 0x6, 0x2}, {0x5, 0x400, 0x7, 0x2000009}, {0x1, 0x3, 0x8, 0x7}, {0x0, 0x7f, 0xfffffffd}, {0x2, 0x6, 0x100, 0x3}, {0x7, 0x0, 0xdac1, 0x2}, {0x8, 0x3, 0x8001, 0x3}, {0x2, 0x6, 0x5, 0x401}, {0x0, 0x0, 0x0, 0xf}, {0x4, 0x400, 0x3, 0x5}, {0x2, 0x7, 0x45, 0x6}, {0x2, 0x3, 0xffff, 0x8}, {0x80000000, 0x3, 0x400, 0x7}]}}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200008b4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x81100) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x257}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1750}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7:'], 0xb8) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r13, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x18}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x4}, 0x0, 0x0, 0x118, 0x9, 0x100000001, 0x48, 0x2, 0x2}}], 0x88, 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m9.508022449s ago: executing program 33 (id=2815): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x8c, 0x1) 2m22.346495523s ago: executing program 1 (id=3219): r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x0, &(0x7f0000000700), &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r0], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) connect$unix(r4, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01010000000000000000020000000900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x80000, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000)=0x100006, 0x4) sendmmsg$unix(r6, &(0x7f0000000e80), 0x0, 0x4044000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 2m22.317628724s ago: executing program 1 (id=3221): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x5, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x45, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="140000001d", 0x5}], 0x1, 0x0, 0x0, 0x7400}, 0xd0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000100)=0x8, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) 2m20.788007651s ago: executing program 1 (id=3227): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="4ff0a058f58ae33c01d238801a6694c97bd35774ae2d078c64a4c0701647cd9f081d678512f7b926a9a06803e7f7da5f0d3b242177b442a2e96d50afa3d4811a88a30ff0b930b373005b65815494c1c99cd1474cf72cdedb3529d9628d8a604022700bcbcd500fc196a519336ec51e51f5927e50911c12a18565d5ac8486a07e75fb71b31d32c1b3f6d2fc237c24669c3421475826b1a362580b0175b1c1895737c28090263e8fd93a92c0a4c5dc8dc8d066befc2db4af4ae49eef5882a8c2e5ae00e5833d9c4eb66a812bce9d29f4bcb666a31051da94b5a0c41769255df3af9a705dc8f69e0acfaa94053cba5b6936eaf9146b753f2f3dedd6db50df55d0cb0006052e48e85a3c486cb39f7e5ffc2479ae658211f6d31ca6a0e8ea6d75b22157ef4d4626f8dfe706b834b6c88c40c5a8a68a8f8836b36d2fb9357533ff42507a991ffa56a7632463dba65b862b36f3bd810719c0514430f433e05660fb76f96866e0b4f73c42b615b9e09cd3b8b2d34cfdeaaaef9be4e5c5e68bd619253a1a070b27ea0d805bfd512a83f8f58832cd94e3ac9e3d867759e897f5a179c7da3cb76a832236c25a3a5d926f462eebfa30e8ea08f4152d03c0b2b866295052ec6a78ba469689df573f59a093f70026cfb5df745b8620c3846515e50708d483797cbdca4457688ebd4b750d38c1f8a58d084a63896441d8c83f63d216ca95a156ea7e728f200728e171851a1d7da4ec6ef6ea1f5db9d8252f2717c5327f195ca69531a87c0236e55ae08ba28eaac5eda5ac0924f9711f57ec8b42e3bab1fd9631cf2e4f1c9710d106961b82c13227df311614667fb2c49431148476ca5073522586e45ddafda3a38d45022db3fbbdf5c5f2ccbfda8fe1fec8a65ad529f6e3a158baf1b483fda2a9c18d852dea73cef48547562b2c9f9e4f22446aa1d927cd77a2ba71a4d366cef1f978b44d1849353b91770efeb67a4e159d906437f5fdd18f2c1da0f3b6d64424ee9a66cbebd5ef6fa4e1fcf70bd7b39c81dca42f4c187da0a545b1502779b9e2777b381209832c3a20ae9e05226a090bf015577783e98282fcc5cbcaf3afa2d1b203d12477dca6226926513c6ebdd4b772c5107472a02667d11df6cfa29a5527dc9aa84293cfa90d195cfcd4b8cedcca9afba5a20bb308b99c3f1c67edf00f2927961f4720740d66cc1cc943bb91d73f0ef36cf6d2a188f7ab311d1a94c79b1ed17a81381648af6f769f344adfecf476bf34e6ea1720706f171de119060188c1e5cf5e8f8bf183236600607c430b335517f147bba21d72114400e0752683460174851f11fd6052036b5f3c79bd93b71321eeab95a47945ac34f9ddeeb2adb790cbb34944d3c8b58363781a8b9ea6722909b381f1a104fb2a8aaced24e119570e99d207282742a0af6e39285eef65ff303b5f122eb3834a0776d7182127592d63464ea8c6bdb2d57db2e5b0d3bf09dda69164bc374ec82f938de1e198d3f89c2cf6cb65a46b73c6f61db1915256c35eda8df17fb04b6752238ad72641", 0x442}], 0x1}, 0x4048081) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0xbb84, 0x1c080, 0xa, 0x20082f5}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x7fff, 0x0, 0x0, 0x1e00, 0x3b, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4040) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m20.554468868s ago: executing program 1 (id=3228): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1040e0, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000580)="10243fd6540964f5a4f7346b4ef43098f72dbdd0a9b8c1aa0ccdfffa08c092a14ed2c4e8213104b40c2068ae28a32efa2af8db83159ea4e7dd965516676f15bcbe4e78da52bfd37b3bf14c7a981b03ed7881c25d2fee262120e43af1036758f29a834637a9e1eb70e891f1e82b813254027c94f5d0db", 0x76}], 0x1, 0x5000, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x68, r4, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40810}, 0x40041) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4201) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) 2m18.904762409s ago: executing program 1 (id=3233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x10000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x10000004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0x9a, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x6, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x53}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0xca0b, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000003, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0xddce, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x964, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x3}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0xfff, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x9, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x800000a, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 2m18.442408633s ago: executing program 1 (id=3236): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x5}}, './file0\x00'}) sendmsg$kcm(r0, 0x0, 0x4008804) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e20, 0x3, 'wlc\x00', 0x3, 0xa7e, 0x100070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'wlc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf251b00000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xa208085}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x38, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x800) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) syz_open_dev$evdev(&(0x7f0000000340), 0x2ee8, 0x11d081) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r10, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600), 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 2m18.435510303s ago: executing program 34 (id=3236): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x5}}, './file0\x00'}) sendmsg$kcm(r0, 0x0, 0x4008804) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e20, 0x3, 'wlc\x00', 0x3, 0xa7e, 0x100070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'wlc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf251b00000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xa208085}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x38, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x800) r9 = socket(0x2, 0x80805, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) syz_open_dev$evdev(&(0x7f0000000340), 0x2ee8, 0x11d081) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r10, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600), 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 2m12.110372647s ago: executing program 6 (id=3293): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmmsg(r0, 0x0, 0x0, 0x3000c06c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000000180)}], 0x1, 0x1) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000002010300000000000000005e00050000052000028014000180080001006401010008000200e00000020600034000000000060012"], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x8850) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x3, 0x6, 0x1, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x884}, 0x8010) sendmmsg$inet(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}], 0x1, 0x2090) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 2m10.36302648s ago: executing program 6 (id=3307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m10.306681272s ago: executing program 6 (id=3308): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000c80)={[{@name={'name', 0x3d, 'lox-/\xd6\x8cb\x00'}}]}) 2m10.269532143s ago: executing program 6 (id=3311): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0xfffffffd}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000900)={&(0x7f00000000c0)=0x4, 0x800000, &(0x7f00000005c0)=[{}, {}, {}, {}], &(0x7f00000008c0)}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000002000)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x25c, &(0x7f0000002500)="$eJzs3T9rU1EYB+DXNGlCFzuLwwUXp6JOrkEqiAEhkkEnA9UlFeF2iU75GH4CBz+SH6NTcTliT2zaGkWk8dh7nwfCfeGXP+/JhXsynJP76vbb2cG7ozfpy8cYDKroRixSitiNTmxFdmN57JzW23HeIgCA62Y8ng5L98Df+/QHz6nr4bQXEf2fksnnjTQFAAAAAAAAAADAxq1b/x8n1v8DQJNZ/998dT2c7ix/v11k/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQzklKN9NvHqX7AwCunvkfANrH/A8A7WP+B4D2ef7i5dPhaLQ/rqpBxPFiPplP8jHnj5+M9u9Vp3ZXrzqezydbZ/n9nFcX817sLPMHa/PtuHsn59+zR89Gl/J+HGx++AAAAAAAAAAAAAAAAAAAAPBf2KvOrN3fv9ePX+S5Ovf/AJf273fjVvefDQMAAAAAAAAAAAAAAAAAAACutaP3H2bTw8PXdania8oKtzHrR7lP7y1PxhW9YTws/WUWKaLgGWxg8eMK0Sl3cQIAAAAAAAAAAAAAAAAAgJZZbfot3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlLO6///miohYpKz0cAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG+xYAAP//Wv2bkg==") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c2a8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x480) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18d8c3, 0x14c) ftruncate(r1, 0x200004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.102140428s ago: executing program 6 (id=3313): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x1, 0x7ff, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b25090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516259e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xb, &(0x7f0000000180)=0x0) io_getevents(r4, 0x1, 0x0, 0x0, 0x0) (async) io_getevents(r4, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018114000180080001000000000008000200e00000010c0002800500010000000000240002800c0002800500010000000000140001800800011e1efc0108000740000000000c0018800800014000000007"], 0x70}}, 0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) 2m9.766389838s ago: executing program 6 (id=3322): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) openat$autofs(0xffffffffffffff9c, 0x0, 0xa4040, 0x0) 2m9.766216318s ago: executing program 35 (id=3322): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) openat$autofs(0xffffffffffffff9c, 0x0, 0xa4040, 0x0) 1m43.493013983s ago: executing program 0 (id=3494): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000380)=0x61, 0x2) (async) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000f80)={'erspan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @random="3d8da5a41dcb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @private=0xa010100, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) (rerun: 64) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000600)) r4 = getuid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000140)={[], [{@fowner_eq={'fowner', 0x3d, r4}}, {@flag='silent'}]}, 0x1, 0x523, &(0x7f0000000bc0)="$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") syz_open_dev$usbfs(0x0, 0x204, 0x82) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) setreuid(0x0, 0xee01) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x16, 0x0, 0x0) (async) ioctl$FITRIM(r5, 0xc0185879, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) (rerun: 64) 1m43.174567042s ago: executing program 0 (id=3495): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 1m43.173895892s ago: executing program 0 (id=3496): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x420, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000001380)={[{@block_validity}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@orlov}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@inlinecrypt}, {@data_ordered}]}, 0x3, 0x57b, &(0x7f0000001440)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x8c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) tee(r3, r4, 0x9, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000", 0x17}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5a59, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001fc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f80)={&(0x7f0000001b40)={0x418, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0xcb, 0x3, "f3c11b9afe6cc724d2fa0e7f469ccecfe7f1ad96da34180e076c821d8c56f3c67d4a695229b90bf4d2120f4f96c2c3eda549c8b9937e76fbb08f908115ebbacfe864fe4f49cc36b8ee2e37799f62bcb22aff218bda316f8c11d5be7b2036c8f431c45ae67cbc5b0ccaa3775c936e43ae6cfeab8e82a002d2699154af8d83fb838f810d1d950c53fa3ae843113387c83833dd6fb62f85c17fa97f02616bbc4bbf1f2aa224bb8afa5590d80d4e78279ad33aa4232ba3ac050320f51173cdb4ea3fd7cb51333fa3be"}, @ETHTOOL_A_WOL_SOPASS={0x68, 0x3, "db8e481e66474b3626e6f8fe86c9f7473e2cf1e2d8f60abe2dc1b6de44cc25aa1d4baed5eacfd9331a7ec69cdc6eab04b5228fa699adec64156a43309a17bb5680186861c796616e4dc99de094c074f0ed95c85c6cb98e127b74a7e4a544abc4e1d1c09a"}, @ETHTOOL_A_WOL_MODES={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "0db6be8046839dae5110f4b55dc8e832ea780e24990080bc6ca827f3ca2240ca236aaa451fd4d5abaa91461f1c30489e3afdb0f6183670ba4f9f5c7c4312111f135eea91a8da4dd65fa528e7aedcf7569bed990f427795917de28090e936a30d529e858e8385c51e38f914f538b1a124ef92844fdb646225d23e7ccb554ece433d6b7037570d76c222defe5aa35876ef3bec7d136723603b2537"}, @ETHTOOL_A_BITSET_MASK={0x7, 0x5, "5027e9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "f53ad3e76aa5d2816d7eaec2be2e5c684dafef7719b1ee74dffe74a718c982164f41886dc79e5504a5a8e362fc7d813b2422397eaf0373"}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0xdd, 0x3, "6523aef8fb156d6e0e3fb7fdd079fdc2c3b193239da1dce2d84135771a86c867a1882d32095a24eca88865077aadcc2f6b3e2fe15a2bd600810ecff929918dfd1e8480ab10b15d1b8e5cd69b2e9328aa9e506b3b57b85fcbf0e9bb4c77971e1645d0b3821282422958a0549139b6e2f171c7c10373862a08011e19290c9532fcd2eb30bef02e39743436db617ee8e708b3627fe1485417c3d160fab1810c96526524b2cdb909d8d6f2793afd37cdaa624336c882688dddd7e23f9f5e301c09dcc2fb07e9364f7554d55f21539552a9e9144eaefbaf0cbc5d8c"}, @ETHTOOL_A_WOL_SOPASS={0xd2, 0x3, "04e2981cbbb6f86125a79e9af5c36773c8254544f5f989f654e0c6da5b7485a3b9b2ebf32ef09f82799f6a21ad7fba5b1055cce2363f7ab12bfedc8e8a8e22e89fa0ca8fed64261327a687302e828a1433b8daae6b24080dae02de29c276086dd461ee1b2de49c48e74f0a49de80e30f4d7be1c30999521cb2d74e6981df74252bd38a2ab4fa9900c4d4196efa8b6ed3ea01ea4dba8da1f95687b7fd192f6ed4e94ea5ff986964c860c80de3a0c66029c5e4d1145a7e5372d970f0f9ddcab9b9f97ef67f576a087c615f4bca84a0"}]}, 0x418}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) close_range(r0, 0xffffffffffffffff, 0x0) 1m42.494191403s ago: executing program 0 (id=3502): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1040e0, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000580)="10243fd6540964f5a4f7346b4ef43098f72dbdd0a9b8c1aa0ccdfffa08c092a14ed2c4e8213104b40c2068ae28a32efa2af8db83159ea4e7dd965516676f15bcbe4e78da52bfd37b3bf14c7a981b03ed7881c25d2fee262120e43af1036758f29a834637a9e1eb70e891f1e82b813254027c94f5d0db", 0x76}], 0x1, 0x5000, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) creat(&(0x7f0000000340)='./file0\x00', 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4201) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0) 1m41.881495392s ago: executing program 0 (id=3506): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x80) 1m41.659280368s ago: executing program 4 (id=3511): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0xc00, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f8482a0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) 1m41.576687271s ago: executing program 4 (id=3512): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000"], 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x900, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 1m41.508632533s ago: executing program 4 (id=3514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a50100000100000004"], 0x18) sendmmsg$inet6(r1, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {}, {@dev={0xac, 0x14, 0x14, 0x13}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1m41.508361703s ago: executing program 0 (id=3515): fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14) 1m41.507949443s ago: executing program 4 (id=3516): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1040e0, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000580)="10243fd6540964f5a4f7346b4ef43098f72dbdd0a9b8c1aa0ccdfffa08c092a14ed2c4e8213104b40c2068ae28a32efa2af8db83159ea4e7dd965516676f15bcbe4e78da52bfd37b3bf14c7a981b03ed7881c25d2fee262120e43af1036758f29a834637a9e1eb70e891f1e82b813254027c94f5d0db", 0x76}], 0x1, 0x5000, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4201) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0) 1m41.461420394s ago: executing program 36 (id=3515): fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000036c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x14) 1m41.380386417s ago: executing program 4 (id=3518): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="34000100", @ANYRES32, @ANYBLOB="200029bdb841fcffffff14df46cb0b86be00d9ffd676fc09a6ea00000018cd4cc70a6668cd8cb7000ef5140002006e657464657673696d30"], 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r1, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x5, 0x0) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast1, @mcast2, 0x1, 0x20, 0x1, 0x4}}) 1m41.084315356s ago: executing program 4 (id=3519): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}], 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe008004500005800000000002f9078ac1414bbac1414bbb480892f00"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) r2 = getegid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001cb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0, 0x0, 0x72, 0x0, 0x2}) r6 = getgid() setgroups(0x6, &(0x7f00000002c0)=[0xee00, r2, 0xee00, r3, r4, r6]) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) close(0x3) socket$netlink(0x10, 0x3, 0x2) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000100)=0x1010, 0x10001) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) syz_open_dev$MSR(0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010000}, 0x11) socket$nl_route(0x10, 0x3, 0x0) 1m41.055125607s ago: executing program 37 (id=3519): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}], 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe008004500005800000000002f9078ac1414bbac1414bbb480892f00"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) r2 = getegid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001cb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x0, 0x9}], 0x1, 0x0, 0x0, 0x72, 0x0, 0x2}) r6 = getgid() setgroups(0x6, &(0x7f00000002c0)=[0xee00, r2, 0xee00, r3, r4, r6]) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) close(0x3) socket$netlink(0x10, 0x3, 0x2) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000100)=0x1010, 0x10001) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) syz_open_dev$MSR(0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010000}, 0x11) socket$nl_route(0x10, 0x3, 0x0) 1m25.426438156s ago: executing program 7 (id=3580): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1100e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x7fc, &(0x7f0000000840)="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", 0x54, 0xe, 0x5, 0xf4, 0x1, 0x0, 0x2b69e42f, 'syz1\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, 0x0) (async, rerun: 32) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) (rerun: 32) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000001900)={0x7, 0x7f, 0x1}, 0x7) (async) lseek(r3, 0x2004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) pwritev(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)="c3", 0x1}], 0x1, 0xb3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) (async) io_uring_enter(r5, 0x2219, 0xdf58, 0x54, 0x0, 0x0) 1m25.425899125s ago: executing program 7 (id=3582): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000091114900000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x0) pwrite64(r3, 0x0, 0x0, 0x401) socket(0x840000000002, 0x3, 0xfa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x30, 0x660f53fe, 0x6f}, 0x2c) 1m25.379742637s ago: executing program 7 (id=3584): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xb, 0x1}}}, 0x24}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80540, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="d8090000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf251d000000c4001f009f2813c3272692be1bcf53baa675e88039a1724f09ce857ceb7e7d1e300ba475e9abcd2c454e593cc021cd56d7e88b8f4c9ccef839bbda46123ecf9d0f737abb00491d1b0d36f8092114c3d0553692ecb436ceb599455bf71e5772ef6b2ebc802625933d85918469efdd74ece64de7544168ad49bf04945faf3a1978bfb5f3d9834bba0809423487c642121d1a3d8c750d0a088303db47164177fcfce6573768ef6f8adf4159cccce9e5aedcc5a2bd30cee63a139403bed5f2e42a5a28131dae"], 0xd8}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0441, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYBLOB="000009005511da4a5d84aaaaaaaaaaaaffffffffffff00001fe00000aaaaaaaaaaaaffffffffffffaaaaaaaaaa0a00000000000001"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') sendfile(r8, r8, 0x0, 0x80000000) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r9, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000090603000000000000000000050000400900020073797a3100000000050001008700000024000780060004404e2100000c00018008000140e00040000c00148008000140ffffffff8dbb843b7861262c19ab0fb4a4a52cbcf81cf561cb0548a300dbdddfed046c34f7e0a8622c04cee778c833f6f80a808af7fc362fe899881069a014"], 0x4c}}, 0x884) 1m23.337353249s ago: executing program 7 (id=3598): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1040e0, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000080)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4201) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1m22.119210787s ago: executing program 7 (id=3599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfdfbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) memfd_create(0x0, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = io_uring_setup(0x6c0, &(0x7f0000000140)={0x0, 0x9e1c, 0x800, 0x0, 0x273}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r6, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x30, 0xffffffffffffffff, 0xffffd000) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@dellink={0x20, 0x11, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x2100}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000780)={0x2, 'lo\x00', 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) 1m21.542164994s ago: executing program 7 (id=3609): perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1368e29a8a9b9774, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x7, 0x2}, 0x10000d, 0x9, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x9, 0x0, 0x401}, 0x0, 0x800000002, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000000000000b00"], 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={r2, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x0}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m21.541982694s ago: executing program 38 (id=3609): perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1368e29a8a9b9774, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x7, 0x2}, 0x10000d, 0x9, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x9, 0x0, 0x401}, 0x0, 0x800000002, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000000000000b00"], 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={r2, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x0}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 18.355974469s ago: executing program 5 (id=4084): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0453a1810141fa2a1f00010000000000000e002e000f00c5e2743c16d80000", 0x2e}], 0x1}, 0x20000010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0xc0, 0xfffffffffffffffe}, 0x824, 0x1224, 0x0, 0x5, 0x7d6f, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) fcntl$setpipe(r0, 0x407, 0x7000000) 17.834440605s ago: executing program 5 (id=4087): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xf099, 0x1}, 0x2, 0x100, 0x820000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0x1, 0x25e, &(0x7f0000000a80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8042, 0x84) fallocate(r3, 0x3, 0x800, 0x8000c67) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team_slave_0\x00'}) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000100)='\'}\x00', &(0x7f0000000200)='}\x00', &(0x7f0000000300)='l-\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)='}\x00']}, &(0x7f0000000580)={[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000540)='security.capability\x00']}, 0x1000) 16.862318004s ago: executing program 5 (id=4099): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000e40), 0x0, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x3b) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 14.636726323s ago: executing program 5 (id=4108): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001000)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010101, @in=@multicast1, 0x1, 0x0, 0x4e23, 0x25, 0x2, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x4d3, 0x6c}, @in6=@local, {0x0, 0x192, 0x6, 0xd, 0xc1, 0x2, 0xfffffffffffffff8, 0x10}, {0xffffffffffffffff, 0x400000000000004, 0x1f, 0x78}, {0x2, 0x5}, 0x4070bd2a, 0x3503, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256-neon)\x00'}, 0x0, 0x200}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4c801}, 0x8000) msgget$private(0x0, 0x7ac) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084) 14.497744027s ago: executing program 5 (id=4110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000002300)=0x0) timer_settime(r1, 0x1, &(0x7f0000002340)={{0x0, 0x989680}, {0x77359400}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mq_notify(r2, &(0x7f00000002c0)={0x0, 0x3, 0x4, @thr={&(0x7f0000000080)="fdcc1b62c76ebfb267531b5ec650903f8737e272093e52ec2b377eecbfdbe360237fffe255eab861bef533f671259df3200a116f786e110a9ef4910424bd18c9a16f6c424729b0891110119b57073bdeab03438243f4c15c424dfd976d674705def481155cb79aace1fd6549bb267a3e9fe1f609f0b24bc36d7cb309ee35", &(0x7f0000000200)="700ed306c3674ced385a2f43d90f521f61f2c035312e9b5f4357327cc89954e7c4878e2c629643e9055e474f0d11b107cf5cb5a37996d66ac4847d2eaef18f2270137290b47981828a3eb2522f947b99b0d3db158cc41f1ea3e8e791530f68c15f6ab514bbe51a396e8b9c4924ee35b495b44f28616609a670ae5b03409e59de41a7817ded1efc2d54b64c028bb85dc7e18bb0c96a20f28c8d46c4a7db3263689eb61e057686ea42ee290c22a9af84879f0f853a0beadb5a"}}) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r3, &(0x7f0000000100)="ae37", 0x2) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000002440)={{0x0, 0x989680}, {0x77359400}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000000) 14.319070012s ago: executing program 5 (id=4111): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.795801464s ago: executing program 3 (id=4201): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) shmget(0x0, 0x4000, 0x20, &(0x7f0000c60000/0x4000)=nil) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec040000002ffffe800000000088fc70738daf7b3200aaff0200"], 0xfdef) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r5, 0x333, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x3be2b02884f95c63}]) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x6, 0x9b, 0x7f, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0xc0000000, 0x1}, 0x100, 0x80, 0x4, 0x6, 0xd0, 0x400, 0xb, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x6}, 0x4, 0x9, 0x11000, 0x8, 0x2, 0x90000011, 0x0, 0x0, 0x8, 0x0, 0xc0}, r0, 0xdfffffffffffffff, r6, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04000000040000000400000022bf000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000000000000000000000000000000000080000000df8c4f489db1a5803e07d892bcc60cc08e964c1e5b33e5806495927db7775341fa03a15b0fae80"], 0x50) 3.61808311s ago: executing program 3 (id=4202): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x5e, &(0x7f0000000440)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x7, 0x3, 0x0, [{@empty, 0x6}, {@local}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @multicast2, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0xfffffffe, 0x8, 0x7, 0x1d2, 0x7f]}, &(0x7f0000000380)=0x54) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x23, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, [], [0x0, 0x0, 0x0, 0xff], 'erspan0\x00', 'ip6gretap0\x00'}, 0x0, 0x108, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}, {0x9, 0x800, 0x5498, 0xf3e2, 0x3ff, 0x9, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5c}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {0xff}, {}, 0xc, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 'bond0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r9, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) recvmmsg(r10, &(0x7f0000001d80)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x0, &(0x7f0000001d00)=[{&(0x7f00000003c0)=""/111}, {&(0x7f0000000440)=""/88}, {&(0x7f00000004c0)=""/203, 0x40}, {&(0x7f00000005c0)=""/147}, {&(0x7f0000000680)=""/40}, {&(0x7f0000000d00)=""/4096}]}, 0xf}], 0x40000000000038e, 0x40000040, 0x0) 3.28538429s ago: executing program 3 (id=4211): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") setuid(0x0) 2.060534288s ago: executing program 3 (id=4215): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x3b) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 1.925023042s ago: executing program 8 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.474134506s ago: executing program 8 (id=4218): unshare(0x20000600) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, &(0x7f00000002c0)) 1.038245669s ago: executing program 2 (id=4219): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000091114900000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x0) pwrite64(r3, 0x0, 0x0, 0x401) socket(0x840000000002, 0x3, 0xfa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x30, 0x660f53fe, 0x6f}, 0x2c) 988.289761ms ago: executing program 2 (id=4221): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x11}}, 0x10) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) 943.100651ms ago: executing program 2 (id=4222): r0 = socket$netlink(0x10, 0x3, 0x3d7e945753fde35d) sendmsg$IPSET_CMD_PROTOCOL(r0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x8) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) pipe(0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 942.140812ms ago: executing program 9 (id=4232): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000091114900000000009500000000230000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x0) pwrite64(r3, 0x0, 0x0, 0x401) socket(0x840000000002, 0x3, 0xfa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x30, 0x660f53fe, 0x6f}, 0x2c) 727.199918ms ago: executing program 9 (id=4223): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0x36, 0xa]}}}}]}) r3 = socket(0x400000000010, 0x5, 0x0) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast1, @mcast2, 0x1, 0x20, 0x1, 0x4}}) 726.483388ms ago: executing program 2 (id=4224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xf374}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x40080a0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x3, 0x181, 0x100}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x100002, 0x4, 0xfffffffc, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[], [{@permit_directio}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r7 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000009c0)={r6, &(0x7f00000001c0)='\x00', 0x40100, &(0x7f0000000200)={@align=0x3, {0x7, 0xcfd, 0x0, 0x200}}, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x3}) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000a00)) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_emit_ethernet(0x14, &(0x7f0000002800)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 557.580623ms ago: executing program 9 (id=4225): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10"], 0x1, 0x646, &(0x7f0000000740)="$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") file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCSFLAGS1(r2, 0xc0686611, &(0x7f0000000080)=0x101040a) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947", 0x1e}], 0x1, 0x1, 0x1) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000000280)=""/107, 0x6b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x2a, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) fcntl$notify(r7, 0x402, 0x7) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00022abd7000fbdbdf250300000014000c00fe80000000000000000000000000002005000d001500000014000c00fc0100"/62], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x404c000) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xb, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574b", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000300)={r7, 0x8001}) 466.745226ms ago: executing program 2 (id=4226): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") setuid(0x0) 362.399809ms ago: executing program 8 (id=4227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 227.198144ms ago: executing program 8 (id=4228): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a50100000100000004"], 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 177.781225ms ago: executing program 8 (id=4229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10080, 0x10000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 177.107266ms ago: executing program 9 (id=4230): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 114.897647ms ago: executing program 9 (id=4231): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000090603000000000000000000050000400900020073797a3100000000050001008700000024000780060004404e2100000c00018008000140e00040000c00148008000140ffffffff8dbb843b7861262c19ab0fb4a4a52cbcf81cf561cb0548a300dbdddfed046c34f7e0a8622c04cee778c833f6f80a808af7fc362fe899881069a014"], 0x4c}}, 0x884) 80.338478ms ago: executing program 3 (id=4233): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x8}}, 0x20) 51.745299ms ago: executing program 2 (id=4234): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x11}}, 0x10) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) 17.51671ms ago: executing program 3 (id=4235): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) preadv(r0, 0x0, 0x0, 0x2, 0xb8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25210000000c000500000000000000000009001f0070687931000000000500200000000000285221ca418c4fde0de92d7663fd660d217ede36dc80a9154f85d92b35ea5b19c55ede04de943adda23c3937a8cc5de1f6cb05a32ca194ce573a8d58ce37a7e21e01e4376f7ea81a74c1d803f73c3ea4"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x4008010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="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"], 0x0, 0x80000001}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x0, 0xa, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x1b4240537a9a1561, 0x0, 0xa1a6, 0x5, {{0x23, 0x4, 0x0, 0x1c, 0x8c, 0x64, 0x0, 0x5, 0x6, 0x0, @broadcast, @private=0xa010104, {[@end, @lsrr={0x83, 0x13, 0xd2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x2, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xd}, {@loopback, 0xf}]}, @cipso={0x86, 0x31, 0x3, [{0x0, 0x4, "19f7"}, {0x2, 0x3, "8b"}, {0x6, 0x11, "29937e88fe0d70787adfec013d14a5"}, {0x2, 0x6, "88c49fca"}, {0x7, 0xa, "6dca7ae7e22ea89f"}, {0x6, 0x3, ' '}]}, @rr={0x7, 0x13, 0xd8, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xf2, 0x0}, @broadcast]}, @ra={0x94, 0x4}]}}}}}) 524.951µs ago: executing program 9 (id=4236): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0x36, 0xa]}}}}]}) r3 = socket(0x400000000010, 0x5, 0x0) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast1, @mcast2, 0x1, 0x20, 0x1, 0x4}}) 0s ago: executing program 8 (id=4237): socket$netlink(0x10, 0x3, 0x3d7e945753fde35d) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) pipe(0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080), 0x0, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) kernel console output (not intermixed with test programs): =1400 audit(1781875467.488:2057): avc: denied { write } for pid=16216 comm="syz.7.3529" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.221358][ T9933] hsr_slave_0: left promiscuous mode [ 625.231409][ T9933] hsr_slave_1: left promiscuous mode [ 625.246684][ T9933] veth1_macvtap: left promiscuous mode [ 625.252355][ T9933] veth0_macvtap: left promiscuous mode [ 625.258293][ T9933] veth1_vlan: left promiscuous mode [ 625.304343][ T9933] team0 (unregistering): Port device vlan0 removed [ 625.407733][T16222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16222 comm=syz.7.3530 [ 625.580196][ T9933] IPVS: stop unused estimator thread 0... [ 625.642334][T16171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.653563][T16128] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 625.684376][T16128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.701973][T16145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 625.716321][T16145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.734184][T16145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 625.746168][T16145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.756998][T16145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 625.763821][T16234] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 625.770411][T16234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 625.783797][T16145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.797919][T16234] vhci_hcd vhci_hcd.0: Device attached [ 625.805106][T16128] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 625.816734][ T28] audit: type=1400 audit(1781875468.158:2058): avc: denied { write } for pid=16225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.843473][T16242] vhci_hcd vhci_hcd.0: port 0 already used [ 625.846354][T16128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.858153][T16128] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.867094][T16128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.875323][T16145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 625.883708][ T28] audit: type=1400 audit(1781875468.208:2059): avc: denied { write } for pid=16249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.907614][T16145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.922063][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 625.929402][T16128] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 625.941609][T16128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.950338][T16234] FAULT_INJECTION: forcing a failure. [ 625.950338][T16234] name failslab, interval 1, probability 0, space 0, times 0 [ 625.963702][T16234] CPU: 1 UID: 0 PID: 16234 Comm: syz.7.3533 Not tainted syzkaller #0 PREEMPT(lazy) [ 625.963733][T16234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.963748][T16234] Call Trace: [ 625.963756][T16234] [ 625.963764][T16234] __dump_stack+0x1d/0x30 [ 625.963833][T16234] dump_stack_lvl+0x95/0xd0 [ 625.963854][T16234] dump_stack+0x15/0x1b [ 625.963874][T16234] should_fail_ex+0x25e/0x270 [ 625.963981][T16234] should_failslab+0x8c/0xb0 [ 625.964010][T16234] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 625.964039][T16234] ? __d_alloc+0x34/0x320 [ 625.964135][T16234] __d_alloc+0x34/0x320 [ 625.964154][T16234] ? d_alloc_pseudo+0x13/0x80 [ 625.964177][T16234] d_alloc_pseudo+0x1e/0x80 [ 625.964205][T16234] alloc_path_pseudo+0xa4/0x140 [ 625.964241][T16234] alloc_file_pseudo+0x55/0x120 [ 625.964268][T16234] __shmem_file_setup+0x226/0x260 [ 625.964309][T16234] shmem_file_setup+0x3b/0x50 [ 625.964332][T16234] memfd_alloc_file+0x4e/0x300 [ 625.964366][T16234] __se_sys_memfd_create+0x2e1/0x3b0 [ 625.964399][T16234] __x64_sys_memfd_create+0x31/0x40 [ 625.964459][T16234] x64_sys_call+0x1f22/0x3020 [ 625.964517][T16234] do_syscall_64+0x136/0x3c0 [ 625.964542][T16234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.964574][T16234] RIP: 0033:0x7f78da6cce59 [ 625.964587][T16234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.964618][T16234] RSP: 002b:00007f78d911ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 625.964641][T16234] RAX: ffffffffffffffda RBX: 0000000000000471 RCX: 00007f78da6cce59 [ 625.964657][T16234] RDX: 00007f78d911eee0 RSI: 0000000000000000 RDI: 00007f78da76304f [ 625.964673][T16234] RBP: 0000200000000200 R08: 00000000ffffffff R09: 0000000000000000 [ 625.964688][T16234] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 625.964703][T16234] R13: 00007f78d911eee0 R14: 00007f78d911eea0 R15: 0000200000000680 [ 625.964751][T16234] [ 625.966394][T16234] sctp: [Deprecated]: syz.7.3533 (pid 16234) Use of int in max_burst socket option deprecated. [ 625.966394][T16234] Use struct sctp_assoc_value instead [ 625.976284][T16255] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 626.093018][T16128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.111750][T16255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 626.125080][T16255] vhci_hcd vhci_hcd.0: Device attached [ 626.128459][ T6410] usb 16-1: SetAddress Request (2) to port 0 [ 626.189956][T16128] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.201111][ T6410] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 626.228123][T16270] vhci_hcd vhci_hcd.0: port 0 already used [ 626.237941][T16270] loop3: detected capacity change from 0 to 512 [ 626.251730][T16237] vhci_hcd: connection closed [ 626.253133][ T9904] vhci_hcd vhci_hcd.7: stop threads [ 626.263003][T16270] EXT4-fs: Ignoring removed nobh option [ 626.269231][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.269269][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.276547][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.290623][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.299839][ T9904] vhci_hcd vhci_hcd.7: release socket [ 626.305680][ T9904] vhci_hcd vhci_hcd.7: disconnect device [ 626.320358][T16270] EXT4-fs (loop3): orphan cleanup on readonly fs [ 626.332945][T16270] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.3535: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 626.343368][T16128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 626.359465][T16128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.361441][T16270] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 626.374840][T16270] EXT4-fs (loop3): Remounting filesystem read-only [ 626.384031][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 626.384045][ C0] EXT4-fs (loop3): initial error at time 1781875468: ext4_xattr_inode_update_ref:1037: inode 11 [ 626.384090][ C0] EXT4-fs (loop3): last error at time 1781875468: ext4_xattr_inode_update_ref:1037: inode 11 [ 626.420893][T16270] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.3535: ea_inode dec ref err=-117 [ 626.434263][T16270] EXT4-fs (loop3): 1 orphan inode deleted [ 626.440727][T16270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 626.454995][T16255] sctp: [Deprecated]: syz.3.3535 (pid 16255) Use of int in max_burst socket option deprecated. [ 626.454995][T16255] Use struct sctp_assoc_value instead [ 626.483970][T16145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.501747][T16145] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.508615][ T28] audit: type=1400 audit(1781875468.848:2060): avc: denied { write } for pid=16277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.543413][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.550697][ T9919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.576184][ T28] audit: type=1400 audit(1781875468.898:2061): avc: denied { write } for pid=16292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.602519][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 626.615114][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.622210][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.692945][T16308] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3537'. [ 626.745693][T16128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.754227][T16316] FAULT_INJECTION: forcing a failure. [ 626.754227][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.767921][T16316] CPU: 1 UID: 0 PID: 16316 Comm: syz.8.3538 Not tainted syzkaller #0 PREEMPT(lazy) [ 626.767950][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.767965][T16316] Call Trace: [ 626.767972][T16316] [ 626.767981][T16316] __dump_stack+0x1d/0x30 [ 626.768006][T16316] dump_stack_lvl+0x95/0xd0 [ 626.768142][T16316] dump_stack+0x15/0x1b [ 626.768159][T16316] should_fail_ex+0x25e/0x270 [ 626.768233][T16316] should_fail+0xb/0x20 [ 626.768249][T16316] should_fail_usercopy+0x1a/0x20 [ 626.768269][T16316] _copy_from_user+0x1c/0xb0 [ 626.768297][T16316] ___sys_sendmsg+0xc1/0x1e0 [ 626.768409][T16316] __x64_sys_sendmsg+0xd4/0x160 [ 626.768445][T16316] x64_sys_call+0x194c/0x3020 [ 626.768466][T16316] do_syscall_64+0x136/0x3c0 [ 626.768485][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.768538][T16316] RIP: 0033:0x7f221bc2ce59 [ 626.768555][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.768577][T16316] RSP: 002b:00007f221a67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.768601][T16316] RAX: ffffffffffffffda RBX: 00007f221bea5fa0 RCX: 00007f221bc2ce59 [ 626.768643][T16316] RDX: 0000000004000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 626.768659][T16316] RBP: 00007f221a67f090 R08: 0000000000000000 R09: 0000000000000000 [ 626.768675][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.768690][T16316] R13: 00007f221bea6038 R14: 00007f221bea5fa0 R15: 00007fffe134eb88 [ 626.768713][T16316] [ 626.889896][ T28] audit: type=1400 audit(1781875469.238:2062): avc: denied { write } for pid=16311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.959182][T16256] vhci_hcd: connection closed [ 626.963348][ T9913] vhci_hcd vhci_hcd.3: stop threads [ 626.982887][ T9913] vhci_hcd vhci_hcd.3: release socket [ 626.994761][ T9913] vhci_hcd vhci_hcd.3: disconnect device [ 627.081820][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 627.141066][T16145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.194072][T16128] veth0_vlan: entered promiscuous mode [ 627.204158][T16128] veth1_vlan: entered promiscuous mode [ 627.255032][T16128] veth0_macvtap: entered promiscuous mode [ 627.281808][T16370] lo speed is unknown, defaulting to 1000 [ 627.291290][T16128] veth1_macvtap: entered promiscuous mode [ 627.315740][T16128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.344884][T16145] veth0_vlan: entered promiscuous mode [ 627.364537][T16362] netlink: 'syz.8.3542': attribute type 12 has an invalid length. [ 627.372972][T16362] netlink: 'syz.8.3542': attribute type 29 has an invalid length. [ 627.381235][T16362] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3542'. [ 627.398024][T16380] program syz.7.3543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.408647][T16128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.423831][T16145] veth1_vlan: entered promiscuous mode [ 627.441564][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.450934][ T68] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.461755][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.481186][T16370] gre0 speed is unknown, defaulting to 1000 [ 627.483582][ T9919] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.501265][ T9919] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.545971][T16145] veth0_macvtap: entered promiscuous mode [ 627.554302][T16145] veth1_macvtap: entered promiscuous mode [ 627.567089][T16145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.576097][T16145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.611455][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 627.637843][ T9919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.647989][ T9919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.656806][ T9919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.672975][ T9919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.178901][T16388] loop7: detected capacity change from 0 to 512 [ 630.222059][T16388] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 630.606226][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 630.606244][ T28] audit: type=1400 audit(1781875472.948:2066): avc: denied { write } for pid=16408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.666749][ T28] audit: type=1400 audit(1781875472.998:2067): avc: denied { write } for pid=16428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.734531][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 630.759544][ T28] audit: type=1400 audit(1781875473.109:2068): avc: denied { map } for pid=16432 comm="syz.3.3548" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 630.807302][ T28] audit: type=1400 audit(1781875473.109:2069): avc: denied { execute } for pid=16432 comm="syz.3.3548" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 630.903700][T16440] pim6reg: entered allmulticast mode [ 630.911539][T16446] loop2: detected capacity change from 0 to 512 [ 630.921200][T16437] lo speed is unknown, defaulting to 1000 [ 630.927300][T16447] pim6reg: left allmulticast mode [ 630.935913][T16446] ext3: Unknown parameter 'nouser_xattr' [ 631.066819][T16437] gre0 speed is unknown, defaulting to 1000 [ 631.122989][T16440] loop9: detected capacity change from 0 to 512 [ 631.182973][ T28] audit: type=1400 audit(1781875473.499:2070): avc: denied { write } for pid=16449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.230939][ T28] audit: type=1400 audit(1781875473.579:2071): avc: denied { write } for pid=16465 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.345363][T16471] usb usb8: usbfs: process 16471 (syz.2.3554) did not claim interface 0 before use [ 631.361638][ T6410] usb 16-1: device descriptor read/8, error -110 [ 631.391792][T16440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.416219][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 631.417895][T16440] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.477027][ T28] audit: type=1400 audit(1781875473.829:2072): avc: denied { write } for pid=16439 comm="syz.9.3552" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.522642][T16467] loop8: detected capacity change from 0 to 512 [ 631.529182][T16467] ext4: Unknown parameter 'euid<00000000000000060928' [ 631.539628][ T6410] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 631.545212][T16479] loop3: detected capacity change from 0 to 764 [ 631.626119][ T28] audit: type=1400 audit(1781875473.829:2073): avc: denied { write } for pid=16439 comm="syz.9.3552" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.631131][T16479] iso9660: Unknown parameter '' [ 631.663279][ T28] audit: type=1400 audit(1781875473.869:2074): avc: denied { write } for pid=16439 comm="syz.9.3552" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.666377][ T6410] usb 16-1: enqueue for inactive port 0 [ 631.690614][ T6410] usb 16-1: enqueue for inactive port 0 [ 631.696171][ T6410] usb 16-1: enqueue for inactive port 0 [ 631.792730][ T28] audit: type=1400 audit(1781875474.009:2075): avc: denied { write } for pid=16480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.819526][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.870944][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 632.027317][T16498] loop9: detected capacity change from 0 to 128 [ 632.039882][T16498] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 632.237481][T16498] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.916566][ T6410] usb usb16-port1: attempt power cycle [ 633.021857][T16507] loop7: detected capacity change from 0 to 512 [ 633.062012][T16507] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 633.145070][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.397610][T16523] loop7: detected capacity change from 0 to 512 [ 633.457276][T16523] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 633.611342][T16523] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3561: bad orphan inode 131083 [ 633.622731][T16523] loop7: lost filesystem error report for type 5 error -117 [ 633.625639][T16523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.810149][T16542] loop3: detected capacity change from 0 to 512 [ 633.820769][T16542] EXT4-fs: Ignoring removed mblk_io_submit option [ 633.835135][T16542] ext4: Unknown parameter 'nobh.acl' [ 633.914669][T16546] loop9: detected capacity change from 0 to 1024 [ 633.942521][T16546] EXT4-fs: Ignoring removed orlov option [ 633.989977][T16546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.017727][T14929] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.068747][T16558] SELinux: Context : is not valid (left unmapped). [ 634.439013][T16536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.485228][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.521902][T16570] loop9: detected capacity change from 0 to 512 [ 634.534128][T16570] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 634.553694][T16570] EXT4-fs (loop9): 1 truncate cleaned up [ 634.560932][T16570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.575621][T16570] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3572'. [ 634.586257][T16570] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3572: invalid indirect mapped block 4294901760 (level 0) [ 634.600443][T16570] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 634.600687][T16570] EXT4-fs (loop9): Remounting filesystem read-only [ 634.708360][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.689281][ T6410] usb usb16-port1: unable to enumerate USB device [ 636.690494][T16590] loop9: detected capacity change from 0 to 512 [ 636.977757][T16590] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 636.995439][ T4396] IPVS: starting estimator thread 0... [ 637.697273][T16593] IPVS: using max 2640 ests per chain, 132000 per kthread [ 638.139016][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 638.139031][ T28] audit: type=1400 audit(1781875480.480:2081): avc: denied { write } for pid=16597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.194034][T16625] loop8: detected capacity change from 0 to 512 [ 638.200792][ T28] audit: type=1400 audit(1781875480.530:2082): avc: denied { write } for pid=16626 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.226472][T16625] EXT4-fs (loop8): SIPHASH is not a valid default hash value [ 638.256066][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 638.270341][T16633] FAULT_INJECTION: forcing a failure. [ 638.270341][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 638.284707][T16633] CPU: 1 UID: 0 PID: 16633 Comm: syz.3.3587 Not tainted syzkaller #0 PREEMPT(lazy) [ 638.284813][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.284829][T16633] Call Trace: [ 638.284837][T16633] [ 638.284845][T16633] __dump_stack+0x1d/0x30 [ 638.284872][T16633] dump_stack_lvl+0x95/0xd0 [ 638.284895][T16633] dump_stack+0x15/0x1b [ 638.284915][T16633] should_fail_ex+0x25e/0x270 [ 638.284999][T16633] ? alloc_netdev_mqs+0x7ef/0xa60 [ 638.285041][T16633] should_failslab+0x8c/0xb0 [ 638.285069][T16633] __kmalloc_cache_noprof+0x5f/0x400 [ 638.285089][T16633] alloc_netdev_mqs+0x7ef/0xa60 [ 638.285179][T16633] rtnl_create_link+0x239/0x720 [ 638.285210][T16633] rtnl_newlink_create+0x175/0x650 [ 638.285234][T16633] ? security_capable+0x7b/0x90 [ 638.285331][T16633] ? netlink_ns_capable+0x86/0xa0 [ 638.285350][T16633] rtnl_newlink+0x1181/0x1400 [ 638.285381][T16633] ? __rcu_read_unlock+0x4e/0x70 [ 638.285422][T16633] ? avc_has_perm_noaudit+0xa3/0x120 [ 638.285451][T16633] ? cred_has_capability+0x224/0x2a0 [ 638.285479][T16633] ? selinux_capable+0x31/0x40 [ 638.285576][T16633] ? security_capable+0x7b/0x90 [ 638.285601][T16633] ? ns_capable+0x80/0xb0 [ 638.285629][T16633] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.285650][T16633] rtnetlink_rcv_msg+0x64b/0x720 [ 638.285757][T16633] netlink_rcv_skb+0x11e/0x220 [ 638.285838][T16633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.285874][T16633] rtnetlink_rcv+0x1c/0x30 [ 638.285892][T16633] netlink_unicast+0x5a7/0x680 [ 638.285913][T16633] netlink_sendmsg+0x5be/0x6f0 [ 638.285938][T16633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.286055][T16633] ____sys_sendmsg+0x532/0x580 [ 638.286087][T16633] ___sys_sendmsg+0x195/0x1e0 [ 638.286150][T16633] ? terminate_walk+0x1d5/0x200 [ 638.286183][T16633] __sys_sendmmsg+0x185/0x320 [ 638.286292][T16633] __x64_sys_sendmmsg+0x57/0x70 [ 638.286323][T16633] x64_sys_call+0x27aa/0x3020 [ 638.286346][T16633] do_syscall_64+0x136/0x3c0 [ 638.286430][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.286450][T16633] RIP: 0033:0x7f5e276ace59 [ 638.286465][T16633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.286483][T16633] RSP: 002b:00007f5e26107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 638.286501][T16633] RAX: ffffffffffffffda RBX: 00007f5e27925fa0 RCX: 00007f5e276ace59 [ 638.286577][T16633] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 638.286589][T16633] RBP: 00007f5e26107090 R08: 0000000000000000 R09: 0000000000000000 [ 638.286601][T16633] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 638.286613][T16633] R13: 00007f5e27926038 R14: 00007f5e27925fa0 R15: 00007fff60877198 [ 638.286632][T16633] [ 638.645875][ T3425] IPVS: starting estimator thread 0... [ 638.672933][ T3425] IPVS: starting estimator thread 0... [ 638.815245][T16646] IPVS: using max 2160 ests per chain, 108000 per kthread [ 638.862859][T16645] IPVS: using max 2688 ests per chain, 134400 per kthread [ 638.902519][T16657] tmpfs: Bad value for 'mpol' [ 639.869128][T16619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.885184][T16674] loop7: detected capacity change from 0 to 1024 [ 640.892165][T16674] EXT4-fs: Ignoring removed bh option [ 640.978051][T16676] tmpfs: Bad value for 'mpol' [ 641.220074][T16674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.257022][ T28] audit: type=1400 audit(1781875483.600:2083): avc: denied { write } for pid=16673 comm="syz.7.3598" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.313652][T14929] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 641.359425][ T28] audit: type=1400 audit(1781875483.660:2084): avc: denied { write } for pid=14929 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.404517][T14929] EXT4-fs (loop7): Remounting filesystem read-only [ 641.439805][ T28] audit: type=1400 audit(1781875483.780:2085): avc: denied { write } for pid=14929 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.482107][T16688] loop9: detected capacity change from 0 to 2048 [ 641.492675][T16686] loop3: detected capacity change from 0 to 512 [ 641.509310][T16686] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 641.515836][ T28] audit: type=1400 audit(1781875483.780:2086): avc: denied { write } for pid=14929 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.530422][T14929] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.541589][ T28] audit: type=1400 audit(1781875483.780:2087): avc: denied { write } for pid=14929 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.563070][T16688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.572533][ T28] audit: type=1400 audit(1781875483.780:2088): avc: denied { write } for pid=14929 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.656264][ T28] audit: type=1400 audit(1781875483.780:2089): avc: denied { write } for pid=14929 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.678453][ T28] audit: type=1400 audit(1781875483.780:2090): avc: denied { write } for pid=14929 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 641.729442][T16688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.748317][T16698] tmpfs: Bad value for 'mpol' [ 641.871131][ T6854] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.906018][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.962809][ T6854] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.127035][T16714] lo speed is unknown, defaulting to 1000 [ 642.158995][T16714] gre0 speed is unknown, defaulting to 1000 [ 643.134673][T16705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.118053][T16732] loop2: detected capacity change from 0 to 512 [ 644.178089][ T6854] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.616094][T16732] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 644.856485][T16730] loop9: detected capacity change from 0 to 512 [ 645.121706][T16730] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 645.121734][T16730] EXT4-fs: failed to create workqueue [ 645.136687][T16730] EXT4-fs (loop9): mount failed [ 645.302292][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.313110][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.321096][T16714] bridge_slave_0: entered allmulticast mode [ 645.328802][T16714] bridge_slave_0: entered promiscuous mode [ 645.337484][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.344601][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.351971][T16714] bridge_slave_1: entered allmulticast mode [ 645.359374][T16714] bridge_slave_1: entered promiscuous mode [ 645.387997][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.400184][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.430186][T16714] team0: Port device team_slave_0 added [ 645.438057][T16714] team0: Port device team_slave_1 added [ 645.461077][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.468276][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.495100][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.508043][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.515280][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.545201][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.586826][T16714] hsr_slave_0: entered promiscuous mode [ 645.593831][T16714] hsr_slave_1: entered promiscuous mode [ 645.600491][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 645.606582][T16714] Cannot create hsr debugfs directory [ 645.819752][ T28] audit: type=1400 audit(1781875488.171:2091): avc: denied { write } for pid=16734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.888264][ T28] audit: type=1400 audit(1781875488.241:2092): avc: denied { write } for pid=16753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.285940][ T28] audit: type=1400 audit(1781875488.631:2093): avc: denied { write } for pid=16756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.494883][ T6854] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.550703][ T28] audit: type=1400 audit(1781875488.871:2094): avc: denied { write } for pid=16776 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.616724][T16783] tmpfs: Bad value for 'mpol' [ 647.076631][ T6854] bridge_slave_1: left allmulticast mode [ 647.099306][ T6854] bridge_slave_1: left promiscuous mode [ 647.117514][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.151654][ T6854] bridge_slave_0: left allmulticast mode [ 647.175049][ T6854] bridge_slave_0: left promiscuous mode [ 647.198949][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.238360][ T28] audit: type=1400 audit(1781875489.581:2095): avc: denied { write } for pid=16792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.349961][ T28] audit: type=1400 audit(1781875489.681:2096): avc: denied { write } for pid=16813 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.440476][ T6854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.449585][ T6854] bond_slave_0: left allmulticast mode [ 647.457115][ T6854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.478677][ T6854] bond_slave_1: left allmulticast mode [ 647.487550][ T6854] bond0 (unregistering): Released all slaves [ 647.534981][ T6854] tipc: Left network mode [ 647.992683][T16834] loop8: detected capacity change from 0 to 512 [ 648.004964][T16834] EXT4-fs: test_dummy_encryption option not supported [ 648.521138][T16836] lo speed is unknown, defaulting to 1000 [ 649.963283][ T28] audit: type=1400 audit(1781875492.272:2097): avc: denied { accept } for pid=16850 comm="syz.3.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 650.330247][T16856] tmpfs: Bad value for 'mpol' [ 650.349488][ T28] audit: type=1400 audit(1781875492.622:2098): avc: denied { write } for pid=16826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.577671][ T6854] hsr_slave_0: left promiscuous mode [ 650.595984][ T6854] hsr_slave_1: left promiscuous mode [ 650.605698][ T28] audit: type=1400 audit(1781875492.952:2099): avc: denied { write } for pid=16859 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.631241][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.642782][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.657493][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.674967][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.686061][ T6854] veth1_macvtap: left promiscuous mode [ 650.691652][ T6854] veth0_macvtap: left promiscuous mode [ 650.697691][ T6854] veth1_vlan: left promiscuous mode [ 650.703114][ T6854] veth0_vlan: left promiscuous mode [ 650.805830][ T6854] team0 (unregistering): Port device team_slave_1 removed [ 650.833579][ T6854] team0 (unregistering): Port device team_slave_0 removed [ 650.892287][T16714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 650.902699][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.912132][T16714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 650.920816][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.929683][T16836] gre0 speed is unknown, defaulting to 1000 [ 650.938737][T16714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 650.958840][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.969127][T16714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 650.982451][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.477091][ T28] audit: type=1400 audit(1781875493.822:2100): avc: denied { write } for pid=16875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.569750][T16896] loop2: detected capacity change from 0 to 512 [ 651.622768][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.702219][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.719185][ T28] audit: type=1400 audit(1781875494.062:2101): avc: denied { write } for pid=16900 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.746589][T16896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.770357][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.777630][ T9915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.793218][T16896] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.814165][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.821334][ T9915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.874369][T16145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.993967][ T3425] IPVS: starting estimator thread 0... [ 652.027395][ T28] audit: type=1400 audit(1781875494.372:2102): avc: denied { write } for pid=16906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.112862][T16922] IPVS: using max 2688 ests per chain, 134400 per kthread [ 652.150590][T16935] loop8: detected capacity change from 0 to 512 [ 652.157859][ T28] audit: type=1400 audit(1781875494.432:2103): avc: denied { write } for pid=16929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.279654][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.320605][T16940] tmpfs: Bad value for 'mpol' [ 652.986502][T16959] loop3: detected capacity change from 0 to 512 [ 653.004634][T16959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 653.541956][T16714] veth0_vlan: entered promiscuous mode [ 653.551220][T16959] EXT4-fs (loop3): 1 orphan inode deleted [ 654.000879][T16959] EXT4-fs (loop3): 1 truncate cleaned up [ 654.017553][T16959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.139080][T16714] veth1_vlan: entered promiscuous mode [ 654.167920][ T6854] IPVS: stop unused estimator thread 0... [ 654.174614][ T28] audit: type=1400 audit(1781875496.532:2104): avc: denied { write } for pid=16958 comm="syz.3.3645" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.216874][T16714] veth0_macvtap: entered promiscuous mode [ 654.275540][T16714] veth1_macvtap: entered promiscuous mode [ 654.320520][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.329249][ T28] audit: type=1400 audit(1781875496.602:2105): avc: denied { mounton } for pid=16958 comm="syz.3.3645" path="/131/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 654.364577][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.384863][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.462070][ T9915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.477775][ T28] audit: type=1400 audit(1781875496.702:2106): avc: denied { unmount } for pid=14100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 654.510698][ T9915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.582287][ T9915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.595947][ T28] audit: type=1400 audit(1781875496.702:2107): avc: denied { write } for pid=14100 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 654.632778][ T9915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.751154][ T28] audit: type=1400 audit(1781875496.752:2108): avc: denied { write } for pid=16964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.811178][ T28] audit: type=1400 audit(1781875496.893:2109): avc: denied { write } for pid=16982 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.014491][T17016] loop9: detected capacity change from 0 to 512 [ 655.833120][T17011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.318490][T17104] tmpfs: Bad value for 'mpol' [ 656.442302][T17117] loop8: detected capacity change from 0 to 764 [ 656.463069][T17102] loop3: detected capacity change from 0 to 1024 [ 656.470276][T17116] tmpfs: Bad value for 'mpol' [ 656.523144][T17102] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 656.692849][T17102] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.3656: lblock 2 mapped to illegal pblock 2 (length 1) [ 656.834390][T17126] loop2: detected capacity change from 0 to 512 [ 656.856723][T17102] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 656.857414][T17102] __quota_error: 12 callbacks suppressed [ 656.857487][T17102] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 656.866727][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 656.866748][ C0] EXT4-fs (loop3): initial error at time 1781875499: ext4_map_blocks:791: inode 3: block 2 [ 656.866908][ C0] EXT4-fs (loop3): last error at time 1781875499: ext4_map_blocks:791: inode 3: block 2 [ 657.140789][T17102] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.3656: lblock 0 mapped to illegal pblock 48 (length 1) [ 657.331204][T17102] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 657.335299][ T28] audit: type=1400 audit(1781875499.633:2122): avc: denied { write } for pid=17099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.368057][ T28] audit: type=1400 audit(1781875499.673:2123): avc: denied { write } for pid=17144 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.525856][T17102] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 657.535006][T17102] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.3656: Failed to acquire dquot type 0 [ 657.546224][T17102] loop3: lost filesystem error report for type 5 error -117 [ 657.557122][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 658.156762][T17102] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 658.166580][T17102] loop3: lost filesystem error report for type 5 error -117 [ 658.195468][T17102] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.3656: mark_inode_dirty error [ 658.220433][T17102] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 658.220861][T17102] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 658.564545][T17102] EXT4-fs (loop3): 1 orphan inode deleted [ 658.583299][T17102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.345428][ T68] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 659.363572][ T28] audit: type=1400 audit(1781875501.643:2124): avc: denied { write } for pid=17153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.417243][ T68] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 659.518306][ T68] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 659.532648][ T28] audit: type=1400 audit(1781875501.863:2125): avc: denied { write } for pid=17167 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.581769][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.618210][T14100] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 659.637783][T14100] loop3: lost filesystem error report for type 5 error -117 [ 659.637918][T14100] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 659.658859][T17181] loop5: detected capacity change from 0 to 764 [ 659.668319][T14100] loop3: lost filesystem error report for type 5 error -117 [ 659.670136][T14100] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 659.693527][T14100] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 659.725883][ T28] audit: type=1400 audit(1781875502.043:2126): avc: denied { write } for pid=17171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.793900][ T28] audit: type=1400 audit(1781875502.143:2127): avc: denied { write } for pid=17192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.793931][T17191] tmpfs: Bad value for 'mpol' [ 659.899281][T17207] loop3: detected capacity change from 0 to 512 [ 659.917764][T17207] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 659.966598][T17207] EXT4-fs (loop3): 1 truncate cleaned up [ 659.979031][T17207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.996770][T17202] loop5: detected capacity change from 0 to 4096 [ 660.026264][ T28] audit: type=1400 audit(1781875502.303:2128): avc: denied { write } for pid=17198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.078048][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3673'. [ 660.109116][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.990131][ T3726] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 661.817382][ T3726] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 661.870244][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 661.870260][ T28] audit: type=1400 audit(1781875504.214:2132): avc: denied { write } for pid=17247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.920924][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 662.037623][ T28] audit: type=1400 audit(1781875504.384:2133): avc: denied { write } for pid=17259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.120338][ T28] audit: type=1400 audit(1781875504.464:2134): avc: denied { write } for pid=17280 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.156258][T17253] loop9: detected capacity change from 0 to 512 [ 662.164599][T17253] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 662.182181][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 662.253315][T17287] loop9: detected capacity change from 0 to 512 [ 662.299839][T17283] loop3: detected capacity change from 0 to 512 [ 662.306832][T17283] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 662.327922][ T28] audit: type=1400 audit(1781875504.674:2135): avc: denied { bind } for pid=17291 comm="syz.9.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 662.380510][ T28] audit: type=1400 audit(1781875504.724:2136): avc: denied { write } for pid=17285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.423019][ T28] audit: type=1400 audit(1781875504.764:2137): avc: denied { write } for pid=17303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.456893][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 662.678197][ T28] audit: type=1400 audit(1781875505.024:2138): avc: denied { write } for pid=17305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.688244][T17325] loop9: detected capacity change from 0 to 764 [ 663.189365][T17338] loop8: detected capacity change from 0 to 764 [ 663.686301][T17342] tmpfs: Bad value for 'mpol' [ 664.004930][ T28] audit: type=1400 audit(1781875506.064:2139): avc: denied { write } for pid=17343 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.379045][T17348] loop5: detected capacity change from 0 to 1024 [ 664.386672][T17348] EXT4-fs: Ignoring removed orlov option [ 664.392924][T17348] EXT4-fs: Ignoring removed orlov option [ 664.398749][T17348] EXT4-fs: inline encryption not supported [ 664.445245][T17348] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 664.577791][ T28] audit: type=1400 audit(1781875506.924:2140): avc: denied { write } for pid=17351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.697575][ T28] audit: type=1400 audit(1781875507.034:2141): avc: denied { write } for pid=17347 comm="syz.5.3692" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 664.727504][T17348] FAULT_INJECTION: forcing a failure. [ 664.727504][T17348] name failslab, interval 1, probability 0, space 0, times 0 [ 664.786010][T17348] CPU: 0 UID: 0 PID: 17348 Comm: syz.5.3692 Not tainted syzkaller #0 PREEMPT(lazy) [ 664.786027][T17370] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3692'. [ 664.786038][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.786054][T17348] Call Trace: [ 664.786099][T17348] [ 664.786143][T17348] __dump_stack+0x1d/0x30 [ 664.786233][T17348] dump_stack_lvl+0x95/0xd0 [ 664.786276][T17348] dump_stack+0x15/0x1b [ 664.786408][T17348] should_fail_ex+0x25e/0x270 [ 664.786476][T17348] should_failslab+0x8c/0xb0 [ 664.786561][T17348] __kmalloc_noprof+0xb8/0x4d0 [ 664.786613][T17348] ? _ib_alloc_device+0x3e/0x440 [ 664.786652][T17348] ? __rcu_read_unlock+0x4e/0x70 [ 664.786855][T17348] _ib_alloc_device+0x3e/0x440 [ 664.786911][T17348] siw_newlink+0xd1/0x670 [ 664.786970][T17348] nldev_newlink+0x3a8/0x430 [ 664.787187][T17348] ? __pfx_nldev_newlink+0x10/0x10 [ 664.787241][T17348] rdma_nl_rcv+0x439/0x570 [ 664.787297][T17348] ? selinux_nlmsg_lookup+0x9b/0x870 [ 664.787412][T17348] netlink_unicast+0x5a7/0x680 [ 664.787475][T17348] netlink_sendmsg+0x5be/0x6f0 [ 664.787582][T17348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.787660][T17348] ____sys_sendmsg+0x532/0x580 [ 664.787825][T17348] ___sys_sendmsg+0x195/0x1e0 [ 664.787876][T17348] __x64_sys_sendmsg+0xd4/0x160 [ 664.787907][T17348] x64_sys_call+0x194c/0x3020 [ 664.788029][T17348] do_syscall_64+0x136/0x3c0 [ 664.788090][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.788179][T17348] RIP: 0033:0x7f1c58bcce59 [ 664.788223][T17348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.788263][T17348] RSP: 002b:00007f1c57627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.788396][T17348] RAX: ffffffffffffffda RBX: 00007f1c58e45fa0 RCX: 00007f1c58bcce59 [ 664.788441][T17348] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 664.788480][T17348] RBP: 00007f1c57627090 R08: 0000000000000000 R09: 0000000000000000 [ 664.788515][T17348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.788556][T17348] R13: 00007f1c58e46038 R14: 00007f1c58e45fa0 R15: 00007ffd6813ff98 [ 664.788610][T17348] [ 664.915932][T17348] loop5: detected capacity change from 0 to 8192 [ 665.043823][T17370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.084459][T17370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.095146][T17370] bond0 (unregistering): Released all slaves [ 665.589533][T17402] loop2: detected capacity change from 0 to 764 [ 665.696127][T17406] loop2: detected capacity change from 0 to 256 [ 665.702878][T17406] vfat: Bad value for 'utf8' [ 665.732696][T17335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.957513][T17417] loop3: detected capacity change from 0 to 128 [ 665.984971][T17417] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 665.998664][T17417] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.022688][T17435] tmpfs: Bad value for 'mpol' [ 668.632699][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 668.632715][ T28] audit: type=1400 audit(1781875510.985:2147): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.668061][T17444] loop9: detected capacity change from 0 to 764 [ 668.696852][ T28] audit: type=1400 audit(1781875511.015:2148): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.722819][ T28] audit: type=1400 audit(1781875511.015:2149): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.748835][ T28] audit: type=1400 audit(1781875511.015:2150): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.802924][ T28] audit: type=1400 audit(1781875511.015:2151): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.828830][ T28] audit: type=1400 audit(1781875511.015:2152): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.854733][ T28] audit: type=1400 audit(1781875511.015:2153): avc: denied { write } for pid=16714 comm="syz-executor" name="9" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 668.906294][T14100] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 668.958219][T17456] loop9: detected capacity change from 0 to 512 [ 669.621830][T17479] loop8: detected capacity change from 0 to 764 [ 669.791558][T17481] loop8: detected capacity change from 0 to 128 [ 669.977651][T17481] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 670.106678][T17481] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.147216][ T28] audit: type=1400 audit(1781875512.495:2154): avc: denied { write } for pid=17480 comm="syz.8.3725" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 670.296637][T17495] gretap1: entered promiscuous mode [ 670.634090][T15306] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 671.244949][T17511] loop5: detected capacity change from 0 to 164 [ 671.277057][T17514] loop3: detected capacity change from 0 to 764 [ 671.349126][T17511] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 671.587386][T17515] loop9: detected capacity change from 0 to 8192 [ 674.539371][ T6429] IPVS: starting estimator thread 0... [ 674.629097][T17550] IPVS: using max 2736 ests per chain, 136800 per kthread [ 674.943649][T17555] loop2: detected capacity change from 0 to 764 [ 675.033881][T17561] loop5: detected capacity change from 0 to 1024 [ 675.042657][T17561] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 675.083320][T17563] tmpfs: Bad value for 'mpol' [ 676.030131][T17561] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 676.040664][T17561] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 676.051122][T17561] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3751: Failed to acquire dquot type 0 [ 676.063207][T17561] loop5: lost filesystem error report for type 5 error -5 [ 676.063841][T17561] EXT4-fs (loop5): 1 truncate cleaned up [ 676.071023][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 676.071041][ C1] EXT4-fs (loop5): initial error at time 1781875518: ext4_acquire_dquot:7041 [ 676.071058][ C1] EXT4-fs (loop5): last error at time 1781875518: ext4_acquire_dquot:7041 [ 676.229450][T17561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.616408][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.851147][ T28] audit: type=1400 audit(1781875519.206:2155): avc: denied { write } for pid=17578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.924045][ T28] audit: type=1400 audit(1781875519.276:2156): avc: denied { write } for pid=17594 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.991766][T17587] loop9: detected capacity change from 0 to 512 [ 677.020063][T17587] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 677.221397][T17605] loop3: detected capacity change from 0 to 512 [ 677.265228][T17609] tmpfs: Bad value for 'mpol' [ 677.368352][T17603] loop9: detected capacity change from 0 to 512 [ 677.417275][T17603] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 677.428525][T17612] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 677.447606][T17612] bond1: entered allmulticast mode [ 677.466941][T17618] loop3: detected capacity change from 0 to 4096 [ 677.498857][T17621] loop9: detected capacity change from 0 to 764 [ 677.516940][T17618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.549547][ T9919] Bluetooth: hci0: Frame reassembly failed (-84) [ 677.571291][T17624] loop2: detected capacity change from 0 to 128 [ 677.586123][T17624] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 677.611985][T17624] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.627891][ T28] audit: type=1400 audit(1781875519.976:2157): avc: denied { write } for pid=17623 comm="syz.2.3767" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 677.748057][T17629] loop8: detected capacity change from 0 to 512 [ 677.762838][T17629] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 677.875017][T17641] loop8: detected capacity change from 0 to 512 [ 678.231385][T17648] tmpfs: Bad value for 'mpol' [ 678.467610][ T28] audit: type=1400 audit(1781875520.817:2158): avc: denied { write } for pid=17646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.529896][ T28] audit: type=1400 audit(1781875520.887:2159): avc: denied { write } for pid=17662 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.554465][T16145] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.685234][ T28] audit: type=1400 audit(1781875521.037:2160): avc: denied { write } for pid=17671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.732917][ T28] audit: type=1400 audit(1781875521.087:2161): avc: denied { write } for pid=17685 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.823750][T17695] FAULT_INJECTION: forcing a failure. [ 678.823750][T17695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.837235][T17695] CPU: 0 UID: 0 PID: 17695 Comm: syz.5.3783 Not tainted syzkaller #0 PREEMPT(lazy) [ 678.837263][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.837343][T17695] Call Trace: [ 678.837351][T17695] [ 678.837360][T17695] __dump_stack+0x1d/0x30 [ 678.837386][T17695] dump_stack_lvl+0x95/0xd0 [ 678.837410][T17695] dump_stack+0x15/0x1b [ 678.837485][T17695] should_fail_ex+0x25e/0x270 [ 678.837505][T17695] should_fail+0xb/0x20 [ 678.837521][T17695] should_fail_usercopy+0x1a/0x20 [ 678.837621][T17695] _copy_from_user+0x1c/0xb0 [ 678.837671][T17695] memdup_user+0x5e/0xd0 [ 678.837703][T17695] security_setselfattr+0x8d/0x260 [ 678.837792][T17695] __x64_sys_lsm_set_self_attr+0xa0/0xe0 [ 678.837826][T17695] x64_sys_call+0x2d6c/0x3020 [ 678.837852][T17695] do_syscall_64+0x136/0x3c0 [ 678.837890][T17695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.837910][T17695] RIP: 0033:0x7f1c58bcce59 [ 678.837924][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.837942][T17695] RSP: 002b:00007f1c57627028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 678.838014][T17695] RAX: ffffffffffffffda RBX: 00007f1c58e45fa0 RCX: 00007f1c58bcce59 [ 678.838031][T17695] RDX: 000000000000005a RSI: 0000200000000300 RDI: 0000000000000067 [ 678.838045][T17695] RBP: 00007f1c57627090 R08: 0000000000000000 R09: 0000000000000000 [ 678.838056][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.838075][T17695] R13: 00007f1c58e46038 R14: 00007f1c58e45fa0 R15: 00007ffd6813ff98 [ 678.838092][T17695] [ 679.010940][ T28] audit: type=1400 audit(1781875521.257:2162): avc: denied { write } for pid=17692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.109948][T17713] tmpfs: Bad value for 'mpol' [ 679.159006][T17720] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 679.171777][T17720] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.221625][T17716] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 679.568549][ T3560] Bluetooth: hci0: command 0x1003 tx timeout [ 679.574608][ T9567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 679.597183][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.674618][T17747] tmpfs: Bad value for 'mpol' [ 679.752409][T17762] FAULT_INJECTION: forcing a failure. [ 679.752409][T17762] name failslab, interval 1, probability 0, space 0, times 0 [ 679.765508][T17762] CPU: 0 UID: 0 PID: 17762 Comm: syz.2.3805 Not tainted syzkaller #0 PREEMPT(lazy) [ 679.765616][T17762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 679.765708][T17762] Call Trace: [ 679.765717][T17762] [ 679.765726][T17762] __dump_stack+0x1d/0x30 [ 679.765752][T17762] dump_stack_lvl+0x95/0xd0 [ 679.765776][T17762] dump_stack+0x15/0x1b [ 679.765797][T17762] should_fail_ex+0x25e/0x270 [ 679.765817][T17762] should_failslab+0x8c/0xb0 [ 679.765925][T17762] __kmalloc_noprof+0xb8/0x4d0 [ 679.765946][T17762] ? tcf_idr_create+0x41/0x4a0 [ 679.765968][T17762] ? radix_tree_iter_tag_clear+0x105/0x180 [ 679.766048][T17762] tcf_idr_create+0x41/0x4a0 [ 679.766079][T17762] tcf_idr_create_from_flags+0x60/0x80 [ 679.766104][T17762] tunnel_key_init+0x460/0xf30 [ 679.766143][T17762] ? irqentry_exit+0x58f/0x610 [ 679.766241][T17762] ? __nla_validate_parse+0x16c7/0x1d70 [ 679.766365][T17762] ? __pfx_tunnel_key_init+0x10/0x10 [ 679.766390][T17762] tcf_action_init_1+0x395/0x4d0 [ 679.766507][T17762] tcf_action_init+0x29d/0x700 [ 679.766529][T17762] ? tick_program_event+0x79/0xc0 [ 679.766579][T17762] tc_ctl_action+0x29e/0x860 [ 679.766658][T17762] ? __pfx_tc_ctl_action+0x10/0x10 [ 679.766686][T17762] rtnetlink_rcv_msg+0x6a7/0x720 [ 679.766757][T17762] netlink_rcv_skb+0x11e/0x220 [ 679.766854][T17762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 679.766886][T17762] rtnetlink_rcv+0x1c/0x30 [ 679.766916][T17762] netlink_unicast+0x5a7/0x680 [ 679.766936][T17762] netlink_sendmsg+0x5be/0x6f0 [ 679.766959][T17762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.766987][T17762] ____sys_sendmsg+0x532/0x580 [ 679.767043][T17762] ___sys_sendmsg+0x195/0x1e0 [ 679.767081][T17762] __x64_sys_sendmsg+0xd4/0x160 [ 679.767119][T17762] x64_sys_call+0x194c/0x3020 [ 679.767148][T17762] do_syscall_64+0x136/0x3c0 [ 679.767182][T17762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.767200][T17762] RIP: 0033:0x7f93d599ce59 [ 679.767216][T17762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.767232][T17762] RSP: 002b:00007f93d43f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.767297][T17762] RAX: ffffffffffffffda RBX: 00007f93d5c15fa0 RCX: 00007f93d599ce59 [ 679.767373][T17762] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 679.767385][T17762] RBP: 00007f93d43f7090 R08: 0000000000000000 R09: 0000000000000000 [ 679.767395][T17762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.767408][T17762] R13: 00007f93d5c16038 R14: 00007f93d5c15fa0 R15: 00007ffebc81e838 [ 679.767430][T17762] [ 680.025914][T17764] set_capacity_and_notify: 8 callbacks suppressed [ 680.025927][T17764] loop8: detected capacity change from 0 to 512 [ 680.065711][T17764] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 680.138533][T16714] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.212433][T17773] loop8: detected capacity change from 0 to 512 [ 680.228903][T17773] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.3809: Unrecognised inode hash code 255 [ 680.241111][T17773] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3809: Corrupt directory, running e2fsck is recommended [ 680.255362][T17773] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 680.263702][T17773] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.3809: corrupted in-inode xattr: e_name out of bounds [ 680.277641][T17773] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 680.278065][T17773] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3809: couldn't read orphan inode 15 (err -117) [ 680.299170][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 680.299189][ C0] EXT4-fs (loop8): initial error at time 1781875522: ext4_iget_extra_inode:5180: inode 15 [ 680.299228][ C0] EXT4-fs (loop8): last error at time 1781875522: ext4_iget_extra_inode:5180: inode 15 [ 680.327032][T17773] loop8: lost filesystem error report for type 5 error -117 [ 680.327680][T17773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.393603][T17782] tmpfs: Bad value for 'mpol' [ 680.446238][T17786] loop9: detected capacity change from 0 to 512 [ 680.459046][T15306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.510680][T17793] loop8: detected capacity change from 0 to 764 [ 680.559987][T17797] loop9: detected capacity change from 0 to 128 [ 680.588979][T17797] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 680.603986][T17797] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.714705][T17799] loop8: detected capacity change from 0 to 512 [ 680.748577][T17799] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 680.893621][T17814] tmpfs: Bad value for 'mpol' [ 681.019212][T17820] loop8: detected capacity change from 0 to 512 [ 681.107818][T17829] loop8: detected capacity change from 0 to 764 [ 681.452647][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 681.619310][T17835] loop9: detected capacity change from 0 to 512 [ 681.627483][T17835] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 681.755096][T17847] tmpfs: Bad value for 'mpol' [ 681.899183][T17854] loop2: detected capacity change from 0 to 512 [ 682.045538][T17862] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 682.064613][T17862] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.080530][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 682.080543][ T28] audit: type=1400 audit(1781875524.407:2166): avc: denied { write } for pid=17861 comm="syz.2.3842" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 682.678591][T17878] tmpfs: Bad value for 'mpol' [ 682.997505][T16145] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 683.057353][T17905] tmpfs: Bad value for 'mpol' [ 683.948489][T17931] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 683.987390][T17931] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.017856][ T28] audit: type=1400 audit(1781875526.367:2167): avc: denied { write } for pid=17930 comm="syz.9.3869" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.124926][T17939] tmpfs: Bad value for 'mpol' [ 684.161224][T17942] EXT4-fs: inline encryption not supported [ 684.175254][T17944] FAULT_INJECTION: forcing a failure. [ 684.175254][T17944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.213581][T17942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.225813][T17944] CPU: 1 UID: 0 PID: 17944 Comm: syz.3.3875 Not tainted syzkaller #0 PREEMPT(lazy) [ 684.225839][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.225854][T17944] Call Trace: [ 684.225862][T17944] [ 684.225949][T17944] __dump_stack+0x1d/0x30 [ 684.225974][T17944] dump_stack_lvl+0x95/0xd0 [ 684.226018][T17944] dump_stack+0x15/0x1b [ 684.226039][T17944] should_fail_ex+0x25e/0x270 [ 684.226131][T17944] should_fail+0xb/0x20 [ 684.226153][T17944] should_fail_usercopy+0x1a/0x20 [ 684.226268][T17944] _copy_from_user+0x1c/0xb0 [ 684.226354][T17944] get_timespec64+0x4c/0x100 [ 684.226386][T17944] __x64_sys_recvmmsg+0xa3/0x170 [ 684.226413][T17944] x64_sys_call+0x80f/0x3020 [ 684.226475][T17944] do_syscall_64+0x136/0x3c0 [ 684.226494][T17944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.226512][T17944] RIP: 0033:0x7f5e276ace59 [ 684.226525][T17944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.226545][T17944] RSP: 002b:00007f5e26107028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 684.226631][T17944] RAX: ffffffffffffffda RBX: 00007f5e27925fa0 RCX: 00007f5e276ace59 [ 684.226644][T17944] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 684.226659][T17944] RBP: 00007f5e26107090 R08: 0000200000003700 R09: 0000000000000000 [ 684.226674][T17944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.226689][T17944] R13: 00007f5e27926038 R14: 00007f5e27925fa0 R15: 00007fff60877198 [ 684.226712][T17944] [ 684.388985][ T28] audit: type=1400 audit(1781875526.748:2168): avc: denied { write } for pid=17941 comm="syz.5.3874" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.657500][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.199704][T17973] set_capacity_and_notify: 10 callbacks suppressed [ 685.199798][T17973] loop3: detected capacity change from 0 to 512 [ 685.213132][T17970] tmpfs: Bad value for 'mpol' [ 685.276007][T17980] loop3: detected capacity change from 0 to 764 [ 685.280105][T17982] loop9: detected capacity change from 0 to 128 [ 685.306787][T17982] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 685.319962][T17982] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.343401][ T28] audit: type=1400 audit(1781875527.698:2169): avc: denied { write } for pid=17981 comm="syz.9.3890" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 685.380943][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.826809][T18006] tmpfs: Bad value for 'mpol' [ 685.988616][T18010] loop2: detected capacity change from 0 to 512 [ 686.157208][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 686.335039][T17999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.368749][T18016] loop2: detected capacity change from 0 to 764 [ 686.473829][T18022] loop3: detected capacity change from 0 to 2048 [ 686.774442][T18020] loop5: detected capacity change from 0 to 1024 [ 686.827966][T18019] syz.3.3902 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 686.842100][T18019] CPU: 0 UID: 0 PID: 18019 Comm: syz.3.3902 Not tainted syzkaller #0 PREEMPT(lazy) [ 686.842168][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.842183][T18019] Call Trace: [ 686.842191][T18019] [ 686.842200][T18019] __dump_stack+0x1d/0x30 [ 686.842222][T18019] dump_stack_lvl+0x95/0xd0 [ 686.842239][T18019] dump_stack+0x15/0x1b [ 686.842261][T18019] dump_header+0x80/0x240 [ 686.842312][T18019] oom_kill_process+0x295/0x350 [ 686.842340][T18019] out_of_memory+0x981/0xbc0 [ 686.842423][T18019] try_charge_memcg+0x621/0xa00 [ 686.842456][T18019] __memcg_kmem_charge_page+0x199/0x3a0 [ 686.842478][T18019] __alloc_frozen_pages_noprof+0x18a/0x350 [ 686.842519][T18019] alloc_pages_mpol+0xa9/0x1d0 [ 686.842548][T18019] alloc_pages_noprof+0x8f/0x140 [ 686.842576][T18019] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 686.842614][T18019] __kvmalloc_node_noprof+0x3d4/0x640 [ 686.842632][T18019] ? futex_hash_allocate+0x192/0x920 [ 686.842715][T18019] ? hrtimer_start_range_ns+0x108/0x120 [ 686.842739][T18019] ? futex_hash_allocate+0x192/0x920 [ 686.842791][T18019] futex_hash_allocate+0x192/0x920 [ 686.842816][T18019] ? cap_task_prctl+0x13f/0x6b0 [ 686.842848][T18019] futex_hash_prctl+0xd8/0xf0 [ 686.842865][T18019] __se_sys_prctl+0x4f4/0x13c0 [ 686.842950][T18019] __x64_sys_prctl+0x67/0x80 [ 686.842971][T18019] x64_sys_call+0x2533/0x3020 [ 686.842998][T18019] do_syscall_64+0x136/0x3c0 [ 686.843079][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.843105][T18019] RIP: 0033:0x7f5e276ace59 [ 686.843121][T18019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.843210][T18019] RSP: 002b:00007f5e26107028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 686.843253][T18019] RAX: ffffffffffffffda RBX: 00007f5e27925fa0 RCX: 00007f5e276ace59 [ 686.843269][T18019] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 686.843301][T18019] RBP: 00007f5e27742e6f R08: 0000000000000000 R09: 0000000000000000 [ 686.843314][T18019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.843328][T18019] R13: 00007f5e27926038 R14: 00007f5e27925fa0 R15: 00007fff60877198 [ 686.843351][T18019] [ 686.843367][T18019] memory: usage 307200kB, limit 307200kB, failcnt 61 [ 687.062422][T18029] FAULT_INJECTION: forcing a failure. [ 687.062422][T18029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.086652][T18029] CPU: 1 UID: 0 PID: 18029 Comm: syz.9.3906 Not tainted syzkaller #0 PREEMPT(lazy) [ 687.086720][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.086763][T18029] Call Trace: [ 687.086770][T18029] [ 687.086779][T18029] __dump_stack+0x1d/0x30 [ 687.086834][T18029] dump_stack_lvl+0x95/0xd0 [ 687.086852][T18029] dump_stack+0x15/0x1b [ 687.086868][T18029] should_fail_ex+0x25e/0x270 [ 687.086923][T18029] should_fail+0xb/0x20 [ 687.086943][T18029] should_fail_usercopy+0x1a/0x20 [ 687.086962][T18029] _copy_from_user+0x1c/0xb0 [ 687.086986][T18029] __copy_msghdr+0x242/0x300 [ 687.087106][T18029] ___sys_sendmsg+0x10c/0x1e0 [ 687.087144][T18029] __x64_sys_sendmsg+0xd4/0x160 [ 687.087187][T18029] x64_sys_call+0x194c/0x3020 [ 687.087209][T18029] do_syscall_64+0x136/0x3c0 [ 687.087229][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.087254][T18029] RIP: 0033:0x7f1905ffce59 [ 687.087267][T18029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.087317][T18029] RSP: 002b:00007f1904a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.087339][T18029] RAX: ffffffffffffffda RBX: 00007f1906275fa0 RCX: 00007f1905ffce59 [ 687.087395][T18029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 687.087408][T18029] RBP: 00007f1904a57090 R08: 0000000000000000 R09: 0000000000000000 [ 687.087420][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.087430][T18029] R13: 00007f1906276038 R14: 00007f1906275fa0 R15: 00007fffcf17bf18 [ 687.087447][T18029] [ 687.268887][T18019] memory+swap: usage 258312kB, limit 9007199254740988kB, failcnt 0 [ 687.277357][T18019] kmem: usage 250044kB, limit 9007199254740988kB, failcnt 0 [ 687.284841][T18019] Memory cgroup stats for /syz3: [ 687.285153][T18019] cache 532480 [ 687.294691][T18019] rss 118784 [ 687.298248][T18019] shmem 0 [ 687.302391][T18019] mapped_file 8192 [ 687.306303][T18019] dirty 8192 [ 687.315474][T18019] writeback 0 [ 687.319092][T18019] workingset_refault_anon 51 [ 687.323735][T18019] workingset_refault_file 203 [ 687.328686][T18019] swap 1101824 [ 687.332210][T18019] swapcached 23379968 [ 687.336215][T18019] pgpgin 645688 [ 687.340101][T18019] pgpgout 645519 [ 687.343958][T18019] pgfault 707514 [ 687.347916][T18019] pgmajfault 34 [ 687.359394][T18019] inactive_anon 131072 [ 687.373280][T18019] active_anon 24576 [ 687.395401][T18019] inactive_file 159744 [ 687.395985][T18020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 687.411623][T18020] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.426342][ T28] audit: type=1400 audit(1781875529.748:2170): avc: denied { write } for pid=18017 comm="syz.5.3903" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.443460][T18019] active_file 372736 [ 687.478366][T18019] unevictable 0 [ 687.487723][T18019] hierarchical_memory_limit 314572800 [ 687.503177][T18042] EXT4-fs (loop5): shut down requested (0) [ 687.539655][T18019] hierarchical_memsw_limit 9223372036854771712 [ 687.545827][T18019] total_cache 532480 [ 687.549818][T18019] total_rss 118784 [ 687.553614][T18019] total_shmem 0 [ 687.557086][T18019] total_mapped_file 8192 [ 687.565529][T18046] loop9: detected capacity change from 0 to 128 [ 687.577779][T18020] 9p: Bad value for 'rfdno' [ 687.582610][ T28] audit: type=1400 audit(1781875529.938:2171): avc: denied { mounton } for pid=18017 comm="syz.5.3903" path="/49/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.608799][T18019] total_dirty 8192 [ 687.612548][T18019] total_writeback 0 [ 687.616362][T18019] total_workingset_refault_anon 51 [ 687.632722][T18019] total_workingset_refault_file 203 [ 687.638592][T18019] total_swap 1101824 [ 687.642721][T18019] total_swapcached 23379968 [ 687.650136][T18046] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 687.665243][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 687.692542][T18046] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.725878][T18051] loop5: detected capacity change from 0 to 512 [ 687.754030][ T28] audit: type=1400 audit(1781875530.088:2172): avc: denied { write } for pid=18044 comm="syz.9.3911" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.777226][T18049] tmpfs: Bad value for 'mpol' [ 687.783249][T18019] total_pgpgin 645688 [ 687.787341][T18019] total_pgpgout 645519 [ 687.791533][T18019] total_pgfault 707514 [ 687.795771][T18019] total_pgmajfault 34 [ 687.799945][T18019] total_inactive_anon 131072 [ 687.816530][T18019] total_active_anon 24576 [ 687.820985][T18019] total_inactive_file 159744 [ 687.825627][T18019] total_active_file 372736 [ 687.830077][T18019] total_unevictable 0 [ 687.834044][T18019] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3902,pid=18018,uid=0 [ 687.848655][T18019] Memory cgroup out of memory: Killed process 18019 (syz.3.3902) total-vm:94300kB, anon-rss:1360kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 687.887604][T18055] loop5: detected capacity change from 0 to 764 [ 688.231626][T18074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.246446][ T28] audit: type=1400 audit(1781875530.598:2173): avc: denied { write } for pid=18073 comm="syz.5.3921" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 688.487996][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 688.527534][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.548506][T18088] netlink: 'syz.2.3923': attribute type 1 has an invalid length. [ 688.553652][ T28] audit: type=1400 audit(1781875530.908:2174): avc: denied { map } for pid=18083 comm="syz.2.3923" path="pipe:[55816]" dev="pipefs" ino=55816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 688.590551][T18088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.688336][T18093] tmpfs: Bad value for 'mpol' [ 688.968402][T18112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 689.007110][T18112] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.064219][ T28] audit: type=1400 audit(1781875531.418:2175): avc: denied { write } for pid=18111 comm="syz.2.3935" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 689.103868][T18108] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 689.323845][T18129] tmpfs: Bad value for 'mpol' [ 689.354669][ T28] audit: type=1400 audit(1781875531.708:2176): avc: denied { bind } for pid=18133 comm="syz.8.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 689.408664][T18136] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 689.428101][T18136] EXT4-fs (loop9): 1 truncate cleaned up [ 689.434122][T18136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.451899][ T28] audit: type=1400 audit(1781875531.708:2177): avc: denied { write } for pid=18134 comm="syz.9.3943" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 689.488331][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.730867][T18166] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 689.880215][T18173] tmpfs: Bad value for 'mpol' [ 689.932979][T16145] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.219089][T18191] set_capacity_and_notify: 11 callbacks suppressed [ 690.219311][T18191] loop2: detected capacity change from 0 to 512 [ 690.429736][T18193] loop9: detected capacity change from 0 to 764 [ 690.781024][T18202] loop2: detected capacity change from 0 to 128 [ 691.061541][T18208] tmpfs: Bad value for 'mpol' [ 691.131787][T18206] loop9: detected capacity change from 0 to 512 [ 691.173782][T18206] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 691.249635][ T28] audit: type=1400 audit(1781875533.609:2178): avc: denied { getopt } for pid=18211 comm="syz.8.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 691.314075][T18212] loop8: detected capacity change from 0 to 256 [ 691.443184][T18215] loop2: detected capacity change from 0 to 128 [ 691.472890][T18215] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 691.524661][T18215] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.567976][ T28] audit: type=1400 audit(1781875533.919:2179): avc: denied { write } for pid=18214 comm="syz.2.3971" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.721410][T18224] loop5: detected capacity change from 0 to 764 [ 692.068211][T18235] loop3: detected capacity change from 0 to 4096 [ 692.134809][T18245] IPv6: sit1: Disabled Multicast RS [ 692.163465][T18246] netlink: 'syz.5.3982': attribute type 10 has an invalid length. [ 692.265824][T18235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.289223][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.296446][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.748775][T16145] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 693.158813][ T28] audit: type=1400 audit(1781875534.659:2180): avc: denied { write } for pid=18234 comm="syz.3.3979" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 693.180816][ T28] audit: type=1326 audit(1781875535.429:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 693.321823][ T28] audit: type=1326 audit(1781875535.429:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 693.481848][ T28] audit: type=1326 audit(1781875535.429:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 693.899121][ T28] audit: type=1326 audit(1781875535.429:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 694.011222][ T28] audit: type=1326 audit(1781875535.449:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 694.037089][ T28] audit: type=1326 audit(1781875535.449:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 694.091952][ T28] audit: type=1326 audit(1781875535.449:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 694.205123][ T28] audit: type=1326 audit(1781875535.459:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 694.240488][ T28] audit: type=1326 audit(1781875535.459:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18234 comm="syz.3.3979" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e276ace59 code=0x7ffc0000 [ 694.324345][T18270] loop9: detected capacity change from 0 to 512 [ 694.348898][T18270] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 694.378488][T18270] EXT4-fs (loop9): 1 truncate cleaned up [ 694.384633][T18270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.456208][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.470817][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.651664][T18276] loop2: detected capacity change from 0 to 764 [ 694.687772][T18280] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 694.699979][T18280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15888 sclass=netlink_route_socket pid=18280 comm=syz.9.3990 [ 694.891053][T18286] FAULT_INJECTION: forcing a failure. [ 694.891053][T18286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.939153][T18286] CPU: 0 UID: 0 PID: 18286 Comm: syz.3.3994 Not tainted syzkaller #0 PREEMPT(lazy) [ 694.939184][T18286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.939198][T18286] Call Trace: [ 694.939204][T18286] [ 694.939274][T18286] __dump_stack+0x1d/0x30 [ 694.939294][T18286] dump_stack_lvl+0x95/0xd0 [ 694.939339][T18286] dump_stack+0x15/0x1b [ 694.939358][T18286] should_fail_ex+0x25e/0x270 [ 694.939382][T18286] should_fail+0xb/0x20 [ 694.939398][T18286] should_fail_usercopy+0x1a/0x20 [ 694.939478][T18286] _copy_to_iter+0x37f/0xea0 [ 694.939500][T18286] ? __mod_memcg_lruvec_state+0x1bd/0x2b0 [ 694.939535][T18286] ? __rcu_read_unlock+0x4e/0x70 [ 694.939609][T18286] ? __account_obj_stock+0x111/0x5d0 [ 694.939635][T18286] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 694.939673][T18286] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 694.939710][T18286] __skb_datagram_iter+0xc6/0x680 [ 694.939804][T18286] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 694.939922][T18286] skb_copy_datagram_iter+0x3f/0xf0 [ 694.940026][T18286] netlink_recvmsg+0x1a8/0x550 [ 694.940207][T18286] ? __pfx_netlink_recvmsg+0x10/0x10 [ 694.940229][T18286] sock_recvmsg+0xf5/0x120 [ 694.940310][T18286] ____sys_recvmsg+0xf5/0x280 [ 694.940338][T18286] ___sys_recvmsg+0x11f/0x3a0 [ 694.940365][T18286] do_recvmmsg+0x1e5/0x560 [ 694.940454][T18286] ? fput+0x8f/0xc0 [ 694.940478][T18286] __x64_sys_recvmmsg+0xe5/0x170 [ 694.940502][T18286] x64_sys_call+0x80f/0x3020 [ 694.940546][T18286] do_syscall_64+0x136/0x3c0 [ 694.940564][T18286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.940713][T18286] RIP: 0033:0x7f5e276ace59 [ 694.940729][T18286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.940745][T18286] RSP: 002b:00007f5e26107028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 694.940797][T18286] RAX: ffffffffffffffda RBX: 00007f5e27925fa0 RCX: 00007f5e276ace59 [ 694.940812][T18286] RDX: 0000000000000002 RSI: 0000200000001f40 RDI: 0000000000000003 [ 694.940823][T18286] RBP: 00007f5e26107090 R08: 0000000000000000 R09: 0000000000000000 [ 694.940834][T18286] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 694.940845][T18286] R13: 00007f5e27926038 R14: 00007f5e27925fa0 R15: 00007fff60877198 [ 694.940912][T18286] [ 695.647774][T18288] set_capacity_and_notify: 1 callbacks suppressed [ 695.647788][T18288] loop3: detected capacity change from 0 to 1024 [ 695.661121][T18288] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 695.823871][T18300] lo speed is unknown, defaulting to 1000 [ 695.843728][T18298] loop8: detected capacity change from 0 to 512 [ 695.851855][T18298] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 696.116975][T18306] loop8: detected capacity change from 0 to 512 [ 696.127739][T18306] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 696.172988][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4002'. [ 696.183226][T18300] gre0 speed is unknown, defaulting to 1000 [ 696.225994][T18306] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #17: comm syz.8.4001: inode has both inline data and extents flags [ 696.311207][T18306] loop8: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 696.311711][T18306] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4001: couldn't read orphan inode 17 (err -117) [ 696.345881][T18306] loop8: lost filesystem error report for type 5 error -117 [ 696.348838][T18306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.537401][T18317] loop5: detected capacity change from 0 to 764 [ 696.609526][T18306] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4001: bg 0: block 65: padding at end of block bitmap is not set [ 696.770339][T18306] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.4001: Failed to acquire dquot type 0 [ 697.071656][T18325] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 697.071656][T18325] The task syz.8.4001 (18325) triggered the difference, watch for misbehavior. [ 697.490617][T18325] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.4001: Failed to acquire dquot type 0 [ 697.630411][T18306] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.4001: Failed to acquire dquot type 0 [ 697.676708][T18306] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.4001: Failed to acquire dquot type 0 [ 697.837708][T15306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.228784][T18368] loop8: detected capacity change from 0 to 764 [ 698.401136][T18372] loop8: detected capacity change from 0 to 128 [ 698.410693][T18372] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 698.918225][T18372] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.031490][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 699.031514][ T28] audit: type=1400 audit(1781875541.390:2258): avc: denied { write } for pid=18371 comm="syz.8.4019" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 699.262766][T18393] FAULT_INJECTION: forcing a failure. [ 699.262766][T18393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.293083][T18393] CPU: 0 UID: 0 PID: 18393 Comm: syz.9.4025 Not tainted syzkaller #0 PREEMPT(lazy) [ 699.293107][T18393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.293131][T18393] Call Trace: [ 699.293137][T18393] [ 699.293143][T18393] __dump_stack+0x1d/0x30 [ 699.293183][T18393] dump_stack_lvl+0x95/0xd0 [ 699.293215][T18393] dump_stack+0x15/0x1b [ 699.293300][T18393] should_fail_ex+0x25e/0x270 [ 699.293344][T18393] should_fail+0xb/0x20 [ 699.293360][T18393] should_fail_usercopy+0x1a/0x20 [ 699.293380][T18393] _copy_from_user+0x1c/0xb0 [ 699.293468][T18393] ___sys_recvmsg+0xaa/0x3a0 [ 699.293489][T18393] ? _parse_integer+0x27/0x40 [ 699.293516][T18393] do_recvmmsg+0x1e5/0x560 [ 699.293569][T18393] ? get_timespec64+0xd2/0x100 [ 699.293593][T18393] __x64_sys_recvmmsg+0xfb/0x170 [ 699.293634][T18393] x64_sys_call+0x80f/0x3020 [ 699.293663][T18393] do_syscall_64+0x136/0x3c0 [ 699.293695][T18393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.293744][T18393] RIP: 0033:0x7f1905ffce59 [ 699.293758][T18393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.293786][T18393] RSP: 002b:00007f1904a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.293807][T18393] RAX: ffffffffffffffda RBX: 00007f1906275fa0 RCX: 00007f1905ffce59 [ 699.293820][T18393] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 699.293852][T18393] RBP: 00007f1904a57090 R08: 0000200000003700 R09: 0000000000000000 [ 699.293864][T18393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.293878][T18393] R13: 00007f1906276038 R14: 00007f1906275fa0 R15: 00007fffcf17bf18 [ 699.293903][T18393] [ 699.584600][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 699.609648][T15306] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 699.630697][T18405] loop9: detected capacity change from 0 to 764 [ 699.919924][T18412] loop5: detected capacity change from 0 to 512 [ 699.955389][T18412] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 700.003211][T18423] tmpfs: Bad value for 'mpol' [ 700.037882][T18426] FAULT_INJECTION: forcing a failure. [ 700.037882][T18426] name failslab, interval 1, probability 0, space 0, times 0 [ 700.050998][T18426] CPU: 0 UID: 0 PID: 18426 Comm: syz.9.4038 Not tainted syzkaller #0 PREEMPT(lazy) [ 700.051024][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.051039][T18426] Call Trace: [ 700.051046][T18426] [ 700.051052][T18426] __dump_stack+0x1d/0x30 [ 700.051120][T18426] dump_stack_lvl+0x95/0xd0 [ 700.051143][T18426] dump_stack+0x15/0x1b [ 700.051164][T18426] should_fail_ex+0x25e/0x270 [ 700.051212][T18426] should_failslab+0x8c/0xb0 [ 700.051274][T18426] kmem_cache_alloc_noprof+0x66/0x3f0 [ 700.051303][T18426] ? security_file_alloc+0x32/0xf0 [ 700.051354][T18426] security_file_alloc+0x32/0xf0 [ 700.051382][T18426] init_file+0x5b/0x1b0 [ 700.051446][T18426] alloc_empty_file+0x85/0x1e0 [ 700.051523][T18426] alloc_file_pseudo+0x92/0x120 [ 700.051553][T18426] hugetlb_file_setup+0x2a6/0x3d0 [ 700.051592][T18426] ksys_mmap_pgoff+0x13f/0x310 [ 700.051620][T18426] x64_sys_call+0x14df/0x3020 [ 700.051727][T18426] do_syscall_64+0x136/0x3c0 [ 700.051747][T18426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.051766][T18426] RIP: 0033:0x7f1905ffce59 [ 700.051780][T18426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.051829][T18426] RSP: 002b:00007f1904a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 700.051853][T18426] RAX: ffffffffffffffda RBX: 00007f1906275fa0 RCX: 00007f1905ffce59 [ 700.051869][T18426] RDX: 000000000000000b RSI: 0000000000800000 RDI: 0000200000000000 [ 700.051882][T18426] RBP: 00007f1904a57090 R08: ffffffffffffffff R09: 0000000000000000 [ 700.051922][T18426] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 700.051936][T18426] R13: 00007f1906276038 R14: 00007f1906275fa0 R15: 00007fffcf17bf18 [ 700.051954][T18426] [ 700.704863][T18443] infiniband syz2: set active [ 700.709679][T18443] infiniband syz2: added bond_slave_1 [ 700.722637][T18443] RDS/IB: syz2: added [ 700.727002][T18443] smc: adding ib device syz2 with port count 1 [ 700.733348][T18443] smc: ib device syz2 port 1 has no pnetid [ 701.168403][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4045'. [ 701.182295][T18449] ucma_write: process 269 (syz.2.4046) changed security contexts after opening file descriptor, this is not allowed. [ 701.299810][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4051'. [ 701.310884][T18460] bridge_slave_1: left allmulticast mode [ 701.339020][T18460] bridge_slave_1: left promiscuous mode [ 701.353282][T18460] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.370153][T18460] bridge_slave_0: left allmulticast mode [ 701.390896][T18460] bridge_slave_0: left promiscuous mode [ 701.396933][T18460] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.544970][T18476] loop2: detected capacity change from 0 to 512 [ 701.628349][T18476] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 702.396604][T18460] bridge0 (unregistering): left allmulticast mode [ 702.571858][T18479] loop5: detected capacity change from 0 to 256 [ 702.598741][T18483] netlink: 'syz.8.4058': attribute type 29 has an invalid length. [ 702.607490][T18483] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4058'. [ 702.806532][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4060'. [ 702.967375][T18495] loop5: detected capacity change from 0 to 1024 [ 703.016221][T18495] EXT4-fs: Ignoring removed bh option [ 703.086617][T18495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.132952][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.307677][T18508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.389663][T18512] loop5: detected capacity change from 0 to 1764 [ 703.396777][T18512] iso9660: Unknown parameter 'utfE' [ 703.417777][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4068'. [ 703.518665][T18508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.558789][T18507] netlink: 'syz.3.4067': attribute type 31 has an invalid length. [ 703.808331][T18524] tmpfs: Bad value for 'mpol' [ 703.853484][T18529] tmpfs: Bad value for 'mpol' [ 704.096140][T18543] loop5: detected capacity change from 0 to 764 [ 704.153948][T18546] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4079'. [ 704.341732][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4081'. [ 704.452746][ T9926] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.463210][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4081'. [ 704.489080][ T9926] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.572769][ T9926] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.603856][ T9926] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.114658][T18562] tmpfs: Bad value for 'mpol' [ 705.127921][ T9921] bridge_slave_1: left allmulticast mode [ 705.150273][ T9921] bridge_slave_1: left promiscuous mode [ 705.162845][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.183204][ T9921] bridge_slave_0: left allmulticast mode [ 705.193810][ T9921] bridge_slave_0: left promiscuous mode [ 705.201214][T18565] netlink: 'syz.5.4084': attribute type 46 has an invalid length. [ 705.218027][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.308292][ T9921] bond1 (unregistering): (slave geneve2): Releasing active interface [ 705.347854][ T9921] bond1 (unregistering): Released all slaves [ 705.363468][ T9921] bond0 (unregistering): Released all slaves [ 705.382506][T18569] loop3: detected capacity change from 0 to 128 [ 705.417373][T18569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 705.553834][ T9921] tipc: Left network mode [ 705.569866][T18569] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.619602][ T28] audit: type=1400 audit(1781875547.981:2259): avc: denied { write } for pid=18567 comm="syz.3.4085" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 705.681876][T18576] loop5: detected capacity change from 0 to 128 [ 705.772953][ T9921] hsr_slave_0: left promiscuous mode [ 705.780098][ T9921] hsr_slave_1: left promiscuous mode [ 705.786006][ T9921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.793596][ T9921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.803698][ T9921] batman_adv: batadv0: Removing interface: ipvlan2 [ 705.811278][T18576] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 705.827655][T18576] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.893817][ T28] audit: type=1400 audit(1781875548.221:2260): avc: denied { write } for pid=18575 comm="syz.5.4087" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 705.930129][ T9921] team0 (unregistering): Port device team_slave_1 removed [ 706.057404][T18587] loop9: detected capacity change from 0 to 764 [ 706.092222][T18589] loop9: detected capacity change from 0 to 128 [ 706.101949][T18589] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 706.114466][T18589] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 706.165386][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.175432][T14100] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.203392][T18592] loop9: detected capacity change from 0 to 512 [ 706.223623][T18592] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 706.240652][T18592] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 706.260773][T18592] EXT4-fs (loop9): orphan cleanup on readonly fs [ 706.273488][T18592] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.4092: Allocating blocks 41-42 which overlap fs metadata [ 706.287852][T18592] loop9: lost filesystem error report for type 5 error -117 [ 706.288159][T18592] EXT4-fs (loop9): Remounting filesystem read-only [ 706.295501][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 706.295522][ C1] EXT4-fs (loop9): initial error at time 1781875548: ext4_mb_mark_diskspace_used:4222 [ 706.295540][ C1] EXT4-fs (loop9): last error at time 1781875548: ext4_mb_mark_diskspace_used:4222 [ 706.357218][T18592] Quota error (device loop9): write_blk: dquota write failed [ 706.364734][T18592] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 706.374941][T18592] EXT4-fs (loop9): 1 truncate cleaned up [ 706.380940][T18592] EXT4-fs (loop9): pa ffff8881075a82a0: logic 1, phys. 41, len 23 [ 706.389682][T18592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 706.440912][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.486527][T18606] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 706.514733][T18606] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 706.531184][T18606] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 706.555859][T18606] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 706.564391][T18606] System zones: 0-2, 18-18, 34-35 [ 706.569374][T18609] syzkaller0: entered promiscuous mode [ 706.570476][T18606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.589374][T18609] syzkaller0: entered allmulticast mode [ 706.591881][T16714] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.606934][T18606] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #12: comm syz.2.4097: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 706.747716][ T28] audit: type=1400 audit(1781875549.051:2261): avc: denied { write } for pid=18605 comm="syz.2.4097" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 706.771853][T16145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.795325][T18618] set_capacity_and_notify: 1 callbacks suppressed [ 706.795337][T18618] loop2: detected capacity change from 0 to 764 [ 708.699720][T18633] loop3: detected capacity change from 0 to 128 [ 708.710504][T18629] loop2: detected capacity change from 0 to 512 [ 708.828862][T18633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 708.836014][T18638] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 708.854264][T18638] bond1 (unregistering): Released all slaves [ 708.860533][T18633] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.880838][ T28] audit: type=1400 audit(1781875551.232:2262): avc: denied { write } for pid=18632 comm="syz.3.4105" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 708.946260][T18646] lo speed is unknown, defaulting to 1000 [ 709.020031][T18646] gre0 speed is unknown, defaulting to 1000 [ 709.034160][T18648] loop5: detected capacity change from 0 to 1024 [ 709.050570][T18648] EXT4-fs: Ignoring removed bh option [ 709.088840][T18648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.133795][T16714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.268695][T18638] loop9: detected capacity change from 0 to 512 [ 709.286297][T18638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.299006][T18638] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.344927][T16128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.394740][T18663] loop9: detected capacity change from 0 to 764 [ 709.569576][T14100] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.839545][T18684] loop2: detected capacity change from 0 to 512 [ 709.846993][T18684] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 709.924945][T18686] loop2: detected capacity change from 0 to 4096 [ 709.934851][T18686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.967878][ T28] audit: type=1400 audit(1781875552.322:2263): avc: denied { write } for pid=18685 comm="syz.2.4120" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 710.231107][ T28] audit: type=1326 audit(1781875552.572:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d599ce59 code=0x7ffc0000 [ 710.256821][ T28] audit: type=1326 audit(1781875552.572:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d599ce59 code=0x7ffc0000 [ 710.282451][ T28] audit: type=1326 audit(1781875552.572:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d599ce59 code=0x7ffc0000 [ 710.624456][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 710.624473][ T28] audit: type=1326 audit(1781875552.962:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d599ce59 code=0x7ffc0000 [ 710.696128][ T28] audit: type=1326 audit(1781875552.962:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d599ce59 code=0x7ffc0000 [ 710.736902][ T28] audit: type=1326 audit(1781875553.002:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 710.762608][ T28] audit: type=1326 audit(1781875553.002:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 710.824450][ T28] audit: type=1326 audit(1781875553.012:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 710.862578][ T28] audit: type=1326 audit(1781875553.012:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 710.891652][ T28] audit: type=1326 audit(1781875553.012:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 710.917456][ T28] audit: type=1326 audit(1781875553.012:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 711.119640][ T28] audit: type=1326 audit(1781875553.012:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 711.145463][ T28] audit: type=1326 audit(1781875553.012:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18685 comm="syz.2.4120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93d595d68e code=0x7ffc0000 [ 711.635333][T18704] loop8: detected capacity change from 0 to 764 [ 711.873808][T16145] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.930841][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4127'. [ 711.982256][T18716] loop2: detected capacity change from 0 to 128 [ 712.010616][T18716] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 712.026124][T18716] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.056603][T18714] loop8: detected capacity change from 0 to 512 [ 712.097767][T18714] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 712.181281][T18723] IPv6: sit1: Disabled Multicast RS [ 712.193945][T18723] netlink: 'syz.8.4131': attribute type 10 has an invalid length. [ 712.256624][T18727] loop8: detected capacity change from 0 to 128 [ 712.266273][T18727] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 712.285443][T18727] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.821673][T16145] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.989256][T18739] loop3: detected capacity change from 0 to 764 [ 713.342604][T15306] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.551956][T18755] tmpfs: Bad value for 'mpol' [ 713.719921][T18760] tmpfs: Bad value for 'mpol' [ 714.128091][T18767] loop3: detected capacity change from 0 to 128 [ 714.152630][T18767] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 714.207460][T18767] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.740508][T18775] loop8: detected capacity change from 0 to 764 [ 715.445045][T14100] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 715.644240][T18795] netlink: 'syz.9.4154': attribute type 1 has an invalid length. [ 715.653981][T18798] loop3: detected capacity change from 0 to 1024 [ 715.657851][T18798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 715.674616][T18795] bond1: entered allmulticast mode [ 715.685384][T18798] __quota_error: 63 callbacks suppressed [ 715.685450][T18798] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 715.701955][T18798] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 715.711706][T18798] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.4156: Failed to acquire dquot type 0 [ 715.723291][T18798] loop3: lost filesystem error report for type 5 error -5 [ 715.732149][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 715.745754][ C0] EXT4-fs (loop3): initial error at time 1781875558: ext4_acquire_dquot:7041 [ 715.754580][ C0] EXT4-fs (loop3): last error at time 1781875558: ext4_acquire_dquot:7041 [ 715.822682][T18798] EXT4-fs (loop3): 1 truncate cleaned up [ 715.833553][T18798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.892750][T18807] loop8: detected capacity change from 0 to 512 [ 715.930622][T14100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.977643][T18813] loop8: detected capacity change from 0 to 764 [ 716.140649][T18818] loop8: detected capacity change from 0 to 128 [ 716.182237][T18818] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 716.222761][T18818] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.235889][ T28] audit: type=1400 audit(1781875558.593:2451): avc: denied { write } for pid=18816 comm="syz.8.4164" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 716.257953][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4165'. [ 716.314230][T18828] tmpfs: Bad value for 'mpol' [ 716.390369][T18832] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 716.407465][T18832] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.429743][ T28] audit: type=1400 audit(1781875558.783:2452): avc: denied { write } for pid=18830 comm="syz.9.4178" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 716.967934][T15306] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 717.262977][T16128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 717.295591][T18848] set_capacity_and_notify: 1 callbacks suppressed [ 717.295613][T18848] loop9: detected capacity change from 0 to 764 [ 717.377792][T18852] loop3: detected capacity change from 0 to 764 [ 717.431251][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4177'. [ 717.554291][T18868] gretap1: entered promiscuous mode [ 717.645712][T18867] loop3: detected capacity change from 0 to 512 [ 717.661419][T18874] loop2: detected capacity change from 0 to 764 [ 717.668477][T18867] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 717.799616][T18876] loop8: detected capacity change from 0 to 512 [ 717.848643][T18881] loop3: detected capacity change from 0 to 512 [ 717.852195][T18876] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.867462][T18876] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.888054][T18881] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 718.103630][T15306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.245885][T18914] loop2: detected capacity change from 0 to 764 [ 719.311447][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4197'. [ 719.462852][T18920] loop2: detected capacity change from 0 to 512 [ 719.469942][T18920] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 719.584125][T18922] loop3: detected capacity change from 0 to 512 [ 719.596492][T18922] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 720.248889][T18956] tmpfs: Bad value for 'mpol' [ 720.280668][T18962] loop8: detected capacity change from 0 to 512 [ 720.295848][T18962] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 720.308491][T18962] EXT4-fs (loop8): 1 truncate cleaned up [ 720.314756][T18962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.343179][ T28] audit: type=1400 audit(1781875562.694:2453): avc: denied { write } for pid=18961 comm="syz.8.4212" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 720.544279][T15306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.626646][T18960] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 722.058156][ T4396] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 722.131555][ T4396] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.791067][T19009] tmpfs: Bad value for 'mpol' [ 722.804273][T19007] set_capacity_and_notify: 1 callbacks suppressed [ 722.804330][T19007] loop2: detected capacity change from 0 to 512 [ 722.822873][T19007] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 723.065387][T19014] loop9: detected capacity change from 0 to 764 [ 723.088361][T19021] loop2: detected capacity change from 0 to 512 [ 723.112100][T19014] iso9660: Unknown parameter '' [ 723.143917][T19021] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 723.293832][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4230'. [ 723.456920][ T2980] ================================================================== [ 723.465057][ T2980] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 723.473085][ T2980] [ 723.475440][ T2980] write to 0xffff888100715330 of 8 bytes by task 13771 on cpu 0: [ 723.483171][ T2980] dentry_unlink_inode+0x65/0x260 [ 723.488220][ T2980] d_delete+0x164/0x180 [ 723.492401][ T2980] d_delete_notify+0x32/0x100 [ 723.497108][ T2980] vfs_unlink+0x287/0x490 [ 723.501454][ T2980] filename_unlinkat+0x1dc/0x410 [ 723.506409][ T2980] __se_sys_unlink+0x2b/0xe0 [ 723.511019][ T2980] __x64_sys_unlink+0x1f/0x30 [ 723.515722][ T2980] x64_sys_call+0x2eb6/0x3020 [ 723.520414][ T2980] do_syscall_64+0x136/0x3c0 [ 723.525011][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.530911][ T2980] [ 723.533249][ T2980] read to 0xffff888100715330 of 8 bytes by task 2980 on cpu 1: [ 723.540797][ T2980] step_into_slowpath+0x12c/0x4c0 [ 723.545855][ T2980] path_lookupat+0x2eb/0x4c0 [ 723.550456][ T2980] filename_lookup+0x18f/0x390 [ 723.555242][ T2980] do_readlinkat+0x74/0x2f0 [ 723.559766][ T2980] __x64_sys_readlink+0x47/0x60 [ 723.564645][ T2980] x64_sys_call+0x2b51/0x3020 [ 723.569342][ T2980] do_syscall_64+0x136/0x3c0 [ 723.573941][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.579848][ T2980] [ 723.582178][ T2980] value changed: 0xffff888157f6eeb8 -> 0x0000000000000000 [ 723.589290][ T2980] [ 723.591660][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 723.597819][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 723.606674][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.616750][ T2980] ================================================================== [ 723.680470][T19042] tmpfs: Bad value for 'mpol'