last executing test programs: 3m27.016188753s ago: executing program 2 (id=4382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x8044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[], 0x40c4}}, 0x0) 3m26.954344184s ago: executing program 2 (id=4384): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m26.745338759s ago: executing program 2 (id=4388): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xc5}, 0x108084, 0x2, 0x7d5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x8, 0xe) write(r0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f00000005c0)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) recvmsg(r5, 0x0, 0x20000020) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0], 0x6, 0x807, &(0x7f0000000280)="$eJzs3U1oHOf5APBnFMmW5WBM/n/cYGxn7KTggKOspESpyCHZrEbyJNKu2F0Vm1JSE8tBWE6C3dDal8QUkra0lJ566CHNNbfeWgot9NDmVGgOvfQWyKmk0C/ShhaV2dmVJVtf/k7q309IMzvzvPM+72g1z4yknQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJLaZKUyksRMXp8/kW6sNtlszG6yvre9X62ZrPHsmn4jkuIzBgfjk7+Vy/7/yup9xZcjcaB8dCAGi8lgXNq9b+/T/9ff12u/SUI36vA245KIN4ukzp5aWlo4f93dxOB1N7l9vvuL627yz+Xi63RWz1uRz1anszRvNdKJ8fHK48enWulUPpO1Trba2Wxaa2bVdqOZHq09mo5MTIyl2fDJxnx9erI6k/UWPvXYaKUynj4/PJdVm61G/fHno1U7ns/M5PXpTsxo5RtRxDxVPBFfyNtpO6vOpumZxaWFsa1SLYJG1ltxX/n8OfDI3o9e//CviwvFE3KjjSTdJ+boyMjo6Mj4kxNPPlWp9I9WRtcuqFwlViKiL6KIuC1PWj5Hbu0BHG5CX7f+x0zkUY/5OBHpOh8DUYvJaEYjZovHfxi4JqKrV/+/+Piff7dZv6vrf6/KP3hl9f7o1P9D5aNDG9X/dXO9kx8X4mJcirNxKpZiKRbi/F3PaIuPvpvdQrL60b/uj4h65NGKRuQxG9WYjizS7pI0JmI8xqMSL8bxmIpWpDEVecxEFq04Ga1oR9Z5RtWiGVlUox2NaEYaR6MWj0YaIzEREzEWaWQxHCejEfNRj+mYjGpnK2disbPfx67Kct+u+PnLv//onbQou72gkU0GnxQnc0XQXzYZe1+MXkf9X14uzheujlD/7wE7Nlt5G47icGOWe/UfAAAA+J+VdH77Xlz/D8TBztxUPpN95W6nBQAAANxCnb/8HygmA8XcwUiK6//KOpEf3PHcAAAAgFsj6bzGLomIoXionDsTi/FmLMR6vwSIiL13OkUAAADgJnX+/n+omAxFvNFZ0LtdygbX/wAAAMDnzbc3usf+h7177Lbmdia/HIiIgeTy3IlHknPVIq567r6yXXfy5ZUttqf2J3u6G+lMxvsv7U4ior+WHUh6d7/8985y+nHn6/7+leYb3es/aTaLBHYVfa+XQGyeQOdRfC8OlzGHT3cmu7tN+pOyl6GpfCYbrjVmnu7cErH4bL/+yuI3I4rev1Of3ZPEmcWlheGXXl063dkZl4vml891b6CYRPRvN5fl7h6IgzG4ozu7esQDnRdidPsdKvutrP4G9JVt+jYff7K6z7fiSBlzZKicDvXWlH0OFn2ODD89EtXqnr52dqL9+vKq0RdZFFmvjHxg9ch/vHubI38rHi5jHj76cDlZJ4vRNVm8clUWi0sLo6v3//b2xbazeOfwGyf+8ZtGko1tlcXYdWSxfF/E1VkA3C1nOnf9KatQMdnVqbufLpeK+l/W3Z29urur13Ibx9q/X+ll5Syj135Vde+PXnXvVbe+lQPj9qr7cpRH9KNlzNHyfKJ/fzeurLRlXamsc0R/bfG133aP6E+896OffPXQ+z/t9Lu6um0ji/KI/l48WsZ0J/HArzeoscWYv79SSUY6o3+3aPHulX7/s7bf1sxo0jnF+Pq512LfhYuXHls8d+rlhZcXXhkdHRuvPFGpPDnaO5kY6JwxbJIpAPeurd9jZ8OIXp1JniiuqgdXbfT02uu5B1b+pWA4XopXYylOx7HOqw0i4qH1+x1a9W8Ix7a4ar0SOxLHtri2vBI7em1sEhvEjq0a3Bd+2Jl8chu+GQBwhxzZog4nceT9buhGZwjJsY2uu6+po0Utv+rqODau5ev50u3cGQBwj8iaHydD7beTZjOfe3FkYmKk2j5+f9ps1F5Im/nkdJbm9XbWrB2v1qezdK7ZaDdqvV8cT2attDU/N9dottOpRjONvlZ+ovPO72n3rd9b2Wy13s5rrbmZrNrK0lqj3q7W2ulk3qqlc/PPzeSt41mz07g1l9XyqbxWbeeNetpqzDdr2XCatrJsVWA+mdXb+VRezNbTuWY+W21ejoiZ+dksncxatWY+126UG+z1ldenGs3ZzmaHrx3+n+70/gaAz4ILFy+dPbW0tHD+xmb+uJ3guz1GAGAtVRoAAAAAAAAAAAAAAD77Lly8dHYwlhbO7+29EKBYehOvCLy+mZ1x27u4Z2eKb+RnII0bmzl4/63ZzteeeebsRjHPvfHg8e1tp/uT0h9bvtT17T0RO372g3LJsxsHf6v783dr9tgHEXEDzZeTdVZ9ulzOrDlM7LjzRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNZ/AwAA//9O51ic") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x81ff, &(0x7f0000000040)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x800e0000, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0xffffff81, 0x0, 0x6000}, 0x40004) 3m26.575609593s ago: executing program 2 (id=4389): bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffd5a, 0xef, 0x7, 0x0, 0xfc, 0x0, 0x0, 0xc9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x103138, 0x2000000000, 0x0, 0x5, 0x1, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x1, 0x8, @local, 0xf}, 0x1c, 0x0}, 0x801) clock_gettime(0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) mkdir(0x0, 0x1cb) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045010}, 0x4040000) 3m26.28136765s ago: executing program 2 (id=4396): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, &(0x7f0000000080)="dfffc1c11a379f2e0c8f", 0xa, 0x10, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 3m26.015111955s ago: executing program 2 (id=4400): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000080)={0x5, 0xbc}) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000000c0)=0x1, 0x5, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="f95b05e710c880b12c5802baa0262cab36faddf42e079e555b332237560e22f372bb78bcd4b3306a69079b57e4f65a1ee9062ddd642f3926e1a1309be9bde0c89aed26ee156683e4eb4618", 0x4b, r1}, 0x68) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x3, 0x6, 0x8, 0x5, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffff7}, @ldst={0x3, 0x3, 0x2, 0x6, 0x3, 0x40, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', r3, 0x19, r1, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0x9, 0x4}, 0x10, 0x93d, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r4, r5, r1], 0x0, 0x10, 0x10000}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000780)={@multicast, @empty, @void, {@arp={0x806, @generic={0x204, 0x79a2, 0x6, 0x8, 0x4, @local, "f1c9bae2c1864999", @random="af5925ddc250", "35b7d86cb62a8f75"}}}}, &(0x7f00000007c0)={0x0, 0x3, [0x617, 0xb32, 0x11c, 0xda7]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000b40)={r1, &(0x7f0000000a40)='%pK \x00', 0x800, &(0x7f0000000a80)={@align=0x7fffffffffffffff, {0x6, 0x6, 0x4, 0x1}}, 0xfd2a, &(0x7f0000000ac0), &(0x7f0000000b00)=0x6}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={r2, 0x5011, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x25, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x4, 0x3, 0x8, 0xffffffffffffffc0, 0x10}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x9fd7, 0xa3, &(0x7f0000000980)=""/163, 0x41000, 0x19, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000b80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0xf, 0x8c0, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r7, r5, r4, r1, r1, r1], &(0x7f0000000c80)=[{0x0, 0x2, 0x6}, {0x4, 0x4, 0x3, 0x9}, {0x3, 0x5, 0xd, 0x6}, {0x2, 0x3, 0xc, 0x9}], 0x10, 0x6}, 0x94) write$rfkill(r1, &(0x7f0000000d80)={0x2, 0x3, 0x1, 0x1}, 0x8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000dc0)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000e00)={@any, 0x5}) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000e40)={0x6, 0x96e2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e80)={0x0, 0x2, 0x0, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001280)={0x3, 0x4, @start={r8, 0x0, "07407f222d617b7502cc65000c2334e38c1cb4dac4f14a925b6bffcc3f9adf6737d02a0867757227409952565147fee49e1dcc9b6fc48b9ecbb4d444770915ab65571ea9a0821e3c7c12f7fd7528a40e319d8da9ba04f96339ea6b0d170055be9ebe014e7c1466cc08ddc61d248c9af57d587ab459457fabdeff3558a37060de6a1ab36a56a453d98d671f1f4aa5256ea7b213628f089e44893d3d2b661a167bce448929ba5aa0e541dffd3a646f5b3fbd6ea755465fab71e32f51bed92b62750fbc21f6291100bcb3b581436c273bc6038ba2da0d1442cbcd5898a839cad13960d59556ff2e39241e2e187c76ac50033ff31c18172b82ed4d1c5c2a7a91476aa5cea041923cb3701352122f4d6f444383dd103330314f7378dcba2e4b3944d064ef5cb50820ec2d5671bc513cd85bdd50c61f51e2deee7cb6e682aa554aa16396e07154cb7213ae44875daf01bfffd7454fa269e06de90c0eff80972c356b11afd38d9d84b9232b775c3939d6158cadbc26555845bf5627b246f9e8d6ac7bea18dc52209734accc26058fd6e21ed37457c4ee77033b9687b760fd5eb26b77e089d6dcfc99c22389b46dac098ab5531d1362e5613551864eabf850d645947957f4e8666b701e0bbb3c9072a84aef6fdc856a8cf8dcd06a78a74221036dffcf5d07430ede15cfbc7e659ce25963546418204bb1680455cafd14932d9433e1b75eea2c0aa9a06d6ca8d2a87170d68f27b4e3d0295a966099cc703394d561e981a4451c43559faca7044ba17219876188ece0d746f216aea7c2dcfab822cd2d7d00ba1eb667a0b38b9887bc9518a44b85c4fadcca2db18b33110778f191fffad50718c572d0cb5ce2ecd874ff8dbb6018f72d64ae528ece4c7f97762879d3b57dc47de72fbccdb7e696c0049c4a2fd4911907e477c2e523d27881fb4907e0f7c938cc756e8ffa22771299ae5d7287567aa87d167f960093265d731f7bc309e074f1dc14b161769c1e8f2c72157463e08af6b06f9dc0b0efc9eaba72e81619abcddaf738d4e29c30a9f7e0c6616ca8936e77101ba69ee6b41346bca3c849737ad0325da9746cc3a43b0cdd12cd92038e2175cc918151094bdf4fd724664a9b3905367104c7526b961c4c81f17601fd9daf8530e8f65069e277755de449ace3599ae9c1762d45214fd2c6f1f4762fce1e31bcf3d637cd9223a0d8b5e3e610a9ebb52a929b1d5d6a64fb46641aa83f00433e59e528f9a3011acf5bc893a24bc7ff307de78a19b6727bfca2f054c865512f92cd8b9d38129bbc349d7d43aff294d13728fa78394334f8d217ffdeaa4ac6e0cf0f886fdf4efce32f86121a4689a7f2672a7c0bb4035024bf9db9ad5951d9968e3118316df621ccc3d0d5255aeb21decaa2d2038f35f45dbbefef4a48cb34ec20259fe6b0d81d33b76057dd2414d82073f74d", "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"}, [0x4e, 0x401, 0x6cff, 0x1, 0x6, 0x2, 0x9, 0x2, 0x2, 0xb0c, 0x1, 0x7f, 0x481b, 0x89c9, 0x9, 0x1, 0x6, 0xfffffffffffffff4, 0x1ff, 0x59, 0x7, 0x4, 0x1000, 0x1, 0x5, 0x7, 0x3, 0x9, 0x6, 0x6, 0x8, 0x9, 0x1, 0x1, 0x4, 0x2, 0x8, 0x3ff, 0x6, 0x7, 0xa4a, 0x8, 0x623, 0xfff, 0x7, 0xd, 0x39, 0xacf, 0x8c, 0x7, 0x9, 0x5cd5, 0x9, 0x8e5, 0x2, 0x6, 0x1, 0x9, 0x8, 0x9, 0x8, 0x1, 0x0, 0x8]}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001cc0)=""/21) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d00)={0x0, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x4}}, 0x4, 0xa1, 0x8, 0x10000, 0x3a, 0xd87e, 0xfd}, &(0x7f0000001dc0)=0x9c) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r9, 0x80186e82, &(0x7f0000001e40)={&(0x7f0000001e00)=[{0x3, 0x0, 0x7ff, 0xfffffffffffffffa, 0x9, 0x8, 0x8d, 0x80000000}], 0x1, 0x38, 0x0, 0x8000000000000000}) sendmsg$nl_route(r1, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)=@ipmr_delroute={0x4c, 0x19, 0x2, 0x70bd2c, 0x25dfdbfe, {0x80, 0xb4, 0x0, 0x1, 0xfc, 0x2, 0x0, 0x2, 0x3100}, [@RTA_IIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010102}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}, @RTA_NH_ID={0x8, 0x1e, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r10 = msgget$private(0x0, 0x9) getresuid(&(0x7f0000001fc0), &(0x7f0000002000)=0x0, &(0x7f0000002040)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) msgctl$IPC_SET(r10, 0x1, &(0x7f0000002300)={{0x0, r11, r12, 0x0, 0x0, 0x5d, 0x7}, 0x0, 0x0, 0x7e4, 0x8, 0x6, 0x0, 0x0, 0x40, 0x3, 0xef}) 3m26.004758876s ago: executing program 32 (id=4400): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000080)={0x5, 0xbc}) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000000c0)=0x1, 0x5, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)="f95b05e710c880b12c5802baa0262cab36faddf42e079e555b332237560e22f372bb78bcd4b3306a69079b57e4f65a1ee9062ddd642f3926e1a1309be9bde0c89aed26ee156683e4eb4618", 0x4b, r1}, 0x68) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x3, 0x6, 0x8, 0x5, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffff7}, @ldst={0x3, 0x3, 0x2, 0x6, 0x3, 0x40, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', r3, 0x19, r1, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0x9, 0x4}, 0x10, 0x93d, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r4, r5, r1], 0x0, 0x10, 0x10000}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000780)={@multicast, @empty, @void, {@arp={0x806, @generic={0x204, 0x79a2, 0x6, 0x8, 0x4, @local, "f1c9bae2c1864999", @random="af5925ddc250", "35b7d86cb62a8f75"}}}}, &(0x7f00000007c0)={0x0, 0x3, [0x617, 0xb32, 0x11c, 0xda7]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000b40)={r1, &(0x7f0000000a40)='%pK \x00', 0x800, &(0x7f0000000a80)={@align=0x7fffffffffffffff, {0x6, 0x6, 0x4, 0x1}}, 0xfd2a, &(0x7f0000000ac0), &(0x7f0000000b00)=0x6}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={r2, 0x5011, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x25, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x4, 0x3, 0x8, 0xffffffffffffffc0, 0x10}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x9fd7, 0xa3, &(0x7f0000000980)=""/163, 0x41000, 0x19, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000b80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0xf, 0x8c0, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r7, r5, r4, r1, r1, r1], &(0x7f0000000c80)=[{0x0, 0x2, 0x6}, {0x4, 0x4, 0x3, 0x9}, {0x3, 0x5, 0xd, 0x6}, {0x2, 0x3, 0xc, 0x9}], 0x10, 0x6}, 0x94) write$rfkill(r1, &(0x7f0000000d80)={0x2, 0x3, 0x1, 0x1}, 0x8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000dc0)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000e00)={@any, 0x5}) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000e40)={0x6, 0x96e2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e80)={0x0, 0x2, 0x0, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001280)={0x3, 0x4, @start={r8, 0x0, "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", "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"}, [0x4e, 0x401, 0x6cff, 0x1, 0x6, 0x2, 0x9, 0x2, 0x2, 0xb0c, 0x1, 0x7f, 0x481b, 0x89c9, 0x9, 0x1, 0x6, 0xfffffffffffffff4, 0x1ff, 0x59, 0x7, 0x4, 0x1000, 0x1, 0x5, 0x7, 0x3, 0x9, 0x6, 0x6, 0x8, 0x9, 0x1, 0x1, 0x4, 0x2, 0x8, 0x3ff, 0x6, 0x7, 0xa4a, 0x8, 0x623, 0xfff, 0x7, 0xd, 0x39, 0xacf, 0x8c, 0x7, 0x9, 0x5cd5, 0x9, 0x8e5, 0x2, 0x6, 0x1, 0x9, 0x8, 0x9, 0x8, 0x1, 0x0, 0x8]}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001cc0)=""/21) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d00)={0x0, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x4}}, 0x4, 0xa1, 0x8, 0x10000, 0x3a, 0xd87e, 0xfd}, &(0x7f0000001dc0)=0x9c) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r9, 0x80186e82, &(0x7f0000001e40)={&(0x7f0000001e00)=[{0x3, 0x0, 0x7ff, 0xfffffffffffffffa, 0x9, 0x8, 0x8d, 0x80000000}], 0x1, 0x38, 0x0, 0x8000000000000000}) sendmsg$nl_route(r1, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)=@ipmr_delroute={0x4c, 0x19, 0x2, 0x70bd2c, 0x25dfdbfe, {0x80, 0xb4, 0x0, 0x1, 0xfc, 0x2, 0x0, 0x2, 0x3100}, [@RTA_IIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010102}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}, @RTA_NH_ID={0x8, 0x1e, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r10 = msgget$private(0x0, 0x9) getresuid(&(0x7f0000001fc0), &(0x7f0000002000)=0x0, &(0x7f0000002040)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) msgctl$IPC_SET(r10, 0x1, &(0x7f0000002300)={{0x0, r11, r12, 0x0, 0x0, 0x5d, 0x7}, 0x0, 0x0, 0x7e4, 0x8, 0x6, 0x0, 0x0, 0x40, 0x3, 0xef}) 3m10.3290199s ago: executing program 0 (id=4537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m9.132235976s ago: executing program 0 (id=4543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/202, 0xca) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x20009, 0x6}, 0x10204, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x8400, 0x0, 0x0, 0x0, 0xba}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) close_range(r0, r0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302000020000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b"], 0x134}}, 0x4000) 3m8.010418921s ago: executing program 0 (id=4547): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xfffff71f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x64004081}, 0x40000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='$.,[]]{^', &(0x7f0000000080)="15", 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@nullb, 0xffffffffffffffff, &(0x7f0000000140)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) 3m7.806281236s ago: executing program 0 (id=4551): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 3m7.729223507s ago: executing program 0 (id=4555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1db28}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x11, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r6) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000002440)={0x8cc, r10, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9208}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x8, 0x7f, 0xf8, 0x2}, {0x10, 0x3, 0x0, 0x26ab6c66}, {0x2, 0xd7, 0x3, 0x1ff}, {0x7, 0x3, 0xa8, 0xff9}, {0x83, 0x5, 0x8, 0x2}, {0x3ff, 0xfe, 0x40, 0xe}, {0x0, 0x0, 0xea, 0x7ff}, {0x3, 0x3a, 0x4, 0x5}, {0xcc, 0x7, 0x6, 0xffff}, {0x5, 0xc, 0x7, 0xfd01}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8801}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x4, 0x5, 0x10001}, {0x62, 0x9, 0x1}, {0x3, 0x9, 0x7, 0x9}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x150, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r13}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x400, 0x2, 0x95, 0x8}, {0x0, 0x81, 0x4, 0x7f1}, {0x8, 0x8, 0x7, 0xf}, {0x7fff, 0x8, 0x8, 0x5}, {0x6, 0xfa, 0x2, 0x7d62}, {0xfff7, 0x0, 0x3, 0x4}, {0xff80, 0x8, 0xce, 0xb}, {0xc601, 0x3, 0x8, 0x6}, {0x2, 0x8, 0x7, 0x4}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x10, 0x9, 0x4}, {0x9, 0x0, 0x4, 0xffffffff}, {0x5, 0x8, 0x6, 0xc83}, {0x81, 0xfe, 0xf2, 0x8001}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95e}}, {0x8, 0x6, r3}}}]}}]}, 0x8cc}}, 0x40800) syz_emit_ethernet(0x133, &(0x7f0000000d40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x1b, 0x4, 0x3, 0x29, 0x125, 0x64, 0x0, 0x3f, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x12, 0x3, [{0x6, 0xc, "c81db5803873ece7e3d5"}]}, @end, @timestamp_addr={0x44, 0x14, 0x95, 0x1, 0x9, [{@multicast1, 0x5}, {@loopback, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x7fff}, {@multicast2, 0xb}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0x7, "c4d1ad2f11"}, {0x0, 0x7, "52f35a31e5"}]}]}}, {0x4e23, 0x4e23, 0xb9, 0x0, @wg=@data={0x4, 0x6, 0x1, "c567b37c191d4b23b9809c09ed4b524f2e5a235f7bb058899a9c6c3f404aaec5bae6d401141f4ecb1ca17c1c41cd81a95e886a8c0ac0b80873d90be63fb36dbc34d2c66e9b58060a76abc90743e4fb8e81ea84deb44bba7bf90bc849d53138246bdecf53f6e8312b1dca80d15cb118ffb27eaedf204b35db359935c1470e13be97d4415e1f2611af85ffefab015bddbbcaa404a679d736bdcd735f326fd2255e30"}}}}}}, 0x0) (async) syz_emit_ethernet(0x133, &(0x7f0000000d40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x1b, 0x4, 0x3, 0x29, 0x125, 0x64, 0x0, 0x3f, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x12, 0x3, [{0x6, 0xc, "c81db5803873ece7e3d5"}]}, @end, @timestamp_addr={0x44, 0x14, 0x95, 0x1, 0x9, [{@multicast1, 0x5}, {@loopback, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0xd, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x7fff}, {@multicast2, 0xb}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0x7, "c4d1ad2f11"}, {0x0, 0x7, "52f35a31e5"}]}]}}, {0x4e23, 0x4e23, 0xb9, 0x0, @wg=@data={0x4, 0x6, 0x1, "c567b37c191d4b23b9809c09ed4b524f2e5a235f7bb058899a9c6c3f404aaec5bae6d401141f4ecb1ca17c1c41cd81a95e886a8c0ac0b80873d90be63fb36dbc34d2c66e9b58060a76abc90743e4fb8e81ea84deb44bba7bf90bc849d53138246bdecf53f6e8312b1dca80d15cb118ffb27eaedf204b35db359935c1470e13be97d4415e1f2611af85ffefab015bddbbcaa404a679d736bdcd735f326fd2255e30"}}}}}}, 0x0) 3m6.978107843s ago: executing program 0 (id=4564): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x100000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 3m6.904095285s ago: executing program 33 (id=4564): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x100000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 3m5.564239004s ago: executing program 1 (id=4578): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat6\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0002001}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") r3 = getpid() syz_pidfd_open(r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001e80)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/4105, 0x1009, 0x0, &(0x7f0000001d80)=""/216, 0xd8}, &(0x7f0000001ec0)=0x40) r4 = getpgrp(0xffffffffffffffff) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000) setpgid(r3, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae47a7539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m5.361118699s ago: executing program 1 (id=4580): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000004c0)=0x9, 0x4) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000640)='./file1\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)=ANY=[]) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000000000000020000000100000000000000280000000000000000000000070000004414c47300000000000000007f000001fffffff994040000110000000000000001000000010000000b0000000000000074000000000000000000000007000000940244243a437f00000100000004ac1414aa000045a5ac14142500000af1e00000020000093c44349fd1ac141442000000040a01010000000081ac14142200000004ac14142e00000008ffffffff000000060a0101010000000d070a1181265fedc15cf7000000001c"], 0xf0}}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0xa406}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1, &(0x7f0000000540)="8fd4c0065e588965e69d36e95fbaa34dd697ae0c600a4c35a3e416df5dd6bb0098df2cc78856b2dadcdcdb1eb9e321a4fd15513b198d8ffe298a917b72afbc7aad62ca81a4863b1b1ba5839b8cb125f3bf865d242911f2a24ee5ae18e7af39c64969cab671728b292cf881f4367eee30a9ebbca3982ba39cbaac6def02a49041996436074f55b03785b96d0d40beb07f190694df40da5b837e6cc724c7e8bfb8e8c4ac70f293950db27e473af417f3f55c3445d82b8bfa0a374205725a"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x12420a, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000001380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x16e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) epoll_create(0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000000)=0x7, 0x4) 3m4.793552251s ago: executing program 1 (id=4581): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008010) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5a, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x7ff, 0x4, 0x7, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) (fail_nth: 4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000280), &(0x7f0000000140)=r1}, 0x22) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") r6 = socket$kcm(0xa, 0x5, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x2b053, 0xffffffffffffffff, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@generic={0x6d61ab9e6affe855}}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x30, 0x0, 0x20084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) 3m4.490256108s ago: executing program 1 (id=4586): setresgid(0xee00, 0xee01, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x1403, 0x400, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x1000) setns(r3, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) 3m3.94031359s ago: executing program 1 (id=4591): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3m2.787769635s ago: executing program 1 (id=4600): r0 = socket$inet(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000007940)=[{{&(0x7f00000001c0)=@caif=@dbg, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/232, 0xe8}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/188, 0xbc}, {&(0x7f00000016c0)=""/121, 0x79}], 0x5, &(0x7f00000017c0)=""/43, 0x2b}}, {{&(0x7f0000001800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/9, 0x9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/103, 0x67}, {&(0x7f0000002940)=""/141, 0x8d}, {&(0x7f0000002a00)=""/53, 0x35}, {&(0x7f0000002a40)=""/72, 0x48}, {&(0x7f0000002ac0)=""/161, 0xa1}, {&(0x7f0000002b80)=""/84, 0x54}, {&(0x7f0000002c00)=""/248, 0xf8}], 0x9, &(0x7f0000002dc0)=""/198, 0xc6}, 0x5}, {{&(0x7f0000002ec0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002f40)=""/4096, 0x1000}], 0x1, &(0x7f0000003f80)=""/39, 0x27}, 0x9}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/238, 0xee}, {&(0x7f00000050c0)=""/215, 0xd7}, {&(0x7f00000051c0)=""/75, 0x4b}, {&(0x7f0000005240)=""/254, 0xfe}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/59, 0x3b}, {&(0x7f0000006380)=""/10, 0xa}, {&(0x7f00000063c0)=""/254, 0xfe}, {&(0x7f00000064c0)=""/4, 0x4}], 0xa, &(0x7f00000065c0)=""/139, 0x8b}, 0x8}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000006680)=""/82, 0x52}, {&(0x7f0000006700)=""/180, 0xb4}, {&(0x7f00000067c0)=""/141, 0x8d}, {&(0x7f0000006880)=""/38, 0x26}, {&(0x7f00000068c0)=""/235, 0xeb}, {&(0x7f00000069c0)=""/65, 0x41}], 0x6, &(0x7f0000006ac0)=""/64, 0x40}, 0x2}, {{&(0x7f0000006b00)=@can, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006b80)}], 0x1, &(0x7f0000006c00)=""/72, 0x48}, 0xea}, {{&(0x7f0000006c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000007180)=[{&(0x7f0000006d00)=""/202, 0xca}, {&(0x7f0000006e00)=""/81, 0x51}, {&(0x7f0000006e80)=""/97, 0x61}, {&(0x7f0000006f00)=""/42, 0x2a}, {&(0x7f0000006f40)=""/139, 0x8b}, {&(0x7f0000007000)=""/225, 0xe1}, {&(0x7f0000007100)=""/79, 0x4f}], 0x7}, 0xe8b}, {{&(0x7f0000007200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000007880)=[{&(0x7f0000007280)=""/150, 0x96}, {&(0x7f0000007340)=""/197, 0xc5}, {&(0x7f0000007440)=""/231, 0xe7}, {&(0x7f0000007540)=""/174, 0xae}, {&(0x7f0000007600)=""/98, 0x62}, {&(0x7f0000007680)=""/248, 0xf8}, {&(0x7f0000007780)=""/246, 0xf6}], 0x7, &(0x7f0000007900)=""/33, 0x21}, 0x8}], 0x8, 0xc0000160, &(0x7f0000007b40)={0x77359400}) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00000000000046539bc1efea82d50000000000083bdbdbe4bebb71c27713d2b0a3b0000af4e63da156bf338121"], 0x40}, 0xfffe) 3m2.777068815s ago: executing program 34 (id=4600): r0 = socket$inet(0x2, 0x2, 0x1) recvmmsg(r0, &(0x7f0000007940)=[{{&(0x7f00000001c0)=@caif=@dbg, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/232, 0xe8}, {&(0x7f0000001540)=""/178, 0xb2}, {&(0x7f0000001600)=""/188, 0xbc}, {&(0x7f00000016c0)=""/121, 0x79}], 0x5, &(0x7f00000017c0)=""/43, 0x2b}}, {{&(0x7f0000001800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001880)=""/9, 0x9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/103, 0x67}, {&(0x7f0000002940)=""/141, 0x8d}, {&(0x7f0000002a00)=""/53, 0x35}, {&(0x7f0000002a40)=""/72, 0x48}, {&(0x7f0000002ac0)=""/161, 0xa1}, {&(0x7f0000002b80)=""/84, 0x54}, {&(0x7f0000002c00)=""/248, 0xf8}], 0x9, &(0x7f0000002dc0)=""/198, 0xc6}, 0x5}, {{&(0x7f0000002ec0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002f40)=""/4096, 0x1000}], 0x1, &(0x7f0000003f80)=""/39, 0x27}, 0x9}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/238, 0xee}, {&(0x7f00000050c0)=""/215, 0xd7}, {&(0x7f00000051c0)=""/75, 0x4b}, {&(0x7f0000005240)=""/254, 0xfe}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/59, 0x3b}, {&(0x7f0000006380)=""/10, 0xa}, {&(0x7f00000063c0)=""/254, 0xfe}, {&(0x7f00000064c0)=""/4, 0x4}], 0xa, &(0x7f00000065c0)=""/139, 0x8b}, 0x8}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000006680)=""/82, 0x52}, {&(0x7f0000006700)=""/180, 0xb4}, {&(0x7f00000067c0)=""/141, 0x8d}, {&(0x7f0000006880)=""/38, 0x26}, {&(0x7f00000068c0)=""/235, 0xeb}, {&(0x7f00000069c0)=""/65, 0x41}], 0x6, &(0x7f0000006ac0)=""/64, 0x40}, 0x2}, {{&(0x7f0000006b00)=@can, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006b80)}], 0x1, &(0x7f0000006c00)=""/72, 0x48}, 0xea}, {{&(0x7f0000006c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000007180)=[{&(0x7f0000006d00)=""/202, 0xca}, {&(0x7f0000006e00)=""/81, 0x51}, {&(0x7f0000006e80)=""/97, 0x61}, {&(0x7f0000006f00)=""/42, 0x2a}, {&(0x7f0000006f40)=""/139, 0x8b}, {&(0x7f0000007000)=""/225, 0xe1}, {&(0x7f0000007100)=""/79, 0x4f}], 0x7}, 0xe8b}, {{&(0x7f0000007200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000007880)=[{&(0x7f0000007280)=""/150, 0x96}, {&(0x7f0000007340)=""/197, 0xc5}, {&(0x7f0000007440)=""/231, 0xe7}, {&(0x7f0000007540)=""/174, 0xae}, {&(0x7f0000007600)=""/98, 0x62}, {&(0x7f0000007680)=""/248, 0xf8}, {&(0x7f0000007780)=""/246, 0xf6}], 0x7, &(0x7f0000007900)=""/33, 0x21}, 0x8}], 0x8, 0xc0000160, &(0x7f0000007b40)={0x77359400}) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00000000000046539bc1efea82d50000000000083bdbdbe4bebb71c27713d2b0a3b0000af4e63da156bf338121"], 0x40}, 0xfffe) 44.5261857s ago: executing program 7 (id=5771): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(0x0) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) fcntl$setsig(r4, 0xa, 0x36) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x7ca4b000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1, 0xf5ff}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1f, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff8}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x3, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x4004000) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0xff7c, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002380)={r8, 0x20, &(0x7f0000002340)={&(0x7f0000001240)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@generic={&(0x7f0000001b00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000080000c59a84e948003d54f0fff0ffffff186b00000200000000000000190000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0x10, 0xfffffff7, 0x3ff}, 0x10, r9, r2, 0x6, &(0x7f0000001b80)=[0x1, r10], &(0x7f0000001bc0)=[{0x5, 0x4, 0xc}, {0x1, 0x5, 0x4, 0x2}, {0x0, 0x1, 0x5, 0xc}, {0x2, 0x5, 0x10, 0x3}, {0x2, 0x1, 0xd, 0x4}, {0x4, 0x1, 0x5, 0x8}], 0x10, 0x1}, 0x94) 44.452110142s ago: executing program 7 (id=5772): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x1, 0x5, 0x7133, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x2, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x7, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 44.404942063s ago: executing program 7 (id=5773): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000004c0)=0x9, 0x4) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000640)='./file1\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)=ANY=[]) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000000000000020000000100000000000000280000000000000000000000070000004414c47300000000000000007f000001fffffff994040000110000000000000001000000010000000b0000000000000074000000000000000000000007000000940244243a437f00000100000004ac1414aa000045a5ac14142500000af1e00000020000093c44349fd1ac141442000000040a01010000000081ac14142200000004ac14142e00000008ffffffff"], 0xf0}}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0xa406}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x12420a, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000001380)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x16e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) epoll_create(0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000000)=0x7, 0x4) 44.155931568s ago: executing program 7 (id=5774): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x3, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000002a00), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f00000028c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a65930472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e0567444f09c5c3fad0000", @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0x41, 0x2cb, &(0x7f00000025c0)="$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") syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0xb82fd820420438af, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) 43.752914897s ago: executing program 7 (id=5780): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020603000000000180000000000000000d000300686173683a6e65740000000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0x4, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040880) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0x3}) syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 43.419669345s ago: executing program 7 (id=5785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x2, 0x2, {{0x7, 0x4, 0x0, 0x34, 0x1c, 0x4, 0x0, 0x5, 0x29, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0xc, [@empty]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r5, 0x25, 0x19, @void}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x44, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}}, 0x20}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) unshare(0x64000600) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) 43.376836155s ago: executing program 35 (id=5785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x2, 0x2, {{0x7, 0x4, 0x0, 0x34, 0x1c, 0x4, 0x0, 0x5, 0x29, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0xc, [@empty]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r5, 0x25, 0x19, @void}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x44, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}}, 0x20}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) unshare(0x64000600) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) 4.546045969s ago: executing program 3 (id=6189): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000380)) 4.419605922s ago: executing program 3 (id=6190): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @remote}, {0x300, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x4a, 0x100, @val=0x80}}}}}}}, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 3.932085093s ago: executing program 5 (id=6200): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x18e5, 0x0) syz_clone3(&(0x7f0000000900)={0x22801100, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000104fcffffff7c00000000000000", @ANYRES32=0x0, @ANYBLOB="937b010021000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="5112bf89ec6dd2899abd115d19367e96161c2f2ccdb94eb46dec00e177f2297b074df2db8d53106e2bfa6de474f0526ae29bad1f1eebef1c3512f3189e5abdb6ee5c722f474f8e3f1a537ea6958ee6db9e594a530032aaa8b5b350a287483b1fecac57f0c27a99358833d68828126014f0b9eec80d6f0c8b81000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x1011084, 0x0) r7 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x28}, 0x94) setsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x100, 0x0, 0x0) 3.516167902s ago: executing program 3 (id=6203): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpeername$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2f, 0x9, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 2.589935832s ago: executing program 3 (id=6211): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6029b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, r0, 0x8, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) unshare(0x20000400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2, 0xee00}}, './file0\x00'}) setreuid(r2, r3) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="ff", 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x11f0}, 0x4000844) cachestat(r1, &(0x7f00000000c0)={0x7, 0x9}, 0x0, 0xf3) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x141301) tkill(r0, 0x32) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x8, 0x6, 0x0, 0x40, 0x0}) 2.329994838s ago: executing program 8 (id=6216): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 2.26020682s ago: executing program 8 (id=6217): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) r2 = socket$kcm(0xf, 0x4, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) mq_open(&(0x7f0000000080)='\x00', 0x80, 0x12, &(0x7f0000000140)={0x4, 0x2, 0xb3, 0xffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x18, &(0x7f00000002c0)="8a00000000000000", 0x8) 2.102768053s ago: executing program 6 (id=6219): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0xb, 0xddc6}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2020600) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0xfb, 0x10, 0x68}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe00000000bf03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 1.958771236s ago: executing program 5 (id=6220): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xc}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) listen(r0, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x2da, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2a4, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x300, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.893131708s ago: executing program 5 (id=6222): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=@newqdisc={0xfffffffffffffef5, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xa, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1e0, 0x2, {{0x8, [0xd, 0x0, 0x8, 0x1, 0x10, 0xa, 0xa, 0x7, 0x8, 0x3, 0xd, 0xf, 0xb, 0x4, 0x6], 0x1, [0xff, 0x0, 0x5, 0x7, 0x10, 0x5, 0x3, 0x8000, 0x0, 0x7ff, 0xa, 0xffff, 0x0, 0x9c, 0x4c40, 0x4], [0x9, 0x101, 0x3, 0x9, 0xfff, 0x6, 0x1ff, 0x5, 0x1, 0x9, 0xa, 0x7, 0x5, 0x73, 0x6, 0xe0]}}}}]}, 0x210}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000340)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000e1400042dbd70e6a4a7b41c00fedbdf25"], 0xfffffeba}, 0x1, 0x0, 0x0, 0x60881}, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) perf_event_open(0x0, 0x0, 0xfffff80000000002, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x6, &(0x7f0000000400)=[{0x50, 0xf8, 0x7, 0x3}, {0x8, 0x0, 0x5, 0x200}, {0x3, 0xd, 0x8, 0x3}, {0xcd1, 0xff, 0x5, 0x2}, {0x6, 0x3, 0x85}, {0x3, 0x19, 0x1, 0xfffffc00}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x2c}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x1ff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x8) write$ppp(r5, &(0x7f0000000640)="00f3", 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r7, 0x409, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) 1.848221639s ago: executing program 6 (id=6223): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x34, 0x3d, 0x107, 0x0, 0x9, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x14e, 0x0, 0x1, [@nested={0xc, 0x7e, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @uid}]}, @nested={0x5, 0xc, 0x0, 0x1, [@generic="a2"]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4010) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002940)=@delchain={0x38, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0), 0x4) 1.733842811s ago: executing program 6 (id=6226): syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b43, 0x13080, 0xffffffff, 0x2b7}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c68, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.725576261s ago: executing program 5 (id=6227): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 1.692379952s ago: executing program 6 (id=6228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setns(r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) write$tun(r2, &(0x7f0000000380)={@val={0x0, 0x22f0}, @val={0x1, 0x4, 0x6, 0xe7, 0x4, 0x8}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x1c, 0x30, 0x66, 0x0, 0x4, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x27, 0xfff, 0x67, 0x9c, 0x7, 0x62, 0x6, @empty, @multicast1}}}}}}}, 0x4c) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") pread64(r3, &(0x7f0000000100)=""/59, 0x3b, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x34b, 0x0, &(0x7f0000001200)=0x1) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa808100100086dd6040000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001020190780000050360070000d74b00fffc010000000000000000000000ff0000ff0200000000000000000000000000013a00000000000000f4c638bed6f068cc"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe6c, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x9, 0x20000007, 0x5, 0x8}, 0x8, 0x8}, [{0xd, 0x1, 0x6, 0x6, 0xcdd0, 0x1}, {0x2ddae982, 0x1b0db6e3, 0xe2f, 0x1000, 0x10, 0x10}, {0x800, 0x8, 0x6, 0x7f, 0x18, 0xc3c}, {0x2, 0xffff, 0x6, 0x2, 0x4, 0x44}, {0xff, 0x80000000, 0x1, 0x6, 0xfffffffc, 0x4}, {0xc000000, 0x0, 0x2f, 0x4, 0xa1a6f23, 0x1}, {0xd, 0xfffffff9, 0x1b21, 0x6, 0x3, 0x9}, {0x0, 0xd, 0x0, 0x0, 0x2, 0x8}, {0x4, 0x400, 0x0, 0x2, 0x8, 0x6}, {0x8e6, 0x76d, 0x7, 0x4, 0x5, 0x8}, {0x4, 0x6, 0x8, 0xc, 0x1fba, 0x6}, {0x10, 0xd1, 0x0, 0x1, 0x2, 0x8}, {0xff, 0xfffffff7, 0x101, 0x8, 0xd, 0x7}, {0x8, 0xa507, 0x10000, 0x1, 0x85f7, 0x8}, {0x5, 0x6, 0xd5b9, 0x10, 0x4, 0x34}, {0x633, 0xfffffffd, 0x0, 0x2, 0xbf}, {0x2522, 0xd5, 0x3, 0x2, 0x40, 0xfff}, {0xe4b5, 0x0, 0xff, 0x6, 0x2, 0x1c00}, {0xfffffff8, 0x2, 0xa, 0x6d, 0x5, 0x96}, {0x1, 0x2, 0xb, 0x10001, 0x10000, 0x9}, {0x80, 0x1, 0x2c, 0x1, 0x3, 0x2}, {0x8, 0x7, 0xd5f, 0x9, 0x1, 0x200}, {0x1000, 0x8000, 0x200, 0x0, 0x4, 0xfff}, {0x101, 0xc6a, 0x2, 0x8e, 0x101, 0x6}, {0x2, 0x658e, 0x9, 0xf1a, 0x3, 0x8}, {0x8001, 0x3, 0x7, 0xf0fa, 0xe, 0xc}, {0xff, 0x6, 0x568, 0xff, 0x6, 0x40000002}, {0x7f, 0x101, 0x0, 0xffff7fff, 0x2, 0x80000000}, {0x7fffffff, 0x7, 0x5, 0x40, 0x8, 0x2}, {0x0, 0x6, 0x5, 0x7ff, 0x80000000, 0x3}, {0x8, 0x9, 0x400, 0x4, 0x80000000, 0x9}, {0x0, 0xfff, 0xff79, 0x1312, 0x6, 0x145}, {0x73, 0x588, 0x1, 0x5, 0xb81, 0x80}, {0xfffffffa, 0x8, 0xf66, 0x8, 0x8, 0x4}, {0x1, 0x80, 0x3, 0x8, 0xe0000, 0x5c6d}, {0x15f1, 0x7ff, 0xa3a, 0x0, 0x9, 0xfffffffc}, {0xce9, 0x8, 0x267, 0x2, 0x0, 0xf}, {0x9, 0x1c000, 0x80000000, 0x3, 0xd5fd, 0x6}, {0x9, 0x3, 0x1, 0x40, 0x101, 0x46}, {0x6, 0x8000, 0x8, 0x6, 0x80, 0x56}, {0x9, 0xffffff33, 0x2f3, 0x5, 0x80, 0x200}, {0x7, 0x2, 0x8c7c, 0xbb, 0x7, 0x10000}, {0x9, 0x2, 0x5f, 0x2, 0xa0, 0x7ff}, {0xcfa9, 0x46, 0x3, 0x8, 0x6, 0xfffffff9}, {0x5, 0x1, 0x8, 0x5, 0x3, 0x7}, {0x9, 0x5, 0xffffffff, 0x5, 0x101, 0xff}, {0x4, 0x82, 0x7ff, 0x1, 0x1, 0x4}, {0x6, 0x5, 0x6, 0x0, 0x39e, 0x6}, {0x0, 0x8000, 0x1, 0x5, 0x46cb, 0x1}, {0xffffff80, 0x4, 0xfff, 0x281, 0xb, 0x3}, {0x8, 0x9897, 0x400, 0xb, 0x3, 0x9}, {0x80000000, 0x2, 0x1, 0x7, 0x9, 0x3fd84749}, {0x400, 0x5, 0x7, 0x6, 0x4bb, 0xc0000000}, {0x2, 0xfffffff1, 0xce, 0x29, 0x9, 0x7}, {0x2c00, 0x10000, 0x7, 0x80000001, 0x4, 0x7}, {0x7e67, 0xfffffffb, 0x9, 0x3, 0x7, 0x1ff}, {0x2, 0x21ef, 0x200, 0x7, 0x10000, 0xf}, {0x9, 0x6, 0x47d, 0x1, 0x6, 0x1}, {0x7, 0x4d, 0x6, 0xfffff801, 0x5, 0x5940fba8}, {0xd, 0x6, 0x8000, 0x80, 0x1, 0x2}, {0x7, 0xffffffff, 0x3, 0x3, 0xadf, 0x7}, {0x9, 0x3, 0x1, 0xa, 0x10000, 0x2}, {0x7, 0x80000001, 0x507, 0x5, 0x2, 0xb}, {0x6, 0xcbaf, 0x2e, 0xfffffff9, 0x8001, 0x1000}, {0x8, 0x2, 0x3, 0xd4, 0x5, 0x4}, {0x1, 0x3, 0x2, 0xedc8, 0x7fff}, {0x1, 0x4, 0x3, 0x0, 0x5}, {0x0, 0x6, 0xb, 0xffff, 0xfffffeff, 0x2}, {0x3, 0x97, 0x3, 0x4, 0x0, 0x2}, {0x9, 0x4, 0x2, 0x40000000, 0x7800000}, {0xcf16, 0x8, 0x2b, 0x3, 0x5, 0x2833}, {0x5, 0x80000000, 0x7fffffff, 0x801547, 0x5, 0x10001}, {0x0, 0x80000001, 0x1, 0x8, 0x1, 0xb039}, {0x6, 0x400, 0x2, 0x6, 0x8007, 0x8}, {0x6aa, 0x80000000, 0x80000000, 0x9, 0x7fff, 0x2}, {0x80000001, 0xc, 0x4, 0x10000, 0x0, 0x4}, {0xfff, 0x0, 0x3, 0x4, 0x2, 0x401}, {0x1, 0x9, 0x724, 0x974, 0x0, 0xfff}, {0x9, 0x8b5, 0x8, 0x4, 0x3, 0x2}, {0x9, 0x1, 0x7, 0x0, 0x7, 0x8001}, {0x1000, 0x6a, 0x7, 0x4, 0xfff, 0x5}, {0x2, 0xeb, 0x5, 0xf, 0x3, 0x9}, {0x464f032d, 0xc, 0xfffffffe, 0x8000, 0x3, 0x2}, {0xffff, 0x8, 0x40, 0x8, 0x70e7, 0xfffffff7}, {0x7413, 0x4f, 0x6f76, 0x80, 0x5}, {0x8000, 0x4f7b, 0xfff, 0xc, 0x151f6434, 0x5}, {0x71, 0x8, 0x1, 0x10000, 0x9, 0x6}, {0xcf1, 0x1, 0x7f80, 0x5f45, 0x8}, {0xc, 0x0, 0x10000, 0x8, 0xffff0001, 0x2}, {0xfffffff7, 0x9, 0x37b, 0x5, 0x0, 0x3}, {0x8985, 0x7, 0xc0f0, 0xfffffff9, 0x400, 0x2}, {0x9, 0x2, 0x3ff, 0x5, 0x10, 0x8001}, {0x6, 0x0, 0xe, 0x1, 0x4, 0x4}, {0x671, 0x9, 0x3, 0x1, 0x101, 0x1000}, {0x6, 0x9, 0x4, 0xfffffff7, 0x262, 0x9}, {0xd2, 0x5, 0x7fffffff, 0x4, 0xd, 0x1}, {0x400, 0xd0, 0x10000, 0x9, 0x4, 0x7}, {0xc, 0x2, 0x7, 0x9, 0x4, 0x3}, {0x0, 0x0, 0x5, 0x5, 0x7, 0x7}, {0x7ff, 0x28000, 0xe397, 0x3, 0x7, 0xa4f4}, {0x0, 0x0, 0x0, 0x6, 0x7f8, 0xfffffffe}, {0xb, 0x0, 0x7, 0x1, 0x9, 0x101}, {0x10000, 0x3, 0x4, 0x707}, {0x65c973f7, 0x6, 0x0, 0xffffffff, 0x8, 0x5}, {0x10, 0xa, 0x0, 0x6, 0x4, 0x2}, {0x0, 0x2, 0xff7, 0xa2c1, 0x7, 0x2}, {0x8001, 0xfffffffe, 0xff, 0x7c1, 0x4, 0x3}, {0x7fff, 0x10, 0x80000000, 0x1, 0x4000007, 0x2d}, {0xb8cc, 0x9ec4, 0x9, 0x5, 0x3, 0x9}, {0x0, 0x2, 0x9, 0x5, 0x10}, {0x6d, 0x7, 0x4, 0x4, 0x4917be32, 0xd9}, {0xde4a, 0xc61, 0x8001, 0x669b, 0x744, 0x80000000}, {0x7fffffff, 0x1, 0x8001, 0x5, 0x2, 0x9}, {0x8000, 0xfffffff7, 0x8, 0x3, 0x9, 0xa4b}, {0x3, 0xb, 0x5, 0x13, 0x4}, {0x2, 0x1, 0x80, 0x18, 0x2, 0x4}, {0x8, 0xfffffff9, 0x7fff, 0xc63c, 0x7, 0x10001}, {0x8, 0xba72, 0xffff59b7, 0x6, 0x800, 0x3}, {0xfffffffe, 0x240, 0x80, 0x5, 0x6, 0x7f}, {0x3, 0x8, 0x6, 0x6, 0x5, 0xe}, {0x200, 0x101, 0x7, 0x0, 0x2, 0x952b}, {0x7ff, 0x100, 0x7, 0x9, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x8, 0x5, 0x7fff}, {0xd, 0x0, 0x9, 0xcbe, 0x8, 0x24}, {0x6bfdbcf7, 0x7, 0x10000, 0xfffffd70, 0x7, 0x80000000}, {0x0, 0x7, 0x6, 0x7, 0x6, 0x133000}, {0x1000, 0x5, 0x0, 0x5, 0xbbd, 0x5}, {0x5, 0x676c, 0x4, 0x800, 0x5, 0xf6}], [{0x4}, {0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x3}, {0x4}, {0x2}, {}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x1}, {}, {0x4, 0x1}, {0x0, 0xee30a25fe8e126a9}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x1}, {0x7}, {0x2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x8, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf7af11aa793d51d842d25410000000e0001006e657464e57673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x7a29293d222da6ee) socket$inet6(0xa, 0x80000, 0x8) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=r9, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000014c0)=""/154, &(0x7f0000001580)=0x9a) 1.692012762s ago: executing program 5 (id=6229): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) accept4$x25(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x12, 0x0) pipe(0x0) fsopen(&(0x7f0000000000)='sysv\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0) socket(0x840000000002, 0x801, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r3], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d000000000000"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, &(0x7f0000002700)=[{&(0x7f00000012c0)="0f6e26e7377f", 0x6}], 0x1}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)=[{&(0x7f00000027c0)="df61905c", 0x4}], 0x1}}], 0x2, 0x40088c4) 1.637480253s ago: executing program 3 (id=6230): socket$netlink(0x10, 0x3, 0x9) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@private0, @empty, 0x16, 0x1d}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x400002, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x6}}, 0x80) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1.637095533s ago: executing program 3 (id=6231): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x18e5, 0x0) syz_clone3(&(0x7f0000000900)={0x22801100, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000104fcffffff7c00000000000000", @ANYRES32=0x0, @ANYBLOB="937b010021000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="5112bf89ec6dd2899abd115d19367e96161c2f2ccdb94eb46dec00e177f2297b074df2db8d53106e2bfa6de474f0526ae29bad1f1eebef1c3512f3189e5abdb6ee5c722f474f8e3f1a537ea6958ee6db9e594a530032aaa8b5b350a287483b1fecac57f0c27a99358833d68828126014f0b9eec80d6f0c8b81000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x1011084, 0x0) r7 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x28}, 0x94) setsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x100, 0x0, 0x0) 1.636627684s ago: executing program 4 (id=6232): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r0, 0x0, 0x0, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x7fffffffffffffff, 0x2, 0x85, 0x2, 0x43db], 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x80b04) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r3], 0x1000f) 1.428385258s ago: executing program 6 (id=6233): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r0, 0x0, 0x0, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x7fffffffffffffff, 0x2, 0x85, 0x2, 0x43db], 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x80b04) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r3], 0x1000f) 1.420809888s ago: executing program 4 (id=6234): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0xb, 0xddc6}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2020600) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0xfb, 0x10, 0x68}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 1.32559418s ago: executing program 8 (id=6235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, 0x0}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)=[{0x0}], 0x1}}], 0x2, 0x40088c4) 1.32447162s ago: executing program 4 (id=6236): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (fail_nth: 2) 1.279945371s ago: executing program 8 (id=6237): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x34, 0x3d, 0x107, 0x0, 0x9, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x14e, 0x0, 0x1, [@nested={0xc, 0x7e, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @uid}]}, @nested={0x5, 0xc, 0x0, 0x1, [@generic="a2"]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4010) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002940)=@delchain={0x38, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0), 0x4) 1.028184177s ago: executing program 4 (id=6238): syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b43, 0x13080, 0xffffffff, 0x2b7}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c68, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 998.637877ms ago: executing program 4 (id=6239): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x4000004) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x100000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={0x0}) r6 = socket(0x2, 0x805, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000a00)={0x7fff, [0x2, 0x6], 0x9}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x40, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r7, 0x3, 0x80000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="c0b954ec00000021000000100000", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 891.25496ms ago: executing program 8 (id=6240): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {}, 0x0, 0x0, 0x80}) 832.111911ms ago: executing program 8 (id=6241): lseek(0xffffffffffffffff, 0x4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f0000000500)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, '\x00', 0x84, 0x6, 0x0, @empty, @mcast1, {[@srh={0x3c, 0x0, 0x4, 0x0, 0x2, 0x50, 0x2}, @dstopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, @dstopts={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}, @hopopts={0x3b}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x1, 0x81e, 0x1, 0x3, 0x4e21, 0x4e20, 0x4, 0x2}, [{0xfffffff7, 0xc974, 0x1cb00000, 0x3, 0x8, 0x1000000, 0x2, 0x3}]}}}}}, 0xac) 702.379224ms ago: executing program 5 (id=6242): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, @perf_config_ext={0x7, 0x513}, 0x100045, 0x10000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1, 0x1224, 0xffffffff, 0x8, 0xb, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x7f2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xfffff801}}, './file0\x00'}) sendmsg$NFT_BATCH(r2, 0x0, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x119}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e3, &(0x7f0000000180)={r7, r9}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {0x3, 0x7}, {0x10}}}, 0x24}}, 0x0) 434.74386ms ago: executing program 6 (id=6243): clock_adjtime(0x4, &(0x7f0000000100)={0xfffffffffffffffe, 0x80000000, 0x3, 0x7, 0xe04c, 0x5, 0x4, 0x6a453fad, 0x1, 0x80, 0x0, 0x4, 0xe64, 0x100000000, 0xffffffffffff235b, 0xbd, 0x9, 0x904b, 0x3e1, 0x6, 0x886, 0x400, 0x5, 0x2, 0xfffffffffffffffe, 0x9}) 0s ago: executing program 4 (id=6244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a00200087000000fba0eeb7aff5bf4999ab6714111f1659ac4f4acbd548", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020400"/112], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200"/50], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7f) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1090001000002142603600e12080005007a010401a80016002000034061c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a2a9457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c0346653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ebe15b8615ff803", 0xd8}], 0x1}, 0x4008010) socket$inet6(0xa, 0x80001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x84, &(0x7f0000000200)=0x0) io_getevents(r5, 0x5, 0x5, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) kernel console output (not intermixed with test programs): ) [ 850.056733][T22648] Tainted: [W]=WARN [ 850.056746][T22648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 850.056758][T22648] Call Trace: [ 850.056765][T22648] [ 850.056774][T22648] __dump_stack+0x1d/0x30 [ 850.056846][T22648] dump_stack_lvl+0x95/0xd0 [ 850.056865][T22648] dump_stack+0x15/0x1b [ 850.056975][T22648] should_fail_ex+0x25e/0x270 [ 850.057007][T22648] should_failslab+0x8c/0xb0 [ 850.057027][T22648] __kmalloc_noprof+0xd4/0x4a0 [ 850.057077][T22648] ? ext4_find_extent+0x17f/0x7a0 [ 850.057163][T22648] ? ext4_find_extent+0x17f/0x7a0 [ 850.057245][T22648] ? __account_obj_stock+0x43d/0x720 [ 850.057279][T22648] ext4_find_extent+0x17f/0x7a0 [ 850.057312][T22648] ? should_fail_ex+0x30/0x270 [ 850.057346][T22648] ext4_ext_map_blocks+0x10b/0x2f30 [ 850.057374][T22648] ? security_inode_alloc+0x37/0x100 [ 850.057402][T22648] ? avc_has_perm_noaudit+0xa3/0x120 [ 850.057458][T22648] ? avc_has_perm+0x101/0x190 [ 850.057533][T22648] ? lockref_put_return+0xf7/0x130 [ 850.057552][T22648] ? __rcu_read_unlock+0x4e/0x70 [ 850.057578][T22648] ext4_map_query_blocks+0xa1/0x500 [ 850.057650][T22648] ? ext4_es_lookup_extent+0x390/0x4f0 [ 850.057720][T22648] ext4_map_blocks+0x300/0x950 [ 850.057748][T22648] ext4_readdir+0x60f/0x1f20 [ 850.057773][T22648] ? kstrtouint+0x76/0xc0 [ 850.057797][T22648] ? kstrtouint_from_user+0xa8/0xf0 [ 850.057861][T22648] ? __rcu_read_unlock+0x4e/0x70 [ 850.057884][T22648] ? proc_fail_nth_write+0x13b/0x160 [ 850.057909][T22648] iterate_dir+0x109/0x2f0 [ 850.057932][T22648] __se_sys_getdents+0xd2/0x220 [ 850.057980][T22648] ? __pfx_filldir+0x10/0x10 [ 850.058002][T22648] ? 0xffffffff81000000 [ 850.058017][T22648] ? 0xffffffff81000000 [ 850.058047][T22648] __x64_sys_getdents+0x43/0x50 [ 850.058071][T22648] x64_sys_call+0xea8/0x3020 [ 850.058098][T22648] do_syscall_64+0x136/0x3c0 [ 850.058120][T22648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.058173][T22648] RIP: 0033:0x7f325079de99 [ 850.058190][T22648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.058211][T22648] RSP: 002b:00007f324f1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 850.058312][T22648] RAX: ffffffffffffffda RBX: 00007f3250a25fa0 RCX: 00007f325079de99 [ 850.058326][T22648] RDX: 00000000000000bb RSI: ffffffff81000000 RDI: 0000000000000004 [ 850.058338][T22648] RBP: 00007f324f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 850.058350][T22648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.058362][T22648] R13: 00007f3250a26038 R14: 00007f3250a25fa0 R15: 00007ffc5fb3e1b8 [ 850.058452][T22648] ? 0xffffffff81000000 [ 850.058470][T22648] [ 850.425597][T19005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.458718][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.542558][T22655] loop3: detected capacity change from 0 to 512 [ 850.582500][T22655] ext4: Unknown parameter 'subj_type' [ 850.787559][T22669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5626'. [ 850.818307][T22668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5626'. [ 850.834948][T22668] loop3: detected capacity change from 0 to 1024 [ 850.835405][T22668] EXT4-fs: Ignoring removed bh option [ 850.863056][T22668] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 850.990991][T22672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5628'. [ 851.010423][T22672] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 851.037192][T22672] bond2 (unregistering): Released all slaves [ 851.792613][T22688] loop7: detected capacity change from 0 to 2048 [ 851.812131][T22688] EXT4-fs: test_dummy_encryption option not supported [ 851.902099][T22700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5639'. [ 851.973307][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5639'. [ 852.003101][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5640'. [ 852.104377][T22708] loop6: detected capacity change from 0 to 4096 [ 852.131714][T22708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.153292][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 852.153306][ T28] audit: type=1400 audit(1784424562.304:3210): avc: denied { write } for pid=22707 comm="syz.6.5642" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 852.212737][T22715] loop3: detected capacity change from 0 to 4096 [ 852.327859][T22715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.354816][ T28] audit: type=1400 audit(1784424562.510:3211): avc: denied { write } for pid=22714 comm="syz.3.5644" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 852.479003][T22729] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5648'. [ 852.836748][T22738] xt_hashlimit: size too large, truncated to 1048576 [ 852.887330][T22739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=22739 comm=syz.7.5652 [ 852.967352][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.036791][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.087347][T22744] loop3: detected capacity change from 0 to 512 [ 853.104570][T22744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 853.135485][T22744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.150544][T22744] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.179189][ T28] audit: type=1400 audit(1784424563.286:3212): avc: denied { listen } for pid=22750 comm="syz.7.5656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 853.231397][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.243984][ T28] audit: type=1400 audit(1784424563.314:3213): avc: denied { accept } for pid=22750 comm="syz.7.5656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 853.342122][T22762] x_tables: duplicate underflow at hook 2 [ 853.379490][T22762] loop7: detected capacity change from 0 to 128 [ 853.405997][T22762] FAT-fs (loop7): bogus number of FAT structure [ 853.420003][T22762] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 853.439162][T22762] FAT-fs (loop7): Can't find a valid FAT filesystem [ 853.470681][T22762] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5660'. [ 853.489532][T22762] tc_dump_action: action bad kind [ 853.679023][T22769] loop7: detected capacity change from 0 to 512 [ 853.718782][T22769] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 853.730861][T22769] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 853.754256][T22769] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5663: Corrupt directory, running e2fsck is recommended [ 853.782571][T22769] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 853.793046][T22769] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.5663: corrupted in-inode xattr: invalid ea_ino [ 853.811854][T22769] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 853.814040][T22769] EXT4-fs (loop7): Remounting filesystem read-only [ 853.823484][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 853.823577][ C0] EXT4-fs (loop7): initial error at time 1784424563: ext4_iget_extra_inode:5180: inode 15 [ 853.823696][ C0] EXT4-fs (loop7): last error at time 1784424563: ext4_iget_extra_inode:5180: inode 15 [ 853.861307][T22769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.889680][T19005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.050564][T22778] loop7: detected capacity change from 0 to 512 [ 854.180395][T22767] bond3 (unregistering): Released all slaves [ 854.215503][T22778] EXT4-fs (loop7): #blocks per group too big: 8724480 [ 854.686952][T22797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.725777][ T28] audit: type=1400 audit(1784424564.727:3214): avc: denied { write } for pid=22796 comm="syz.3.5672" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 855.291327][T22825] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5679'. [ 855.291858][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5679'. [ 855.316976][T22825] set_capacity_and_notify: 1 callbacks suppressed [ 855.316993][T22825] loop7: detected capacity change from 0 to 1024 [ 855.318400][T22825] EXT4-fs: Ignoring removed bh option [ 855.354649][T22825] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal [ 855.451474][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.549424][T22839] loop7: detected capacity change from 0 to 512 [ 855.578560][T22839] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5685: bg 0: block 393: padding at end of block bitmap is not set [ 855.690058][T22847] loop3: detected capacity change from 0 to 512 [ 855.700338][T22839] loop7: lost filesystem error report for type 5 error -117 [ 855.700520][T22839] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 855.707843][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 855.707861][ C0] EXT4-fs (loop7): initial error at time 1784424565: ext4_validate_block_bitmap:441 [ 855.707889][ C0] EXT4-fs (loop7): last error at time 1784424565: ext4_validate_block_bitmap:441 [ 855.741931][T22839] loop7: lost filesystem error report for type 5 error -117 [ 855.959147][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 856.135705][T22839] EXT4-fs (loop7): 2 truncates cleaned up [ 856.144015][T22847] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5684: bg 0: block 393: padding at end of block bitmap is not set [ 856.161360][T22839] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.180645][T22847] loop3: lost filesystem error report for type 5 error -117 [ 856.183485][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 856.197228][ C0] EXT4-fs (loop3): initial error at time 1784424566: ext4_validate_block_bitmap:441 [ 856.206633][ C0] EXT4-fs (loop3): last error at time 1784424566: ext4_validate_block_bitmap:441 [ 856.216923][T22847] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 856.236258][T22847] loop3: lost filesystem error report for type 5 error -117 [ 856.236725][T22847] EXT4-fs (loop3): 2 truncates cleaned up [ 856.295548][T22847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.389499][T19005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.462531][T22865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 856.509831][T22867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5694'. [ 856.537624][T22865] team0: Unable to change to the same mode the team is in [ 856.549825][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.559194][T22869] loop6: detected capacity change from 0 to 4096 [ 856.580226][T22867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5694'. [ 856.589176][T22874] loop3: detected capacity change from 0 to 4096 [ 856.624933][T22869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.665995][T22876] loop7: detected capacity change from 0 to 4096 [ 856.672912][T22874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.682021][ T28] audit: type=1400 audit(1784424566.552:3215): avc: denied { write } for pid=22868 comm="syz.6.5695" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 856.725303][T22876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.782503][ T28] audit: type=1400 audit(1784424566.618:3216): avc: denied { write } for pid=22873 comm="syz.3.5696" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 856.804511][ T28] audit: type=1400 audit(1784424566.655:3217): avc: denied { write } for pid=22875 comm="syz.7.5698" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 856.895923][T22896] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5705'. [ 856.905202][T22896] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5705'. [ 856.976268][T22903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 857.004703][T22903] team0: Unable to change to the same mode the team is in [ 857.385132][T22910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5711'. [ 857.396379][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5711'. [ 857.428923][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.484686][T22918] veth0: entered promiscuous mode [ 857.500894][T22917] veth0: left promiscuous mode [ 857.521378][T22923] FAULT_INJECTION: forcing a failure. [ 857.521378][T22923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.536727][T22923] CPU: 1 UID: 0 PID: 22923 Comm: syz.6.5717 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 857.536765][T22923] Tainted: [W]=WARN [ 857.536775][T22923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 857.536789][T22923] Call Trace: [ 857.536797][T22923] [ 857.536806][T22923] __dump_stack+0x1d/0x30 [ 857.536833][T22923] dump_stack_lvl+0x95/0xd0 [ 857.536896][T22923] dump_stack+0x15/0x1b [ 857.536916][T22923] should_fail_ex+0x25e/0x270 [ 857.536980][T22923] should_fail+0xb/0x20 [ 857.537075][T22923] should_fail_usercopy+0x1a/0x20 [ 857.537121][T22923] strncpy_from_user+0x27/0x250 [ 857.537181][T22923] do_getname+0x59/0x1c0 [ 857.537205][T22923] getname_flags+0x1d/0x30 [ 857.537228][T22923] do_sys_openat2+0x6c/0x130 [ 857.537257][T22923] __x64_sys_openat+0xf2/0x120 [ 857.537307][T22923] x64_sys_call+0x1e39/0x3020 [ 857.537328][T22923] do_syscall_64+0x136/0x3c0 [ 857.537350][T22923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.537418][T22923] RIP: 0033:0x7f11876ee6ce [ 857.537469][T22923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 857.537487][T22923] RSP: 002b:00007f1186186f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 857.537581][T22923] RAX: ffffffffffffffda RBX: 00007f11861876c0 RCX: 00007f11876ee6ce [ 857.537595][T22923] RDX: 0000000000000000 RSI: 00007f11877c35ea RDI: ffffffffffffff9c [ 857.537609][T22923] RBP: 00007f1186187090 R08: 0000000000000000 R09: 0000000000000000 [ 857.537628][T22923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.537641][T22923] R13: 00007f11879b6038 R14: 00007f11879b5fa0 R15: 00007ffece15f368 [ 857.537663][T22923] [ 857.717830][T19005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.736518][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.865543][T22937] loop3: detected capacity change from 0 to 2048 [ 857.939057][T22937] Alternate GPT is invalid, using primary GPT. [ 857.947130][T22937] loop3: p2 p3 p7 [ 857.984787][ T28] audit: type=1400 audit(1784424567.778:3218): avc: denied { lock } for pid=22946 comm="syz.6.5728" path="socket:[95311]" dev="sockfs" ino=95311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 858.090478][T22955] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5719'. [ 858.100234][T22954] loop7: detected capacity change from 0 to 512 [ 858.111437][T22956] netlink: 'syz.5.5727': attribute type 6 has an invalid length. [ 858.119622][T22952] loop6: detected capacity change from 0 to 4096 [ 858.142053][T22952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.154772][T22954] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 858.169862][T22954] System zones: 0-2, 18-18, 34-35 [ 858.185185][T22954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.206201][T22954] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.218654][ T28] audit: type=1400 audit(1784424568.003:3219): avc: denied { write } for pid=22946 comm="syz.6.5728" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 858.272747][T22954] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5729'. [ 858.298337][ T28] audit: type=1400 audit(1784424568.068:3220): avc: denied { map } for pid=22946 comm="syz.6.5728" path="/226/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 858.476929][T22954] netlink: 'syz.7.5729': attribute type 6 has an invalid length. [ 858.541245][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.585378][ T28] audit: type=1400 audit(1784424568.340:3221): avc: denied { name_connect } for pid=22963 comm="syz.6.5731" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 858.665658][ T28] audit: type=1400 audit(1784424568.424:3222): avc: denied { getopt } for pid=22971 comm="syz.6.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 858.689809][ T28] audit: type=1400 audit(1784424568.443:3223): avc: denied { create } for pid=22971 comm="syz.6.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 858.810725][T22990] loop3: detected capacity change from 0 to 4096 [ 858.834100][T22992] FAULT_INJECTION: forcing a failure. [ 858.834100][T22992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.849656][T22992] CPU: 0 UID: 0 PID: 22992 Comm: syz.4.5742 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 858.849692][T22992] Tainted: [W]=WARN [ 858.849699][T22992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 858.849822][T22992] Call Trace: [ 858.849829][T22992] [ 858.849882][T22992] __dump_stack+0x1d/0x30 [ 858.849909][T22992] dump_stack_lvl+0x95/0xd0 [ 858.849931][T22992] dump_stack+0x15/0x1b [ 858.849952][T22992] should_fail_ex+0x25e/0x270 [ 858.850018][T22992] should_fail+0xb/0x20 [ 858.850042][T22992] should_fail_usercopy+0x1a/0x20 [ 858.850072][T22992] _copy_from_user+0x1c/0xb0 [ 858.850093][T22992] kstrtouint_from_user+0x69/0xf0 [ 858.850190][T22992] ? 0xffffffff81000000 [ 858.850204][T22992] ? avc_policy_seqno+0x15/0x30 [ 858.850289][T22992] proc_fail_nth_write+0x50/0x160 [ 858.850319][T22992] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 858.850339][T22992] vfs_write+0x252/0x990 [ 858.850357][T22992] ? __fget_files+0x184/0x1c0 [ 858.850455][T22992] ? mutex_lock+0x57/0x90 [ 858.850481][T22992] ksys_write+0xdc/0x1a0 [ 858.850501][T22992] __x64_sys_write+0x40/0x50 [ 858.850520][T22992] x64_sys_call+0x27e1/0x3020 [ 858.850610][T22992] do_syscall_64+0x136/0x3c0 [ 858.850665][T22992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.850690][T22992] RIP: 0033:0x7fce2657e6ce [ 858.850707][T22992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.850728][T22992] RSP: 002b:00007fce25016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.850751][T22992] RAX: ffffffffffffffda RBX: 00007fce250176c0 RCX: 00007fce2657e6ce [ 858.850765][T22992] RDX: 0000000000000001 RSI: 00007fce250170a0 RDI: 0000000000000005 [ 858.850808][T22992] RBP: 00007fce25017090 R08: 0000000000000000 R09: 0000000000000000 [ 858.850822][T22992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.850837][T22992] R13: 00007fce26846038 R14: 00007fce26845fa0 R15: 00007ffced431648 [ 858.850855][T22992] [ 858.853325][T22990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.088187][ T28] audit: type=1400 audit(1784424568.808:3224): avc: denied { write } for pid=22989 comm="syz.3.5740" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 859.137268][ T28] audit: type=1400 audit(1784424568.808:3225): avc: denied { setopt } for pid=23004 comm="syz.5.5747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 859.167427][T19005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.694487][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.873209][T23029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.068662][T23041] netlink: 'syz.5.5757': attribute type 6 has an invalid length. [ 860.109730][T23043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5761'. [ 860.392124][ T28] audit: type=1400 audit(1784424570.033:3226): avc: denied { connect } for pid=23053 comm="syz.7.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 860.420947][T23054] FAULT_INJECTION: forcing a failure. [ 860.420947][T23054] name failslab, interval 1, probability 0, space 0, times 0 [ 860.450170][T23054] CPU: 1 UID: 0 PID: 23054 Comm: syz.7.5758 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 860.450201][T23054] Tainted: [W]=WARN [ 860.450208][T23054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 860.450222][T23054] Call Trace: [ 860.450290][T23054] [ 860.450297][T23054] __dump_stack+0x1d/0x30 [ 860.450319][T23054] dump_stack_lvl+0x95/0xd0 [ 860.450342][T23054] dump_stack+0x15/0x1b [ 860.450364][T23054] should_fail_ex+0x25e/0x270 [ 860.450420][T23054] should_failslab+0x8c/0xb0 [ 860.450440][T23054] __kvmalloc_node_noprof+0x15b/0x590 [ 860.450464][T23054] ? alloc_netdev_mqs+0xa7/0xa90 [ 860.450538][T23054] ? alloc_netdev_mqs+0xa7/0xa90 [ 860.450576][T23054] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 860.450637][T23054] alloc_netdev_mqs+0xa7/0xa90 [ 860.450737][T23054] rtnl_create_link+0x239/0x720 [ 860.450781][T23054] rtnl_newlink_create+0x175/0x650 [ 860.450856][T23054] ? security_capable+0x7b/0x90 [ 860.450877][T23054] ? netlink_ns_capable+0x86/0xa0 [ 860.450895][T23054] rtnl_newlink+0x1181/0x1400 [ 860.450928][T23054] ? __css_rstat_updated+0xbb/0x280 [ 860.451022][T23054] ? xas_load+0x413/0x430 [ 860.451055][T23054] ? __rcu_read_unlock+0x4e/0x70 [ 860.451082][T23054] ? __rcu_read_unlock+0x4e/0x70 [ 860.451110][T23054] ? avc_has_perm_noaudit+0xa3/0x120 [ 860.451173][T23054] ? cred_has_capability+0x224/0x2a0 [ 860.451194][T23054] ? selinux_capable+0x31/0x40 [ 860.451225][T23054] ? security_capable+0x7b/0x90 [ 860.451325][T23054] ? ns_capable+0x80/0xb0 [ 860.451354][T23054] ? __pfx_rtnl_newlink+0x10/0x10 [ 860.451375][T23054] rtnetlink_rcv_msg+0x64b/0x720 [ 860.451442][T23054] netlink_rcv_skb+0x11e/0x220 [ 860.451607][T23054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 860.451673][T23054] rtnetlink_rcv+0x1c/0x30 [ 860.451695][T23054] netlink_unicast+0x5a7/0x680 [ 860.451716][T23054] netlink_sendmsg+0x5be/0x6f0 [ 860.451739][T23054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.451831][T23054] ____sys_sendmsg+0x532/0x580 [ 860.451909][T23054] ___sys_sendmsg+0x195/0x1e0 [ 860.451947][T23054] __x64_sys_sendmsg+0xd4/0x160 [ 860.451982][T23054] x64_sys_call+0x194c/0x3020 [ 860.452037][T23054] do_syscall_64+0x136/0x3c0 [ 860.452111][T23054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.452131][T23054] RIP: 0033:0x7fc8ffc4de99 [ 860.452147][T23054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.452164][T23054] RSP: 002b:00007fc8fe6a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.452259][T23054] RAX: ffffffffffffffda RBX: 00007fc8ffed5fa0 RCX: 00007fc8ffc4de99 [ 860.452275][T23054] RDX: 0000000000000840 RSI: 0000200000000040 RDI: 0000000000000007 [ 860.452291][T23054] RBP: 00007fc8fe6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 860.452306][T23054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.452320][T23054] R13: 00007fc8ffed6038 R14: 00007fc8ffed5fa0 R15: 00007ffede5852e8 [ 860.452341][T23054] [ 861.033407][T23072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 861.120312][T23078] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5771'. [ 861.272456][T23082] loop7: detected capacity change from 0 to 512 [ 861.335828][T23082] loop7: detected capacity change from 0 to 512 [ 861.346431][T23082] EXT4-fs: Ignoring removed bh option [ 861.355323][T23082] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 861.374667][T23082] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.5773: corrupted in-inode xattr: e_value size too large [ 861.389871][T23082] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 861.390381][T23082] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5773: couldn't read orphan inode 15 (err -117) [ 861.399625][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 861.399668][ C1] EXT4-fs (loop7): initial error at time 1784424570: ext4_iget_extra_inode:5180: inode 15 [ 861.399786][ C1] EXT4-fs (loop7): last error at time 1784424570: ext4_iget_extra_inode:5180: inode 15 [ 861.444525][T23082] loop7: lost filesystem error report for type 5 error -117 [ 861.447237][T23082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.481030][T19005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.502035][T23085] loop7: detected capacity change from 0 to 128 [ 861.518051][T23085] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 861.575567][T23085] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 861.618821][T23094] FAULT_INJECTION: forcing a failure. [ 861.618821][T23094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.632641][T23094] CPU: 1 UID: 0 PID: 23094 Comm: syz.4.5778 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 861.632677][T23094] Tainted: [W]=WARN [ 861.632712][T23094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 861.632727][T23094] Call Trace: [ 861.632734][T23094] [ 861.632743][T23094] __dump_stack+0x1d/0x30 [ 861.632767][T23094] dump_stack_lvl+0x95/0xd0 [ 861.632788][T23094] dump_stack+0x15/0x1b [ 861.632807][T23094] should_fail_ex+0x25e/0x270 [ 861.632902][T23094] should_fail+0xb/0x20 [ 861.632964][T23094] should_fail_usercopy+0x1a/0x20 [ 861.633032][T23094] _copy_from_user+0x1c/0xb0 [ 861.633055][T23094] kstrtouint_from_user+0x69/0xf0 [ 861.633086][T23094] ? br_multicast_rcv+0x3880/0x46a0 [ 861.633108][T23094] ? avc_policy_seqno+0x15/0x30 [ 861.633181][T23094] proc_fail_nth_write+0x50/0x160 [ 861.633207][T23094] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 861.633231][T23094] vfs_write+0x252/0x990 [ 861.633278][T23094] ? __fget_files+0x184/0x1c0 [ 861.633306][T23094] ? mutex_lock+0x57/0x90 [ 861.633336][T23094] ksys_write+0xdc/0x1a0 [ 861.633435][T23094] __x64_sys_write+0x40/0x50 [ 861.633460][T23094] x64_sys_call+0x27e1/0x3020 [ 861.633485][T23094] do_syscall_64+0x136/0x3c0 [ 861.633519][T23094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.633540][T23094] RIP: 0033:0x7fce2657e6ce [ 861.633558][T23094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 861.633579][T23094] RSP: 002b:00007fce25016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 861.633667][T23094] RAX: ffffffffffffffda RBX: 00007fce250176c0 RCX: 00007fce2657e6ce [ 861.633753][T23094] RDX: 0000000000000001 RSI: 00007fce250170a0 RDI: 0000000000000005 [ 861.633767][T23094] RBP: 00007fce25017090 R08: 0000000000000000 R09: 0000000000000000 [ 861.633780][T23094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.633794][T23094] R13: 00007fce26846038 R14: 00007fce26845fa0 R15: 00007ffced431648 [ 861.633814][T23094] [ 861.851840][T19005] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 861.864838][T19005] FAT-fs (loop7): Filesystem has been set read-only [ 861.871668][T19005] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 861.894869][T23100] FAULT_INJECTION: forcing a failure. [ 861.894869][T23100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.929579][T23100] CPU: 1 UID: 0 PID: 23100 Comm: syz.3.5781 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 861.929611][T23100] Tainted: [W]=WARN [ 861.929622][T23100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 861.929635][T23100] Call Trace: [ 861.929641][T23100] [ 861.929649][T23100] __dump_stack+0x1d/0x30 [ 861.929745][T23100] dump_stack_lvl+0x95/0xd0 [ 861.929763][T23100] dump_stack+0x15/0x1b [ 861.929828][T23100] should_fail_ex+0x25e/0x270 [ 861.929935][T23100] should_fail+0xb/0x20 [ 861.929972][T23100] should_fail_usercopy+0x1a/0x20 [ 861.930001][T23100] _copy_from_user+0x1c/0xb0 [ 861.930023][T23100] sctp_setsockopt+0x161/0xea0 [ 861.930043][T23100] sock_common_setsockopt+0x69/0x80 [ 861.930117][T23100] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 861.930144][T23100] __sys_setsockopt+0x184/0x200 [ 861.930199][T23100] __x64_sys_setsockopt+0x64/0x80 [ 861.930226][T23100] x64_sys_call+0x2327/0x3020 [ 861.930260][T23100] do_syscall_64+0x136/0x3c0 [ 861.930284][T23100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.930308][T23100] RIP: 0033:0x7f325079de99 [ 861.930376][T23100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.930393][T23100] RSP: 002b:00007f324f1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 861.930412][T23100] RAX: ffffffffffffffda RBX: 00007f3250a25fa0 RCX: 00007f325079de99 [ 861.930425][T23100] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 861.930463][T23100] RBP: 00007f324f1f7090 R08: 000000000000000c R09: 0000000000000000 [ 861.930477][T23100] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.930489][T23100] R13: 00007f3250a26038 R14: 00007f3250a25fa0 R15: 00007ffc5fb3e1b8 [ 861.930506][T23100] [ 862.227255][T23107] loop3: detected capacity change from 0 to 512 [ 862.321927][T23107] loop3: detected capacity change from 0 to 512 [ 862.334989][ T28] audit: type=1400 audit(1784424571.849:3227): avc: denied { mounton } for pid=23114 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 862.367630][T23107] EXT4-fs: Ignoring removed bh option [ 862.385462][T23107] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 862.429247][T23107] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.5784: corrupted in-inode xattr: e_value size too large [ 862.443839][T23107] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.444425][T23107] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5784: couldn't read orphan inode 15 (err -117) [ 862.453808][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 862.453838][ C0] EXT4-fs (loop3): initial error at time 1784424571: ext4_iget_extra_inode:5180: inode 15 [ 862.453978][ C0] EXT4-fs (loop3): last error at time 1784424571: ext4_iget_extra_inode:5180: inode 15 [ 862.524442][T23107] loop3: lost filesystem error report for type 5 error -117 [ 862.530380][T23107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.608310][T23114] lo speed is unknown, defaulting to 1000 [ 862.660469][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.705506][T23155] loop3: detected capacity change from 0 to 256 [ 862.723729][T15008] bond0 (unregistering): Released all slaves [ 862.748299][T23155] FAT-fs (loop3): bogus number of directory entries (3) [ 862.763213][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 862.779910][T23155] FAT-fs (loop3): Can't find a valid FAT filesystem [ 862.850288][T23142] netlink: 'syz.4.5794': attribute type 10 has an invalid length. [ 862.874678][T15008] hsr_slave_0: left promiscuous mode [ 862.880506][T15008] hsr_slave_1: left promiscuous mode [ 862.947014][T23177] __nla_validate_parse: 1 callbacks suppressed [ 862.947030][T23177] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5796'. [ 863.006591][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5798'. [ 863.018443][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5798'. [ 863.033486][T23142] team0: Failed to send options change via netlink (err -105) [ 863.042838][T23142] team0: Port device dummy0 added [ 863.061838][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 863.215520][T23114] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.222696][T23114] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.230670][T23114] bridge_slave_0: entered allmulticast mode [ 863.237635][T23114] bridge_slave_0: entered promiscuous mode [ 863.245234][T23114] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.252415][T23114] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.268014][T23114] bridge_slave_1: entered allmulticast mode [ 863.279378][T23114] bridge_slave_1: entered promiscuous mode [ 863.292819][T23208] FAULT_INJECTION: forcing a failure. [ 863.292819][T23208] name failslab, interval 1, probability 0, space 0, times 0 [ 863.299415][T23114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.316388][T23114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.332016][T23208] CPU: 0 UID: 0 PID: 23208 Comm: syz.3.5800 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 863.332052][T23208] Tainted: [W]=WARN [ 863.332059][T23208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 863.332073][T23208] Call Trace: [ 863.332091][T23208] [ 863.332100][T23208] __dump_stack+0x1d/0x30 [ 863.332127][T23208] dump_stack_lvl+0x95/0xd0 [ 863.332149][T23208] dump_stack+0x15/0x1b [ 863.332169][T23208] should_fail_ex+0x25e/0x270 [ 863.332217][T23208] should_failslab+0x8c/0xb0 [ 863.332249][T23208] __kmalloc_noprof+0xd4/0x4a0 [ 863.332299][T23208] ? bpf_test_init+0x86/0x130 [ 863.332392][T23208] ? bpf_test_init+0x86/0x130 [ 863.332458][T23208] bpf_test_init+0x86/0x130 [ 863.332489][T23208] bpf_prog_test_run_xdp+0x303/0x9e0 [ 863.332515][T23208] ? __rcu_read_unlock+0x4e/0x70 [ 863.332543][T23208] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 863.332639][T23208] bpf_prog_test_run+0x208/0x340 [ 863.332675][T23208] __sys_bpf+0x8da/0xc30 [ 863.332784][T23208] ? vfs_write+0x800/0x990 [ 863.332811][T23208] __x64_sys_bpf+0x69/0x80 [ 863.332941][T23208] x64_sys_call+0x10cb/0x3020 [ 863.332966][T23208] do_syscall_64+0x136/0x3c0 [ 863.332991][T23208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.333015][T23208] RIP: 0033:0x7f325079de99 [ 863.333085][T23208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.333104][T23208] RSP: 002b:00007f324f1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.333124][T23208] RAX: ffffffffffffffda RBX: 00007f3250a25fa0 RCX: 00007f325079de99 [ 863.333137][T23208] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 863.333149][T23208] RBP: 00007f324f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 863.333161][T23208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.333231][T23208] R13: 00007f3250a26038 R14: 00007f3250a25fa0 R15: 00007ffc5fb3e1b8 [ 863.333253][T23208] [ 863.348988][T23114] team0: Port device team_slave_0 added [ 863.392657][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 863.392672][ T28] audit: type=1400 audit(1784424572.822:3236): avc: denied { read } for pid=23211 comm="syz.6.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 863.397964][T23114] team0: Port device team_slave_1 added [ 863.463274][T23217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5802'. [ 863.539308][T23224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'. [ 863.609457][ T28] audit: type=1400 audit(1784424573.037:3237): avc: denied { ioctl } for pid=23225 comm="syz.5.5804" path="socket:[95885]" dev="sockfs" ino=95885 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 863.647875][T23224] netlink: 'syz.3.5803': attribute type 2 has an invalid length. [ 863.705549][T23214] vti0: entered promiscuous mode [ 863.710683][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5802'. [ 863.736296][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 863.798579][T23114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.830172][T23114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.872636][ T28] audit: type=1400 audit(1784424573.290:3238): avc: denied { write } for pid=23243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.911374][T23114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.932446][ T28] audit: type=1400 audit(1784424573.346:3239): avc: denied { write } for pid=23262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.947139][T23114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.989367][T23114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.041258][T23114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.097389][T23258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 864.147908][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 864.199968][T23114] hsr_slave_0: entered promiscuous mode [ 864.210027][T23114] hsr_slave_1: entered promiscuous mode [ 864.230133][T23114] debugfs: 'hsr0' already exists in 'hsr' [ 864.251251][T23114] Cannot create hsr debugfs directory [ 864.387796][T23275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 867.566099][T23296] FAULT_INJECTION: forcing a failure. [ 867.566099][T23296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.595735][T23297] loop3: detected capacity change from 0 to 1024 [ 867.603546][T23297] EXT4-fs: inline encryption not supported [ 867.613695][T23297] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 867.782783][T23114] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 867.883728][T23297] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5816: lblock 2 mapped to illegal pblock 2 (length 1) [ 867.883836][T23297] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 867.884709][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 867.884729][ C0] EXT4-fs (loop3): initial error at time 1784424577: ext4_map_blocks:791: inode 3: block 2 [ 867.884767][ C0] EXT4-fs (loop3): last error at time 1784424577: ext4_map_blocks:791: inode 3: block 2 [ 867.888196][T23297] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 867.888271][T23297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.5816: Invalid inode table block 1 in block_group 0 [ 867.888369][T23297] loop3: lost filesystem error report for type 5 error -117 [ 867.889287][T23297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 867.889356][T23297] loop3: lost filesystem error report for type 5 error -117 [ 867.893368][T23297] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.5816: mark_inode_dirty error [ 867.893466][T23297] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 867.893656][T23297] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 867.893684][T23297] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5816: Failed to acquire dquot type 0 [ 867.893727][T23297] loop3: lost filesystem error report for type 5 error -117 [ 867.893925][T23297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 867.893955][T23297] loop3: lost filesystem error report for type 5 error -117 [ 867.894233][T23297] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5816: mark_inode_dirty error [ 867.894269][T23297] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 867.894571][T23297] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 867.894627][T23297] EXT4-fs (loop3): 1 orphan inode deleted [ 867.898340][T23297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.899063][ T163] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 867.899232][ T163] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 867.899285][ T163] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 867.902660][T23297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.904941][T23297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.5816: Invalid inode table block 1 in block_group 0 [ 867.904990][T23297] loop3: lost filesystem error report for type 5 error -117 [ 867.905279][T23297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 867.905310][T23297] loop3: lost filesystem error report for type 5 error -117 [ 867.905531][T23297] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz.3.5816: mark_inode_dirty error [ 867.905567][T23297] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 868.349522][T23296] CPU: 1 UID: 0 PID: 23296 Comm: syz.4.5815 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 868.349585][T23296] Tainted: [W]=WARN [ 868.349591][T23296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 868.349602][T23296] Call Trace: [ 868.349607][T23296] [ 868.349615][T23296] __dump_stack+0x1d/0x30 [ 868.349637][T23296] dump_stack_lvl+0x95/0xd0 [ 868.349688][T23296] dump_stack+0x15/0x1b [ 868.349709][T23296] should_fail_ex+0x25e/0x270 [ 868.349740][T23296] should_fail+0xb/0x20 [ 868.349827][T23296] should_fail_usercopy+0x1a/0x20 [ 868.349934][T23296] _copy_from_user+0x1c/0xb0 [ 868.349954][T23296] ___sys_sendmsg+0xc1/0x1e0 [ 868.349992][T23296] __x64_sys_sendmsg+0xd4/0x160 [ 868.350069][T23296] x64_sys_call+0x194c/0x3020 [ 868.350095][T23296] do_syscall_64+0x136/0x3c0 [ 868.350120][T23296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.350178][T23296] RIP: 0033:0x7fce265bde99 [ 868.350193][T23296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.350212][T23296] RSP: 002b:00007fce25017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.350232][T23296] RAX: ffffffffffffffda RBX: 00007fce26845fa0 RCX: 00007fce265bde99 [ 868.350312][T23296] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 868.350324][T23296] RBP: 00007fce25017090 R08: 0000000000000000 R09: 0000000000000000 [ 868.350337][T23296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.350351][T23296] R13: 00007fce26846038 R14: 00007fce26845fa0 R15: 00007ffced431648 [ 868.350370][T23296] [ 868.358942][T23114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.562942][T23114] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 868.574333][T23114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.590264][T23114] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 868.643381][T23114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.651049][T23114] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 868.659669][T23114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.693998][T23114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.711152][T23114] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.721467][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.728577][T15004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.738596][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.745700][T15004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.800246][ T28] audit: type=1400 audit(1784424577.904:3240): avc: denied { read } for pid=23341 comm="syz.5.5826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 868.870045][T23114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.965377][T23114] veth0_vlan: entered promiscuous mode [ 868.972690][T23114] veth1_vlan: entered promiscuous mode [ 868.986402][T23114] veth0_macvtap: entered promiscuous mode [ 868.993360][T23114] veth1_macvtap: entered promiscuous mode [ 869.003667][T23114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.015230][T23114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.025731][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.034696][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.044551][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.053398][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.072360][ T28] audit: type=1400 audit(1784424578.166:3241): avc: denied { mounton } for pid=23114 comm="syz-executor" path="/root/syzkaller.z5KYpl/syz-tmp" dev="sda1" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 869.098527][ T28] audit: type=1400 audit(1784424578.166:3242): avc: denied { mounton } for pid=23114 comm="syz-executor" path="/root/syzkaller.z5KYpl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 869.126162][ T28] audit: type=1400 audit(1784424578.166:3243): avc: denied { mounton } for pid=23114 comm="syz-executor" path="/root/syzkaller.z5KYpl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 869.160447][ T28] audit: type=1400 audit(1784424578.184:3244): avc: denied { mounton } for pid=23114 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 869.165415][T23368] loop8: detected capacity change from 0 to 512 [ 869.184542][ T28] audit: type=1400 audit(1784424578.184:3245): avc: denied { mount } for pid=23114 comm="syz-executor" name="/" dev="gadgetfs" ino=4725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 869.224401][T23368] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 869.232683][T23368] System zones: 0-2, 18-18, 34-35 [ 869.239789][T23368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.252885][T23368] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.358908][T23379] netlink: 'syz.8.5786': attribute type 6 has an invalid length. [ 869.611427][T23398] loop3: detected capacity change from 0 to 512 [ 869.651159][T23398] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 869.679116][T23398] System zones: 0-2, 18-18, 34-35 [ 869.696640][T23398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.739290][T23398] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.880541][T23411] netlink: 'syz.3.5839': attribute type 6 has an invalid length. [ 869.883285][T23413] FAULT_INJECTION: forcing a failure. [ 869.883285][T23413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.936874][T23413] CPU: 1 UID: 0 PID: 23413 Comm: syz.6.5843 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 869.936905][T23413] Tainted: [W]=WARN [ 869.936911][T23413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 869.936924][T23413] Call Trace: [ 869.936931][T23413] [ 869.936940][T23413] __dump_stack+0x1d/0x30 [ 869.937004][T23413] dump_stack_lvl+0x95/0xd0 [ 869.937022][T23413] dump_stack+0x15/0x1b [ 869.937053][T23413] should_fail_ex+0x25e/0x270 [ 869.937078][T23413] should_fail+0xb/0x20 [ 869.937106][T23413] should_fail_usercopy+0x1a/0x20 [ 869.937208][T23413] _copy_to_user+0x20/0xa0 [ 869.937229][T23413] simple_read_from_buffer+0xb5/0x130 [ 869.937254][T23413] proc_fail_nth_read+0x10e/0x150 [ 869.937334][T23413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 869.937355][T23413] vfs_read+0x18e/0x7c0 [ 869.937373][T23413] ? __rcu_read_unlock+0x4e/0x70 [ 869.937402][T23413] ? __fget_files+0x184/0x1c0 [ 869.937458][T23413] ? mutex_lock+0x57/0x90 [ 869.937486][T23413] ksys_read+0xdc/0x1a0 [ 869.937507][T23413] __x64_sys_read+0x40/0x50 [ 869.937529][T23413] x64_sys_call+0x2886/0x3020 [ 869.937607][T23413] do_syscall_64+0x136/0x3c0 [ 869.937632][T23413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.937683][T23413] RIP: 0033:0x7f11876ee6ce [ 869.937699][T23413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 869.937717][T23413] RSP: 002b:00007f1186186fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 869.937771][T23413] RAX: ffffffffffffffda RBX: 00007f11861876c0 RCX: 00007f11876ee6ce [ 869.937785][T23413] RDX: 000000000000000f RSI: 00007f11861870a0 RDI: 0000000000000005 [ 869.937799][T23413] RBP: 00007f1186187090 R08: 0000000000000000 R09: 0000000000000000 [ 869.937811][T23413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.937822][T23413] R13: 00007f11879b6038 R14: 00007f11879b5fa0 R15: 00007ffece15f368 [ 869.937840][T23413] [ 870.184666][T23420] ip6gretap2: entered allmulticast mode [ 870.200046][T23420] batman_adv: batadv0: Adding interface: ip6gretap2 [ 870.220680][T23420] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.248531][T23420] batman_adv: batadv0: Interface activated: ip6gretap2 [ 870.284886][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.330470][T23426] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 870.337027][T23426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 870.360618][T23426] vhci_hcd vhci_hcd.0: Device attached [ 870.381794][T23426] vhci_hcd vhci_hcd.0: port 0 already used [ 870.389241][T23427] vhci_hcd: connection closed [ 870.390763][T15004] vhci_hcd vhci_hcd.8: stop threads [ 870.400636][T15004] vhci_hcd vhci_hcd.8: release socket [ 870.406013][T15004] vhci_hcd vhci_hcd.8: disconnect device [ 870.859585][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.959145][T23443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5854'. [ 870.959972][T23445] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 871.023806][T23450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5856'. [ 871.057824][T23450] bond0: entered promiscuous mode [ 871.064966][T23450] gretap0: entered promiscuous mode [ 871.072304][T23450] hsr1: entered promiscuous mode [ 871.097703][T23452] netlink: zone id is out of range [ 871.113775][T23452] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5857'. [ 871.132874][T23454] netlink: zone id is out of range [ 871.138844][T23454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5858'. [ 871.139911][T23452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23452 comm=syz.8.5857 [ 871.228811][T23460] loop8: detected capacity change from 0 to 512 [ 871.235917][T23459] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 871.319655][T23460] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 871.332012][T23460] System zones: 0-2, 18-18, 34-35 [ 871.340220][T23460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.353157][T23466] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 871.353362][T23460] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.490229][T23475] netlink: 'syz.8.5861': attribute type 6 has an invalid length. [ 871.567300][T23477] loop6: detected capacity change from 0 to 1024 [ 871.574881][T23472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5865'. [ 871.588657][T23477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.606977][T23472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5865'. [ 871.619388][T23481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 871.675395][ T28] audit: type=1400 audit(1784424580.580:3246): avc: denied { write } for pid=23476 comm="syz.6.5867" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 871.813100][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.855990][T23483] loop3: detected capacity change from 0 to 8192 [ 871.865611][T23485] netlink: zone id is out of range [ 871.881618][T23485] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5870'. [ 871.923578][T23487] netlink: zone id is out of range [ 871.931418][T23487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5871'. [ 871.965801][T23483] loop3: detected capacity change from 0 to 512 [ 871.978219][T23487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23487 comm=syz.5.5871 [ 872.012262][T23483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.024993][T23483] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.037510][T23483] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.5869: corrupted xattr block 33: invalid header [ 872.051007][T23483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 872.061990][T23483] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.5869: corrupted xattr block 33: invalid header [ 872.077782][T23483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 872.087068][T23483] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.5869: corrupted xattr block 33: invalid header [ 872.090592][ T28] audit: type=1400 audit(1784424580.982:3247): avc: denied { read } for pid=23482 comm="syz.3.5869" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 872.126399][T23483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 872.157879][ T28] audit: type=1400 audit(1784424581.038:3248): avc: denied { watch } for pid=23482 comm="syz.3.5869" path="/535/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 872.183321][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.206912][T23493] loop6: detected capacity change from 0 to 512 [ 872.271640][T23493] loop6: detected capacity change from 0 to 512 [ 872.282013][T23493] EXT4-fs: Ignoring removed bh option [ 872.336229][T23493] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 872.350533][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.367474][T23493] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.5873: corrupted in-inode xattr: e_value size too large [ 872.382500][T23493] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 872.383243][T23493] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5873: couldn't read orphan inode 15 (err -117) [ 872.387645][T23513] SELinux: policydb version 1164482465 does not match my version range 15-35 [ 872.392519][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 872.405408][T23513] SELinux: failed to load policy [ 872.413272][ C0] EXT4-fs (loop6): initial error at time 1784424581: ext4_iget_extra_inode:5180: inode 15 [ 872.434708][ C0] EXT4-fs (loop6): last error at time 1784424581: ext4_iget_extra_inode:5180: inode 15 [ 872.452222][T23493] loop6: lost filesystem error report for type 5 error -117 [ 872.452482][ T28] audit: type=1400 audit(1784424581.263:3249): avc: denied { load_policy } for pid=23512 comm="syz.8.5880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 872.501884][T23493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.555225][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.559063][T23521] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 872.604549][T23521] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5882'. [ 872.624194][T23519] loop3: detected capacity change from 0 to 512 [ 872.631546][T23519] EXT4-fs: Ignoring removed orlov option [ 872.641080][T23525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 872.685517][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5884'. [ 872.694602][T23519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 872.702657][ T3383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 872.856644][T23519] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5876: invalid indirect mapped block 32768 (level 2) [ 872.882632][T23519] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 872.885786][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 872.901383][ C1] EXT4-fs (loop3): initial error at time 1784424581: ext4_free_branches:1023: inode 16 [ 872.911059][ C1] EXT4-fs (loop3): last error at time 1784424581: ext4_free_branches:1023: inode 16 [ 872.937472][T23519] EXT4-fs (loop3): 1 orphan inode deleted [ 872.947025][T23519] EXT4-fs (loop3): 1 truncate cleaned up [ 873.469597][T23535] loop6: detected capacity change from 0 to 4096 [ 873.831528][ T3383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.254471][T23555] loop6: detected capacity change from 0 to 4096 [ 874.286922][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 874.286937][ T28] audit: type=1400 audit(1784424583.041:3253): avc: denied { mounton } for pid=23573 comm="syz.8.5899" path="/" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 874.293114][T23574] loop8: detected capacity change from 0 to 512 [ 874.336478][T23574] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 874.381947][T23574] EXT4-fs (loop8): 1 truncate cleaned up [ 874.400140][ T28] audit: type=1400 audit(1784424583.144:3254): avc: denied { write } for pid=23554 comm="syz.6.5893" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.502070][ T28] audit: type=1400 audit(1784424583.238:3255): avc: denied { write } for pid=23573 comm="syz.8.5899" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.524931][ T28] audit: type=1400 audit(1784424583.238:3256): avc: denied { write } for pid=23573 comm="syz.8.5899" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.547014][ T28] audit: type=1400 audit(1784424583.238:3257): avc: denied { write } for pid=23573 comm="syz.8.5899" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 874.569856][T23574] EXT4-fs error (device loop8): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.8.5899: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 874.582462][ T28] audit: type=1400 audit(1784424583.238:3258): avc: denied { rename } for pid=23573 comm="syz.8.5899" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 874.622133][T23574] EXT4-fs error (device loop8) in ext4_delete_entry:2744: Corrupt filesystem [ 874.630721][ T28] audit: type=1400 audit(1784424583.238:3259): avc: denied { unlink } for pid=23573 comm="syz.8.5899" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 874.653737][T23574] EXT4-fs warning (device loop8): ext4_rename_delete:3739: inode #2: comm syz.8.5899: Deleting old file: nlink 4, error=-117 [ 874.742432][T23371] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 874.871952][T23592] loop8: detected capacity change from 0 to 4096 [ 874.942650][T23592] EXT4-fs mount: 6 callbacks suppressed [ 874.942674][T23592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.138041][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.175707][ T28] audit: type=1400 audit(1784424583.874:3260): avc: denied { write } for pid=23591 comm="syz.8.5903" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 875.280644][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.873778][T23607] loop8: detected capacity change from 0 to 512 [ 875.933510][T23607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.988758][T23607] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 876.049863][ T28] audit: type=1400 audit(1784424584.669:3261): avc: denied { write } for pid=23606 comm="syz.8.5906" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 876.144664][ T28] audit: type=1400 audit(1784424584.726:3262): avc: denied { write } for pid=23606 comm="syz.8.5906" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 876.194287][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.216894][T23621] loop6: detected capacity change from 0 to 1024 [ 876.251666][T23621] EXT4-fs: dax option not supported [ 876.644069][T23640] netlink: 'syz.8.5920': attribute type 8 has an invalid length. [ 876.958021][T23661] FAULT_INJECTION: forcing a failure. [ 876.958021][T23661] name failslab, interval 1, probability 0, space 0, times 0 [ 876.961612][T23660] netlink: zone id is out of range [ 876.970653][T23661] CPU: 0 UID: 0 PID: 23661 Comm: syz.8.5928 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 876.970729][T23661] Tainted: [W]=WARN [ 876.970736][T23661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 876.970750][T23661] Call Trace: [ 876.970758][T23661] [ 876.970767][T23661] __dump_stack+0x1d/0x30 [ 876.970865][T23661] dump_stack_lvl+0x95/0xd0 [ 876.970885][T23661] dump_stack+0x15/0x1b [ 876.970910][T23661] should_fail_ex+0x25e/0x270 [ 876.970940][T23661] should_failslab+0x8c/0xb0 [ 876.971034][T23661] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 876.971059][T23661] ? __alloc_skb+0x2db/0x6f0 [ 876.971086][T23661] ? __alloc_skb+0x2db/0x6f0 [ 876.971182][T23661] __alloc_skb+0x2db/0x6f0 [ 876.971208][T23661] ? __alloc_skb+0x205/0x6f0 [ 876.971235][T23661] netlink_dump+0x10d/0x870 [ 876.971331][T23661] __netlink_dump_start+0x435/0x520 [ 876.971356][T23661] ? __pfx_rtnl_dump_all+0x10/0x10 [ 876.971474][T23661] rtnetlink_rcv_msg+0x59f/0x720 [ 876.971497][T23661] ? __pfx_rtnl_dump_all+0x10/0x10 [ 876.971520][T23661] ? __pfx_rtnl_dumpit+0x10/0x10 [ 876.971542][T23661] ? __pfx_rtnl_dump_all+0x10/0x10 [ 876.971626][T23661] netlink_rcv_skb+0x11e/0x220 [ 876.971649][T23661] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 876.971735][T23661] rtnetlink_rcv+0x1c/0x30 [ 876.971756][T23661] netlink_unicast+0x5a7/0x680 [ 876.971779][T23661] netlink_sendmsg+0x5be/0x6f0 [ 876.971862][T23661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.971888][T23661] sock_write_iter+0x2c5/0x2f0 [ 876.971921][T23661] ? __pfx_sock_write_iter+0x10/0x10 [ 876.971952][T23661] vfs_write+0x57d/0x990 [ 876.971976][T23661] ksys_write+0xdc/0x1a0 [ 876.971997][T23661] __x64_sys_write+0x40/0x50 [ 876.972017][T23661] x64_sys_call+0x27e1/0x3020 [ 876.972060][T23661] do_syscall_64+0x136/0x3c0 [ 876.972084][T23661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.972123][T23661] RIP: 0033:0x7f73a2e1de99 [ 876.972140][T23661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.972238][T23661] RSP: 002b:00007f73a1877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 876.972260][T23661] RAX: ffffffffffffffda RBX: 00007f73a30a5fa0 RCX: 00007f73a2e1de99 [ 876.972287][T23661] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000004 [ 876.972302][T23661] RBP: 00007f73a1877090 R08: 0000000000000000 R09: 0000000000000000 [ 876.972316][T23661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.972330][T23661] R13: 00007f73a30a6038 R14: 00007f73a30a5fa0 R15: 00007ffd73ca62a8 [ 876.972350][T23661] [ 877.015833][T23663] loop6: detected capacity change from 0 to 1024 [ 877.240059][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.271184][T23663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 877.286494][T23663] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.307911][T23663] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5930: bg 0: block 112: padding at end of block bitmap is not set [ 877.325090][T23663] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 66 with error 28 [ 877.337626][T23663] EXT4-fs (loop6): This should not happen!! Data will be lost [ 877.337626][T23663] [ 877.347358][T23663] EXT4-fs (loop6): Total free blocks count 0 [ 877.355091][T23663] EXT4-fs (loop6): Free/Dirty block details [ 877.361052][T23663] EXT4-fs (loop6): free_blocks=0 [ 877.366262][T23663] EXT4-fs (loop6): dirty_blocks=128 [ 877.366481][T23684] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.5930: lblock 3 mapped to illegal pblock 3 (length 3) [ 877.371470][T23663] EXT4-fs (loop6): Block reservation details [ 877.371486][T23663] EXT4-fs (loop6): i_reserved_data_blocks=8 [ 877.405706][T23684] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 877.419001][T23684] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.5930: lblock 0 mapped to illegal pblock 0 (length 1) [ 877.463761][ T12] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 877.471464][T23679] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 877.482651][T18770] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 877.510820][T23679] xt_connbytes: Forcing CT accounting to be enabled [ 877.642432][T23702] loop8: detected capacity change from 0 to 512 [ 877.713901][T23704] __nla_validate_parse: 5 callbacks suppressed [ 877.713928][T23704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5946'. [ 877.732923][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5946'. [ 877.752324][T23702] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 877.768492][T23702] System zones: 0-2, 18-18, 34-35 [ 877.810251][T23702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.923219][T23708] loop3: detected capacity change from 0 to 512 [ 877.945679][T23708] EXT4-fs: Ignoring removed orlov option [ 877.956628][T23702] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.980190][T23708] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 878.110246][T23708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5944: invalid indirect mapped block 32768 (level 2) [ 878.153307][T23714] netlink: 'syz.8.5945': attribute type 6 has an invalid length. [ 878.195410][T23708] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 878.196754][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 878.212281][ C0] EXT4-fs (loop3): initial error at time 1784424586: ext4_free_branches:1023: inode 16 [ 878.221945][ C0] EXT4-fs (loop3): last error at time 1784424586: ext4_free_branches:1023: inode 16 [ 878.359487][T23708] EXT4-fs (loop3): 1 orphan inode deleted [ 878.365258][T23708] EXT4-fs (loop3): 1 truncate cleaned up [ 878.371884][T23708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.774587][T23744] loop6: detected capacity change from 0 to 128 [ 878.796860][T23744] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 878.804465][T23744] FAT-fs (loop6): Filesystem has been set read-only [ 879.208484][T23751] netlink: 'syz.4.5952': attribute type 10 has an invalid length. [ 879.261065][T23751] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5952'. [ 880.672882][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.855298][T23770] loop8: detected capacity change from 0 to 4096 [ 880.977543][T23770] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.013388][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 881.013402][ T28] audit: type=1400 audit(1784424589.330:3269): avc: denied { write } for pid=23769 comm="syz.8.5956" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 881.149732][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.477237][ T28] audit: type=1400 audit(1784424589.760:3270): avc: denied { write } for pid=23749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.608849][ T28] audit: type=1400 audit(1784424589.816:3271): avc: denied { write } for pid=23781 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.740584][ T28] audit: type=1400 audit(1784424590.013:3272): avc: denied { write } for pid=23786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.824935][ T28] audit: type=1400 audit(1784424590.060:3273): avc: denied { write } for pid=23800 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.914270][T23805] loop6: detected capacity change from 0 to 512 [ 881.948294][T23371] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 881.971248][T23805] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 881.979327][T23805] System zones: 0-2, 18-18, 34-35 [ 881.996100][T23805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.032964][T23805] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.181232][T23811] netlink: 'syz.6.5963': attribute type 6 has an invalid length. [ 882.444687][T23820] netlink: zone id is out of range [ 882.456541][T23820] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5966'. [ 882.496434][T23820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23820 comm=syz.8.5966 [ 882.512886][T23820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38120 sclass=netlink_route_socket pid=23820 comm=syz.8.5966 [ 882.574222][T23822] bpf: Bad value for 'gid' [ 882.729678][T23829] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5970'. [ 882.730312][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5970'. [ 882.734644][T23829] loop8: detected capacity change from 0 to 1024 [ 882.735149][T23829] EXT4-fs: Ignoring removed bh option [ 882.761531][T23829] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 883.039164][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.404718][T23854] netlink: zone id is out of range [ 883.410125][T23854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5979'. [ 883.428103][T23854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23854 comm=syz.3.5979 [ 883.446493][T23854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38120 sclass=netlink_route_socket pid=23854 comm=syz.3.5979 [ 883.468786][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.491542][T23850] lo speed is unknown, defaulting to 1000 [ 883.678319][T23876] netlink: 'syz.3.5984': attribute type 8 has an invalid length. [ 883.720641][T23850] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.720672][T23850] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.720782][T23850] bridge_slave_0: entered allmulticast mode [ 883.722396][T23850] bridge_slave_0: entered promiscuous mode [ 883.723409][T23850] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.723519][T23850] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.723599][T23850] bridge_slave_1: entered allmulticast mode [ 883.724277][T23850] bridge_slave_1: entered promiscuous mode [ 883.791822][T23850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.796612][T23850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.822473][T23850] team0: Port device team_slave_0 added [ 883.834488][T23850] team0: Port device team_slave_1 added [ 883.856237][T23884] loop8: detected capacity change from 0 to 4096 [ 883.864707][T23884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.870270][ T28] audit: type=1400 audit(1784424592.006:3274): avc: denied { write } for pid=23881 comm="syz.8.5985" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 883.876248][ T28] audit: type=1400 audit(1784424592.015:3275): avc: denied { write } for pid=23879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.899966][T23850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.899980][T23850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.900007][T23850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.908638][T23850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.960880][ T28] audit: type=1400 audit(1784424592.053:3276): avc: denied { write } for pid=23897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.032624][T23850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.112816][T23850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.130983][T23850] hsr_slave_0: entered promiscuous mode [ 884.131417][T23850] hsr_slave_1: entered promiscuous mode [ 884.131698][T23850] debugfs: 'hsr0' already exists in 'hsr' [ 884.131712][T23850] Cannot create hsr debugfs directory [ 884.215063][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.251261][T23905] loop8: detected capacity change from 0 to 512 [ 884.268593][T23903] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5987'. [ 884.286699][T23905] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 884.286731][T23905] System zones: 0-2, 18-18, 34-35 [ 884.288326][T23905] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.288387][T23905] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.364317][T23850] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.374166][T23850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.427450][T23911] loop6: detected capacity change from 0 to 512 [ 884.441349][T23850] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.442226][T23911] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 884.468229][T23911] System zones: 0-2, 18-18, 34-35 [ 884.471581][T23850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.474605][T23911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.483910][ T28] audit: type=1400 audit(1784424592.558:3277): avc: denied { ioctl } for pid=23912 comm="syz.3.5991" path="socket:[98296]" dev="sockfs" ino=98296 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 884.496716][T23911] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.545585][T23916] netlink: 'syz.8.5988': attribute type 6 has an invalid length. [ 884.612268][T23850] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.626069][T23850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.696377][T23929] netlink: 'syz.6.5990': attribute type 6 has an invalid length. [ 884.707476][T23931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 884.734319][T23850] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.751702][T23850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.763233][T23931] team0: Unable to change to the same mode the team is in [ 884.870070][T23850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 884.878432][T23850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.886127][T23850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 884.901461][T23850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 884.909392][T23850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 884.917588][T23850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.925594][T23850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 884.934292][T23850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 884.947529][T23936] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.958120][T23936] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.994023][T23850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.005232][T23850] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.028160][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.035327][T14996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.047916][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.055000][T14996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.084442][T23936] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.095168][T23936] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.186499][T23850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.232744][T23936] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.243702][T23936] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.305206][T23936] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.316718][T23936] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.374438][T23850] veth0_vlan: entered promiscuous mode [ 885.401002][T23850] veth1_vlan: entered promiscuous mode [ 885.437045][T15000] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.445868][T15000] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.465801][T23850] veth0_macvtap: entered promiscuous mode [ 885.486751][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.493485][T23850] veth1_macvtap: entered promiscuous mode [ 885.503243][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.511422][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.546126][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.557059][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.571134][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.659630][T23985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 885.678172][T23334] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 885.686409][T15004] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.695941][T15004] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.817507][T23850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.828628][T23850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.847605][ T28] audit: type=1326 audit(1784424593.850:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23988 comm="syz.8.6008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a2e1de99 code=0x0 [ 885.876026][T23985] team0: Unable to change to the same mode the team is in [ 885.887897][T15004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.900566][T23991] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6007'. [ 885.943653][T15004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.953598][T15004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.981266][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6008'. [ 885.990550][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6008'. [ 886.003810][T23994] netlink: 'syz.8.6008': attribute type 12 has an invalid length. [ 886.009239][T15004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.011868][T23994] netlink: 'syz.8.6008': attribute type 11 has an invalid length. [ 886.124223][T24003] ip6gre1: entered promiscuous mode [ 886.130144][T24003] ip6gre1: entered allmulticast mode [ 886.145310][T24005] loop6: detected capacity change from 0 to 512 [ 886.186917][T24009] loop4: detected capacity change from 0 to 512 [ 886.193965][ T3525] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 886.291920][T24009] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 886.292003][T24009] System zones: 0-2, 18-18, 34-35 [ 886.293032][T24009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.293125][T24009] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.298882][T24014] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6015'. [ 886.299290][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6015'. [ 886.368193][T24014] loop6: detected capacity change from 0 to 1024 [ 886.372522][T24014] EXT4-fs: Ignoring removed bh option [ 886.398403][T24014] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 886.408711][T24017] netlink: 'syz.5.6013': attribute type 6 has an invalid length. [ 886.412845][T24018] netlink: 'syz.4.6014': attribute type 6 has an invalid length. [ 886.572421][T24024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 886.588899][ T3376] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 886.609047][T24024] team0: Unable to change to the same mode the team is in [ 886.696203][T24026] netlink: 'syz.3.6019': attribute type 1 has an invalid length. [ 886.715860][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 886.715875][ T28] audit: type=1400 audit(1784424594.664:3281): avc: denied { write } for pid=23114 comm="syz-executor" name="45" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 886.780561][ T28] audit: type=1400 audit(1784424594.664:3282): avc: denied { remove_name } for pid=23114 comm="syz-executor" name="binderfs" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 886.814131][T15000] bond1 (unregistering): (slave geneve2): Releasing active interface [ 886.826158][ T28] audit: type=1400 audit(1784424594.664:3283): avc: denied { write } for pid=23114 comm="syz-executor" name="45" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 886.852255][ T28] audit: type=1400 audit(1784424594.664:3284): avc: denied { write } for pid=23114 comm="syz-executor" name="45" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 886.879192][ T28] audit: type=1400 audit(1784424594.664:3285): avc: denied { write } for pid=23114 comm="syz-executor" name="45" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 886.905542][ T28] audit: type=1400 audit(1784424594.664:3286): avc: denied { rmdir } for pid=23114 comm="syz-executor" name="45" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 886.959048][T15000] bond0 (unregistering): Released all slaves [ 886.990743][T15000] bond1 (unregistering): Released all slaves [ 887.068230][T24044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6026'. [ 887.088229][T24048] loop3: detected capacity change from 0 to 512 [ 887.095475][T24048] ext3: Unknown parameter 'pcr' [ 887.103118][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6026'. [ 887.120567][T24044] loop6: detected capacity change from 0 to 1024 [ 887.127600][T24044] EXT4-fs: Ignoring removed bh option [ 887.135402][T15000] hsr_slave_0: left promiscuous mode [ 887.154012][T15000] hsr_slave_1: left promiscuous mode [ 887.164646][T15000] veth1_macvtap: left promiscuous mode [ 887.170301][T15000] veth0_macvtap: left promiscuous mode [ 887.171679][T24044] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 887.175926][T15000] veth1_vlan: left promiscuous mode [ 887.175988][T15000] veth0_vlan: left promiscuous mode [ 887.214429][T24054] netlink: 'syz.3.6028': attribute type 1 has an invalid length. [ 887.302906][T15000] team0 (unregistering): Port device dummy0 removed [ 887.361920][T23850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.400424][T24065] bridge_slave_0: left allmulticast mode [ 887.406110][T24065] bridge_slave_0: left promiscuous mode [ 887.412114][T24065] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.423228][T24065] bridge_slave_1: left allmulticast mode [ 887.428954][T24065] bridge_slave_1: left promiscuous mode [ 887.435181][T24065] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.455450][T24068] loop8: detected capacity change from 0 to 512 [ 887.461027][T24065] bond0: (slave bond_slave_0): Releasing backup interface [ 887.475127][T24071] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6029'. [ 887.487676][ T28] audit: type=1400 audit(1784424595.394:3287): avc: denied { lock } for pid=24057 comm="syz.8.6030" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 887.504976][ T3376] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 887.527731][T24065] bond0: (slave bond_slave_1): Releasing backup interface [ 887.548586][T24065] team0: Port device team_slave_0 removed [ 887.563120][T24065] team0: Port device team_slave_1 removed [ 887.577190][T24065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.586365][T24065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.597641][T24065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.605809][T24065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.618221][T24065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 887.652769][T24067] team0: Mode changed to "broadcast" [ 887.667250][T24058] lo speed is unknown, defaulting to 1000 [ 888.279277][T24092] loop6: detected capacity change from 0 to 512 [ 888.418023][T24092] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 888.456923][T24092] System zones: 0-2, 18-18, 34-35 [ 888.503486][T24092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.753809][T24092] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.927130][T24099] netlink: zone id is out of range [ 888.950137][T24099] __nla_validate_parse: 2 callbacks suppressed [ 888.950203][T24099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6042'. [ 888.972945][T15000] IPVS: stop unused estimator thread 0... [ 888.984001][T24100] netlink: 'syz.6.6041': attribute type 6 has an invalid length. [ 889.052816][T24099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24099 comm=syz.4.6042 [ 889.125944][T24101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38120 sclass=netlink_route_socket pid=24101 comm=syz.4.6042 [ 889.323754][T24107] loop4: detected capacity change from 0 to 512 [ 889.384899][T24107] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 889.434973][T24107] System zones: 0-2, 18-18, 34-35 [ 889.448434][ T28] audit: type=1400 audit(1784424597.228:3288): avc: denied { ioctl } for pid=24102 comm="syz.8.6043" path="socket:[100421]" dev="sockfs" ino=100421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 889.484918][T24107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.509503][T24107] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.767706][ T28] audit: type=1400 audit(1784424597.518:3289): avc: denied { write } for pid=24114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.815943][ T28] audit: type=1400 audit(1784424597.565:3290): avc: denied { write } for pid=24131 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.839991][T24107] netlink: 'syz.4.6044': attribute type 6 has an invalid length. [ 889.928911][T24137] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 890.003516][T24149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6048'. [ 890.095563][T24158] netlink: 'syz.3.6051': attribute type 11 has an invalid length. [ 890.163188][T24162] loop3: detected capacity change from 0 to 1764 [ 890.399671][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.442901][T23850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.490278][T24171] netlink: 'syz.6.6054': attribute type 8 has an invalid length. [ 890.601426][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6059'. [ 890.621431][T24179] loop6: detected capacity change from 0 to 4096 [ 890.656100][T24179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.785437][T24190] bridge_slave_0: left allmulticast mode [ 890.793815][T24190] bridge_slave_0: left promiscuous mode [ 890.800187][T24190] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.813205][T24190] bridge_slave_1: left allmulticast mode [ 890.819305][T24190] bridge_slave_1: left promiscuous mode [ 890.825081][T24190] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.834815][T24190] bond0: (slave bond_slave_0): Releasing backup interface [ 890.844358][T24190] bond0: (slave bond_slave_1): Releasing backup interface [ 890.855557][T24190] team0: Port device team_slave_0 removed [ 890.863821][T24190] team0: Port device team_slave_1 removed [ 890.870456][T24190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.877967][T24190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.886688][T24190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.894429][T24190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.903899][T24190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 890.957147][T24194] team0: Mode changed to "broadcast" [ 890.970520][T24199] tipc: Started in network mode [ 890.975742][T24199] tipc: Node identity ac14140f, cluster identity 4711 [ 890.984056][T24199] tipc: New replicast peer: 255.255.255.255 [ 890.991148][T24199] tipc: Enabled bearer , priority 10 [ 891.086419][T24211] netlink: 'syz.5.6067': attribute type 21 has an invalid length. [ 891.488515][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.567532][T24233] netlink: zone id is out of range [ 891.590348][T24233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6073'. [ 891.642477][T24233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24233 comm=syz.3.6073 [ 891.668754][T24233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38120 sclass=netlink_route_socket pid=24233 comm=syz.3.6073 [ 892.015461][T24258] netlink: 'syz.4.6081': attribute type 8 has an invalid length. [ 892.067420][ T3141] tipc: Node number set to 2886997007 [ 892.484101][T24272] loop4: detected capacity change from 0 to 4096 [ 892.525495][T24272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.563243][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 892.563257][ T28] audit: type=1400 audit(1784424600.138:3300): avc: denied { write } for pid=24271 comm="syz.4.6084" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 892.563778][T24280] netlink: zone id is out of range [ 892.637872][T24280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6087'. [ 892.653014][T23850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.695684][T24283] loop6: detected capacity change from 0 to 4096 [ 892.714466][T24280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24280 comm=syz.5.6087 [ 892.730083][T24280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38120 sclass=netlink_route_socket pid=24280 comm=syz.5.6087 [ 892.765777][T24283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.790857][T24287] loop4: detected capacity change from 0 to 1764 [ 892.800791][ T28] audit: type=1400 audit(1784424600.363:3301): avc: denied { write } for pid=24282 comm="syz.6.6089" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 893.116589][T24298] lo speed is unknown, defaulting to 1000 [ 893.216331][T24301] netlink: 'syz.5.6094': attribute type 8 has an invalid length. [ 893.628114][T24310] lo speed is unknown, defaulting to 1000 [ 893.637896][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.848597][T24313] loop6: detected capacity change from 0 to 4096 [ 893.869117][T24313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.013794][T24321] loop3: detected capacity change from 0 to 128 [ 894.071515][ T28] audit: type=1400 audit(1784424601.532:3302): avc: denied { write } for pid=24312 comm="syz.6.6098" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.109237][T24321] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 894.123437][T24321] ext4 filesystem being mounted at /577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 894.339422][ T28] audit: type=1400 audit(1784424601.645:3303): avc: denied { write } for pid=24314 comm="syz.3.6099" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.776440][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.045385][T24334] netlink: 'syz.6.6105': attribute type 8 has an invalid length. [ 895.418887][T24342] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6107'. [ 895.446226][T24322] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6100'. [ 895.464499][T24342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6107'. [ 895.552069][T12707] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 895.564727][T24339] loop6: detected capacity change from 0 to 1024 [ 895.575287][T24339] EXT4-fs: Ignoring removed bh option [ 895.671046][T24339] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 895.800776][T24349] loop3: detected capacity change from 0 to 1024 [ 895.823729][T24349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.851848][ T28] audit: type=1400 audit(1784424603.208:3304): avc: denied { write } for pid=24346 comm="syz.3.6108" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 895.871855][T24349] FAULT_INJECTION: forcing a failure. [ 895.871855][T24349] name failslab, interval 1, probability 0, space 0, times 0 [ 895.876166][T24348] infiniband syz0: set down [ 895.898824][T24349] CPU: 1 UID: 0 PID: 24349 Comm: syz.3.6108 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 895.898859][T24349] Tainted: [W]=WARN [ 895.898867][T24349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 895.898880][T24349] Call Trace: [ 895.898889][T24349] [ 895.898898][T24349] __dump_stack+0x1d/0x30 [ 895.898991][T24349] dump_stack_lvl+0x95/0xd0 [ 895.899014][T24349] dump_stack+0x15/0x1b [ 895.899092][T24349] should_fail_ex+0x25e/0x270 [ 895.899168][T24349] should_failslab+0x8c/0xb0 [ 895.899191][T24349] __kmalloc_noprof+0xd4/0x4a0 [ 895.899222][T24349] ? ext4_find_extent+0x17f/0x7a0 [ 895.899323][T24349] ? ext4_find_extent+0x17f/0x7a0 [ 895.899396][T24349] ext4_find_extent+0x17f/0x7a0 [ 895.899429][T24349] ext4_ext_map_blocks+0x10b/0x2f30 [ 895.899470][T24349] ? percpu_counter_add_batch+0xb5/0x120 [ 895.899544][T24349] ext4_map_create_blocks+0xd1/0x390 [ 895.899578][T24349] ext4_map_blocks+0x57f/0x950 [ 895.899603][T24349] ext4_alloc_file_blocks+0x2c1/0x990 [ 895.899630][T24349] ext4_zero_range+0x2f7/0x700 [ 895.899696][T24349] ext4_fallocate+0x2d4/0x320 [ 895.899717][T24349] vfs_fallocate+0x3ac/0x400 [ 895.899741][T24349] __x64_sys_fallocate+0x7a/0xd0 [ 895.899765][T24349] x64_sys_call+0x298e/0x3020 [ 895.899821][T24349] do_syscall_64+0x136/0x3c0 [ 895.899893][T24349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.899916][T24349] RIP: 0033:0x7f325079de99 [ 895.899933][T24349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.900001][T24349] RSP: 002b:00007f324f1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 895.900023][T24349] RAX: ffffffffffffffda RBX: 00007f3250a25fa0 RCX: 00007f325079de99 [ 895.900038][T24349] RDX: 00000000000037ec RSI: 0000000000000010 RDI: 0000000000000004 [ 895.900051][T24349] RBP: 00007f324f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 895.900065][T24349] R10: 0000000000000683 R11: 0000000000000246 R12: 0000000000000001 [ 895.900084][T24349] R13: 00007f3250a26038 R14: 00007f3250a25fa0 R15: 00007ffc5fb3e1b8 [ 895.900101][T24349] [ 895.915080][T24348] infiniband syz0: added ipvlan0 [ 896.005992][T24356] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6111'. [ 896.096504][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6111'. [ 896.134194][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.141691][T24348] RDS/IB: syz0: added [ 896.162311][T24348] smc: adding ib device syz0 with port count 1 [ 896.189917][T24348] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 896.293710][T24356] loop6: detected capacity change from 0 to 1024 [ 896.306315][T24356] EXT4-fs: Ignoring removed bh option [ 896.330811][ T28] audit: type=1400 audit(1784424603.666:3305): avc: denied { create } for pid=24364 comm="syz.5.6114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 896.362697][T24356] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 896.641869][ T28] audit: type=1400 audit(1784424603.966:3306): avc: denied { write } for pid=24372 comm="syz.6.6117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 896.877630][T24387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6122'. [ 896.976084][T12734] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 896.984066][T12734] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 897.264615][T24404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6126'. [ 897.276010][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6126'. [ 897.375362][T24406] random: crng reseeded on system resumption [ 897.381692][ T28] audit: type=1400 audit(1784424604.639:3307): avc: denied { write } for pid=24405 comm="syz.3.6127" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 897.441028][ T28] audit: type=1400 audit(1784424604.639:3308): avc: denied { open } for pid=24405 comm="syz.3.6127" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 897.468381][T24406] tmpfs: Bad value for 'mpol' [ 897.494155][ T28] audit: type=1400 audit(1784424604.705:3309): avc: denied { mounton } for pid=24405 comm="syz.3.6127" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 897.581033][T24419] random: crng reseeded on system resumption [ 897.595857][T24419] FAULT_INJECTION: forcing a failure. [ 897.595857][T24419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.634460][T24419] CPU: 1 UID: 0 PID: 24419 Comm: syz.8.6133 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 897.634497][T24419] Tainted: [W]=WARN [ 897.634504][T24419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 897.634633][T24419] Call Trace: [ 897.634640][T24419] [ 897.634647][T24419] __dump_stack+0x1d/0x30 [ 897.634669][T24419] dump_stack_lvl+0x95/0xd0 [ 897.634688][T24419] dump_stack+0x15/0x1b [ 897.634760][T24419] should_fail_ex+0x25e/0x270 [ 897.634791][T24419] should_fail+0xb/0x20 [ 897.634817][T24419] should_fail_usercopy+0x1a/0x20 [ 897.634905][T24419] _copy_from_user+0x1c/0xb0 [ 897.634925][T24419] memdup_user+0x5e/0xd0 [ 897.634965][T24419] strndup_user+0x68/0xb0 [ 897.635044][T24419] __se_sys_mount+0x4d/0x2e0 [ 897.635071][T24419] ? __hrtimer_rearm_deferred+0x571/0x650 [ 897.635107][T24419] __x64_sys_mount+0x67/0x80 [ 897.635201][T24419] x64_sys_call+0x2d61/0x3020 [ 897.635227][T24419] do_syscall_64+0x136/0x3c0 [ 897.635253][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.635277][T24419] RIP: 0033:0x7f73a2e1de99 [ 897.635370][T24419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.635389][T24419] RSP: 002b:00007f73a1877028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 897.635443][T24419] RAX: ffffffffffffffda RBX: 00007f73a30a5fa0 RCX: 00007f73a2e1de99 [ 897.635458][T24419] RDX: 0000200000000240 RSI: 0000200000000540 RDI: 0000000000000000 [ 897.635528][T24419] RBP: 00007f73a1877090 R08: 00002000000007c0 R09: 0000000000000000 [ 897.635540][T24419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.635553][T24419] R13: 00007f73a30a6038 R14: 00007f73a30a5fa0 R15: 00007ffd73ca62a8 [ 897.635650][T24419] [ 897.845526][T24422] lo speed is unknown, defaulting to 1000 [ 897.852305][T24425] loop3: detected capacity change from 0 to 2048 [ 897.938786][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 897.938801][ T28] audit: type=1400 audit(1784424605.173:3311): avc: denied { connect } for pid=24427 comm="syz.5.6137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 898.025460][T24439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6138'. [ 898.025919][T24425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.038442][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6138'. [ 898.122291][T24439] loop6: detected capacity change from 0 to 1024 [ 898.132652][T24439] EXT4-fs: Ignoring removed bh option [ 898.143126][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.159794][T24439] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 898.280878][T24459] loop6: detected capacity change from 0 to 4096 [ 898.313735][T24459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.330772][ T28] audit: type=1400 audit(1784424605.538:3312): avc: denied { write } for pid=24458 comm="syz.6.6147" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 898.389294][T24453] loop3: detected capacity change from 0 to 1024 [ 898.399753][T24453] EXT4-fs: Ignoring removed bh option [ 898.440378][T24453] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 898.475765][T24467] loop8: detected capacity change from 0 to 4096 [ 898.495345][T24457] netlink: 'syz.5.6146': attribute type 6 has an invalid length. [ 898.502092][T24467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.520371][ T28] audit: type=1400 audit(1784424605.687:3313): avc: denied { write } for pid=24466 comm="syz.8.6149" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 898.564777][T23114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.574069][T24470] loop3: detected capacity change from 0 to 4096 [ 898.600472][T24470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.623579][ T28] audit: type=1400 audit(1784424605.809:3314): avc: denied { write } for pid=24469 comm="syz.3.6150" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 899.212946][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.258408][T11830] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 899.272721][T11830] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 899.453696][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.628730][T24527] loop3: detected capacity change from 0 to 512 [ 899.661028][T24527] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 899.676144][T24529] loop6: detected capacity change from 0 to 4096 [ 899.688245][T24527] System zones: 0-2, 18-18, 34-35 [ 899.696806][T24527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.710064][T24527] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.724377][T24529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.798806][ T28] audit: type=1400 audit(1784424606.876:3315): avc: denied { write } for pid=24528 comm="syz.6.6170" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 899.945088][T24540] loop4: detected capacity change from 0 to 4096 [ 900.032237][T24540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.049959][T24543] netlink: 'syz.3.6169': attribute type 6 has an invalid length. [ 900.060878][ T28] audit: type=1400 audit(1784424607.147:3316): avc: denied { write } for pid=24539 comm="syz.4.6173" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 900.144354][T23850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.553448][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.579896][T24572] netlink: 'syz.6.6186': attribute type 8 has an invalid length. [ 900.895398][T24581] loop4: detected capacity change from 0 to 512 [ 900.965808][T24581] EXT4-fs: Ignoring removed bh option [ 900.980880][T24581] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 901.007430][T24581] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6188: corrupted in-inode xattr: e_value size too large [ 901.037266][T24581] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 901.037836][T24581] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6188: couldn't read orphan inode 15 (err -117) [ 901.047197][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 901.047271][ C1] EXT4-fs (loop4): initial error at time 1784424608: ext4_iget_extra_inode:5180: inode 15 [ 901.047368][ C1] EXT4-fs (loop4): last error at time 1784424608: ext4_iget_extra_inode:5180: inode 15 [ 901.092165][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.123251][T24581] loop4: lost filesystem error report for type 5 error -117 [ 901.127877][T24581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.207748][T23850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.624410][T24611] __nla_validate_parse: 7 callbacks suppressed [ 901.624425][T24611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6198'. [ 901.645934][T24616] netlink: 'syz.8.6199': attribute type 8 has an invalid length. [ 901.878716][ T28] audit: type=1400 audit(1784424608.860:3317): avc: denied { write } for pid=24621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.948610][ T28] audit: type=1400 audit(1784424608.888:3318): avc: denied { write } for pid=24637 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.536233][T24684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6218'. [ 903.547479][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6218'. [ 903.560768][T24684] set_capacity_and_notify: 1 callbacks suppressed [ 903.560785][T24684] loop4: detected capacity change from 0 to 1024 [ 903.595104][T24684] EXT4-fs: Ignoring removed bh option [ 903.629813][T24684] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 903.676384][ T28] audit: type=1400 audit(1784424610.544:3319): avc: denied { write } for pid=24687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.716758][ T28] audit: type=1400 audit(1784424610.572:3320): avc: denied { write } for pid=24701 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.745651][ T28] audit: type=1400 audit(1784424610.600:3321): avc: denied { getopt } for pid=24704 comm="syz.5.6222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 903.788628][T24703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 903.789586][T24710] netlink: zone id is out of range [ 903.810054][T24707] team0: Unable to change to the same mode the team is in [ 903.838332][T24710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6223'. [ 903.864633][T24710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24710 comm=syz.6.6223 [ 903.956660][T24720] loop6: detected capacity change from 0 to 512 [ 903.970866][T24720] EXT4-fs: Ignoring removed i_version option [ 903.987281][T24720] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 904.002237][T24720] EXT4-fs (loop6): 1 truncate cleaned up [ 904.010034][T24720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.025791][ T28] audit: type=1400 audit(1784424610.872:3322): avc: denied { write } for pid=24719 comm="syz.6.6228" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.087997][T24731] loop4: detected capacity change from 0 to 4096 [ 904.123079][T24731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.144366][ T28] audit: type=1400 audit(1784424610.984:3323): avc: denied { write } for pid=24730 comm="syz.4.6232" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.201745][T23850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.202607][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.294019][T24738] loop6: detected capacity change from 0 to 4096 [ 904.318677][T24741] loop3: detected capacity change from 0 to 512 [ 904.325337][T24741] EXT4-fs: Ignoring removed orlov option [ 904.338804][T24745] FAULT_INJECTION: forcing a failure. [ 904.338804][T24745] name failslab, interval 1, probability 0, space 0, times 0 [ 904.351420][T24745] CPU: 0 UID: 0 PID: 24745 Comm: syz.4.6236 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 904.351453][T24745] Tainted: [W]=WARN [ 904.351459][T24745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 904.351470][T24745] Call Trace: [ 904.351477][T24745] [ 904.351485][T24745] __dump_stack+0x1d/0x30 [ 904.351525][T24745] dump_stack_lvl+0x95/0xd0 [ 904.351544][T24745] dump_stack+0x15/0x1b [ 904.351562][T24745] should_fail_ex+0x25e/0x270 [ 904.351629][T24745] should_failslab+0x8c/0xb0 [ 904.351656][T24745] __kmalloc_noprof+0xd4/0x4a0 [ 904.351682][T24745] ? bpf_test_init+0x86/0x130 [ 904.351704][T24745] ? bpf_test_init+0x86/0x130 [ 904.351782][T24745] bpf_test_init+0x86/0x130 [ 904.351866][T24745] bpf_prog_test_run_xdp+0x303/0x9e0 [ 904.351890][T24745] ? __rcu_read_unlock+0x4e/0x70 [ 904.351916][T24745] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 904.351940][T24745] bpf_prog_test_run+0x208/0x340 [ 904.351978][T24745] __sys_bpf+0x8da/0xc30 [ 904.352020][T24745] ? vfs_write+0x800/0x990 [ 904.352046][T24745] __x64_sys_bpf+0x69/0x80 [ 904.352079][T24745] x64_sys_call+0x10cb/0x3020 [ 904.352144][T24745] do_syscall_64+0x136/0x3c0 [ 904.352168][T24745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.352268][T24745] RIP: 0033:0x7fb04e75de99 [ 904.352286][T24745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.352305][T24745] RSP: 002b:00007fb04d1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 904.352363][T24745] RAX: ffffffffffffffda RBX: 00007fb04e9e5fa0 RCX: 00007fb04e75de99 [ 904.352379][T24745] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 904.352394][T24745] RBP: 00007fb04d1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 904.352435][T24745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.352450][T24745] R13: 00007fb04e9e6038 R14: 00007fb04e9e5fa0 R15: 00007ffff2986bc8 [ 904.352471][T24745] [ 904.564415][T24741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 904.569422][T24738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.597418][T24749] netlink: zone id is out of range [ 904.606738][T24749] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6237'. [ 904.667091][T24741] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.6231: invalid indirect mapped block 32768 (level 2) [ 904.668958][ T28] audit: type=1400 audit(1784424611.452:3324): avc: denied { write } for pid=24737 comm="syz.6.6233" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 904.681965][T24741] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 904.708832][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 904.724433][ C1] EXT4-fs (loop3): initial error at time 1784424611: ext4_free_branches:1023: inode 16 [ 904.734129][ C1] EXT4-fs (loop3): last error at time 1784424611: ext4_free_branches:1023: inode 16 [ 904.767417][T24741] EXT4-fs (loop3): 1 orphan inode deleted [ 904.778456][T24741] EXT4-fs (loop3): 1 truncate cleaned up [ 904.798279][T24741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.019228][T24767] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 905.019228][T24767] program syz.8.6241 not setting count and/or reply_len properly [ 905.116312][T24766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6242'. [ 905.200239][T18770] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.764133][T24772] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6244'. [ 905.826136][T24772] netlink: 'syz.4.6244': attribute type 1 has an invalid length. [ 905.959156][ C1] ================================================================== [ 905.967273][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 905.974490][ C1] [ 905.976799][ C1] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 0: [ 905.984870][ C1] wq_worker_tick+0x64/0x240 [ 905.989470][ C1] sched_tick+0xbc/0x1f0 [ 905.993714][ C1] update_process_times+0x15e/0x190 [ 905.998927][ C1] tick_nohz_handler+0x227/0x380 [ 906.003877][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 906.009086][ C1] hrtimer_interrupt+0x257/0x810 [ 906.014019][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 906.019918][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 906.025565][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.031544][ C1] crng_make_state+0xc1/0x200 [ 906.036227][ C1] _get_random_bytes+0x85/0x1b0 [ 906.041110][ C1] get_random_bytes+0x1d/0x30 [ 906.045784][ C1] nsim_dev_trap_report_work+0x46a/0x630 [ 906.051420][ C1] process_scheduled_works+0x4d4/0x9a0 [ 906.056886][ C1] worker_thread+0x569/0x750 [ 906.061485][ C1] kthread+0x221/0x270 [ 906.065551][ C1] ret_from_fork+0x146/0x330 [ 906.070135][ C1] ret_from_fork_asm+0x1a/0x30 [ 906.074902][ C1] [ 906.077219][ C1] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 1: [ 906.085279][ C1] wq_worker_tick+0x64/0x240 [ 906.089884][ C1] sched_tick+0xbc/0x1f0 [ 906.094126][ C1] update_process_times+0x15e/0x190 [ 906.099320][ C1] tick_nohz_handler+0x227/0x380 [ 906.104248][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 906.109458][ C1] hrtimer_interrupt+0x257/0x810 [ 906.114399][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 906.120296][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 906.125937][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.131922][ C1] __sanitizer_cov_trace_const_cmp1+0x17/0x90 [ 906.138005][ C1] in_aton+0x14c/0x2c0 [ 906.142074][ C1] nsim_dev_trap_report_work+0x334/0x630 [ 906.147709][ C1] process_scheduled_works+0x4d4/0x9a0 [ 906.153166][ C1] worker_thread+0x569/0x750 [ 906.157766][ C1] kthread+0x221/0x270 [ 906.161826][ C1] ret_from_fork+0x146/0x330 [ 906.166422][ C1] ret_from_fork_asm+0x1a/0x30 [ 906.171181][ C1] [ 906.173490][ C1] value changed: 0x0000000000393870 -> 0x0000000000395f80 [ 906.180582][ C1] [ 906.182890][ C1] Reported by Kernel Concurrency Sanitizer on: [ 906.189035][ C1] CPU: 1 UID: 0 PID: 163 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 906.199975][ C1] Tainted: [W]=WARN [ 906.203769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 906.213811][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 906.220581][ C1] ================================================================== [ 906.866017][T12707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.