last executing test programs: 2m6.918154319s ago: executing program 4 (id=732): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x4, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r2, 0x8, 0x0, 0xfffffffb, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f00000002c0)="a43b2eaab4000000000080006558", 0xe}], 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) getxattr(&(0x7f0000000140)='\x00', &(0x7f00000001c0)=@random={'os2.', '~{&\x03\x00'}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) 2m6.329372165s ago: executing program 4 (id=736): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x6352, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000180)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x2ad4}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0xffffffff}], 0x400000000000284, 0xf00) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 2m4.251201329s ago: executing program 4 (id=737): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) capset(&(0x7f0000000080)={0x20080522}, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x200000000000d) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xd}, 0x102260, 0x810000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)=ANY=[], 0x0, 0x53, 0x0, 0x1}, 0x28) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RXATTRCREATE(r1, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) unshare(0x20000400) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x8, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0xa) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0xfd, 0xff}, {0x9, 0x5, 0xf, 0x2, 0x10, 0x2, 0x1, 0xe9}, {0x9, 0x5, 0x2, 0x3, 0x20, 0x1, 0x5}}}}}}]}}, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0xfcd4) 2m2.264569941s ago: executing program 4 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x40000, &(0x7f00000000c0)="309d8c4d59fb7a964830f40b7f45e235d25401513752d806d337f64198944c94b7aecd0851756f2f5882c80f04734abe8b16f265e9fb9069e82867ebaa2b156a93a889acf4632805c56c0c87bc4519a3059792b404594ae46d141e28b76c403fd98cb8c29ee0e2abe042fe419c6359c82a20e4", 0x73, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)="7443251f2c2832797a3c306417c4e16a9ee53dc18d958f5ca7a43c928bc67c96d511b92de7fca90552f9c252fdfcfa59cea263e503e784610921b2c3a6227d06ab89442781e14ceb73e135c225c7acd5add9dd40cb8aa8b0dd301d94e2f7058728bdc735b402e766a317cc7add3106dc52149d659630d0ade3b6580e25592738f4b7b5156c4289d9515045d8b49216cebb1a1d6b22dafb79bcda4ec4a236b5dee36bb765bfb2692077629978c44242da9b7a1647a94d26ac2124f884fd71024561f24eaab4a8b11d8520309b820cda9aab0b5864030cb16d3fd1367ec59f29a5111e121347c94aad355af30ba132") sync() syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe", @ANYRES16=0xffffffffffffffff], 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x1, 0x80000011, 0x6}, r0, 0xdfffbffffffffffc, 0xffffffffffffffff, 0xb) semop(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES64=r3, @ANYRES8=r2, @ANYRESHEX=0x0, @ANYRES16=r2, @ANYRES8=r1, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x48) semctl$GETNCNT(0x0, 0x1, 0xe, &(0x7f00000013c0)=""/4096) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x102, @mcast1}}, {{0xa, 0x4e22, 0x2, @local, 0x5}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000400), 0x9}, 0x0, 0x4, 0x0, 0x9, 0xfff, 0x8001, 0x7fff, 0x0, 0xb}, 0x0, 0xfff0000000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd52, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064ebc09f9163c30e25125b97f7d238eb3122e5368e5ee15c5068d088034acd1a0f912ac6bf7430375a26d32f65dcf638cc6062b86bb8adcb9ea0890f8021f8673b1515db8a9e3d304fc997e193ba4c40dfdab07a6fddf112902bfcce338e83416074bb6503db7bc50a1b360f65218f23f0aa4fa3ceac6f2901c832ddacc49008cef1", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0xfff3, 0xa}, {0x2, 0x2}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}]}, 0x3c}}, 0x4040800) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0xed866d3a894cd382, 0xfff3}, {0xa, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r6, 0x8080583a, &(0x7f0000000540)={0x6, 0xfff, 0x0, 0x5e2, 0x6, 0x0, 0x6}) 2m1.585005229s ago: executing program 4 (id=750): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="205fbe871c000104000000000000000800000000", @ANYRES32, @ANYRES64], 0x20}, 0x1, 0xd, 0x0, 0x20008084}, 0x20048805) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000280), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 2m1.109359764s ago: executing program 4 (id=752): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r9, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) socket$inet(0x2, 0x2, 0x1) getpeername$unix(r6, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) unshare(0x44040200) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 1m46.057052374s ago: executing program 32 (id=752): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, r9, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) socket$inet(0x2, 0x2, 0x1) getpeername$unix(r6, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) unshare(0x44040200) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 54.327967627s ago: executing program 1 (id=1023): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x1048e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000225000000003000000014000700fc0200000000000000000000000000fc1400060000000000000000000000ffffac1414aaa517a14e88cf5db39eba9edb28300f1677d2eff1474e0c84e9c9ec9491078c3c4e29abfb801c96a6af2ef5cf67274148efd268a600b941ba4b2581280fea9f99fd"], 0x68}, 0x1, 0x20000, 0x0, 0x40440c5}, 0x9080) unshare(0x2c020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x45) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r9 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)='syz_tun\x00', 0xfffffffffffffffb) r10 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r10) keyctl$search(0xa, r10, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) keyctl$unlink(0x9, r9, r10) keyctl$set_reqkey_keyring(0xe, 0x5) socket$key(0xf, 0x3, 0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 53.423586057s ago: executing program 1 (id=1026): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040890) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0x15e, 0x7, 0x1, 0x0, "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"}]}], {0x14}}, 0x164}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x8, 0x10001, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000040)=0x10000001, 0x12740c130c62aeb2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 52.519628108s ago: executing program 1 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r3, &(0x7f0000000600)=""/4099, 0xfdef, 0x110) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$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") setpgid(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x1fd, &(0x7f0000003c40)="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"}) 47.965844959s ago: executing program 1 (id=1039): ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffe, 0x67, 0x4, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/104, 0x68}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) unshare(0x2c020400) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5393, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000140)=@v3={0x3000000, [{0x5, 0x6}, {0xe5e, 0x4}]}, 0x18, 0x0) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) poll(0x0, 0x0, 0x9) socket$kcm(0x10, 0x5, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000000000000002662452eeb9571d30dd367549b14f257b157ca"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.945762061s ago: executing program 1 (id=1049): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x20000000, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'hsr0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @loopback, 0x4}}}, 0x30) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e18, &(0x7f0000000080)={[{@nobarrier}, {@grpid}]}, 0x22, 0x655, &(0x7f00000012c0)="$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") sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000003c0)="ea0e61d3664b04f1280dbd11f2ce45c87c94d8ee2621866839681f1db4cb", 0x1e}, {&(0x7f0000000600)="82c2c56e29e68662fe2852becac08aded7edcb3efa443bb1e9633aa6e8f4a4c2fce8b7e18f0b85953cda5a421b1099a3e41b36000a5f69bd79fba259687a3094282eafd28f7ce179a543cdda5fdd5cb26e7c7090aa7d85ce95aeb88a74e8f42ae4cb1caac054ddabf97e407a549028af74e4", 0x72}, {&(0x7f0000000680)="8f434ab80e833404cdd32c5daaa2384c9be924ed6fbec32249ac2a964023f6da11", 0x21}, {&(0x7f0000000700)="dc527909ff0e68bbf61359631d455f4182c22fefa5f242428f2ce0f59f5abc716ae77f84a97d420c2712af85671f871265db2994f49607581e27e5d40f26f15220", 0x41}], 0x4, &(0x7f0000000900)=[@rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @mcast1, @mcast1, @private0, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x95110b91ee57aaa, 0x9, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x100}}, {{&(0x7f0000000a00)={0xa, 0x4e24, 0x8, @private0, 0x6}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000001940)="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", 0x1000}], 0x1}}, {{&(0x7f0000002980)={0xa, 0x4e23, 0x8, @mcast1, 0x1}, 0x1c, &(0x7f0000002d00)=[{&(0x7f00000029c0)="006c6b63b52d1988adfc2cd9e3691f0f978e39bce870658b65f37aacb2cf91ca20ab7fa6955e8518dc7e0edd239d1a04d31016b2382ac7871aa0af6b1347ec15dcba4e8e73b73378d7161082e16a5af6c1fc5e5b59ec2eb20370b9e2d435b70b5392ea7c9d47fa8d4a01ae0135e0628858ac16da6a06f7b28e8fc9fd33fcb285f09b4791fa9a41bf4c481661dd5befa7eb1e23863fbb502f5bf53734d5df65", 0x9f}, {&(0x7f0000002a80)="83e2fd6fa69087196c47b29b067815b930c18cba4fd12b0b3f6a03aa6949e0b0873f39f23c03e86118c8591daea803f06d5b8121c59237114473ef654ce8cae97a6a51d5e5e6869b0f81d4c173670e901f41373a17d6270b0a236299541f7c1312365af0a6e70b9c3ac94f7e81e9f5b5051e62410272413d3a8ae734c877f8ea30f5b35f437f5bc8a6351893e0b75e2d3936f09b9ea3ec357e67fd4291", 0x9d}, {&(0x7f0000002c00)="da1e31914f051aaa502ae95b151928bb621f537d24e76d8708511b993c7262b9e9656b544f9e3741d560f7efd9c3c9a0ea0d7728a07e304c087ba88b03f6e9d6eb953ccad391683fd14ac39ccda20d1d89bbabc69d2205603a282b5188f25f714fc31a41de07e6623b624b0dfdd1b0a51ddcea2eb4e3e16b566efa0c939f560789b2924f38e82499b25350c0e67d5f28", 0x90}, {&(0x7f0000002cc0)='\f>', 0x2}], 0x4}}], 0x3, 0x11) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r6, 0x9, 0x20}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000000000008000500", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x844) r10 = socket$inet6(0xa, 0x2, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r6, 0x1, 0x10000}, 0xc) 46.693217264s ago: executing program 1 (id=1051): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000280)=@md0, r1, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)="8d71132cc049fb3e0b604f485080d217395553a11d490d3a2202663b227f01e34b4d66256268d1eaeff60bbe25b7137af812d1ea89320e13fe3462be8dfe4bd5694dfa2f988e10fe0539356310d3c80b8852de1de6a43d3fa283a2901e77ecdef28e87a64e3c3a7b0e2f8c820360d157b94abecd346fef2e620c62b90e8e9b74a7e9130300946e16d30d8225a03c8d8380aa27214eece0c255f2f6904028c94984f61155396b536f8ed705f519", 0xad}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xd}, 0x640, 0x8, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10}], 0x1, 0x2000, &(0x7f0000003ec0)={0x77359400}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 46.692951214s ago: executing program 33 (id=1051): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000280)=@md0, r1, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)="8d71132cc049fb3e0b604f485080d217395553a11d490d3a2202663b227f01e34b4d66256268d1eaeff60bbe25b7137af812d1ea89320e13fe3462be8dfe4bd5694dfa2f988e10fe0539356310d3c80b8852de1de6a43d3fa283a2901e77ecdef28e87a64e3c3a7b0e2f8c820360d157b94abecd346fef2e620c62b90e8e9b74a7e9130300946e16d30d8225a03c8d8380aa27214eece0c255f2f6904028c94984f61155396b536f8ed705f519", 0xad}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xd}, 0x640, 0x8, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10}], 0x1, 0x2000, &(0x7f0000003ec0)={0x77359400}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 5.067378653s ago: executing program 2 (id=1246): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000780)={r7, 0x30, "b14337255fb44f9bed2a7d803830e816329883fbd4a641e9881b7e9176b22a8405d5c04a6674d3b07ff62cdc9fd9df4d"}, &(0x7f0000000700)=0x38) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={r7, 0x10000}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r4, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/203, 0xcb}, 0xfffffffc}], 0x1, 0x22021, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r8 = getpgrp(0x0) r9 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r8, r9, 0x21, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r8, r9, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) 3.774550188s ago: executing program 2 (id=1254): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4004, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(0x0, 0x0, 0x0, 0x1000021, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x6000) socket$kcm(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r3, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 3.54929463s ago: executing program 6 (id=1255): gettid() r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', 0x0}) timer_create(0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1d2}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) unshare(0x22020600) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) memfd_secret(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lgetxattr(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3.52978248s ago: executing program 6 (id=1256): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040890) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0x15e, 0x7, 0x1, 0x0, "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"}]}], {0x14}}, 0x164}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x8, 0x10001, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000040)=0x10000001, 0x12740c130c62aeb2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.349406122s ago: executing program 0 (id=1258): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, 0x0, 0x8000002) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040890) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0x15e, 0x7, 0x1, 0x0, "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"}]}], {0x14}}, 0x164}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x8, 0x10001, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000040)=0x10000001, 0x12740c130c62aeb2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.260398924s ago: executing program 6 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'netpci0\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000d00)={[{@mode={'mode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x7}}, {@overriderock}, {@unhide}, {@check_strict}, {@map_off}, {@check_strict}, {@showassoc}]}, 0x1, 0xa5a, &(0x7f0000001d00)="$eJzs3U9sXNdeB/DvHduJ4/dI8ppQStU2k5Tk+fUZx3ZeE6IsHok9SfzwH2Q7UiMWL32Ng9IYCg1IbYSUVKpYUYEEYgG7ihUsqNQFdIO6gx2sukBCXbGvWIWVn+7MOB7bMx47dewk/Xys8dx77u+e87sz987xzFzfE54ty4fWzC0v129bmf+opazp2j/uQsY8xS5NfP3pZ5+Ut48eZF968mbxr0l/kmrSm+SlpG98Ym52ev/mFd1JbiT5MimSlMHFVnO4keIv8/3V+S9T/H3Zbkf7tloz3SzznbbX+x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNivGJkZHRYl8mZ669VW1IqhuMT8zNFlle3rhkZZ2GL+qjfhdfdG03Kcpb+vtXhvp+6ejq4heTVE/klcbcK/UBydOfe9978fCFI6vrd8rmW9m/pWpTaeR25+2lpcX3O8ct32/E7WCCT48rtZnJ+dnJ6YtXatXJ+dnq+bNnR05fvTxfvTw5VZu/Pr9Qm66Oz9UuLszOVQfHf1QdPX/+TLU2fH322syVieGp2krhud8cGxk5W/3Z8O/WLs7Nz86c/tnw/PjVyampyZkr9ZhycRlzrtwRf2dyobpQuzhdrd66vbR4Zl1OPesf7DJotNuWlEFjXWJ6MzI2Njo6Njb6UXP07LGVgrNvnn/z3MhI78g62RDxhHZani4HOj/NO/jqDd9OpdH/592pTGYm1/JWqm1/xjORucxmusPyppX+/+Tp2qbttvb/zV6+t2Xxy+WvE3mtOdvf7P9/JcmFI72VR+u3z2X3fu7mw9zLnbydpSxlMe/veUa7+3MltcxkMvOZzWSmc7FeUm2WVHM+Z3M2I/l5ruZY5lPN5UxmKrXM53rms5BafY8az1xquZiFzGYu1QxmPD9KNaM5n/M5k2pqGc71zOZaZnIlE7lYr+VWbtcf9zOb5PgoaHQrQWObBK3vzMt9fXv9f+15/UuQLdv5F3F4TMvN/n/fuvKejaGD47uVFAAAALCjfv0/cvDoC//+P0mRV+ufy1+enKr9NMm/HPn43b3ODgAAANgJ9dP1Xinv+sqpV/vr7/9H9jotAAAAYAcV9f+xK5IM5FhjauU/oXwIAAAAAM+J+vf/r6U4tlrg/T8AAAA8ZzpdY3/1GrtdI4qhlcv/Vm827m82IxpzRZHJqdrw+OzUhdGcql9lIMmrG2vrSYq++r8fvJHjjajjA437gdUayzb7y6jR4QujeSMnmhsy+Hp59/pgm8ixRuQPG5E/bI3syZrIM2UkADzvTmzSH2+1/38jQ42IoZfrXX7vy2364BE9KwA8LR6NsfP/zSHN2vT/zYjXOvX/P9nk/X8Z8UJuHWucUjCcd/JelnIzQ2mecXCsXa37mqPrNU5DGOryacBA85SF/zpXydCGzwP6H21ra+xixjK0+onAL5qfVaytt1jJ4UxjaZtBEQDgWXRi0354a/3/UJf3/wMdTilcLnZ1UwGAprsf3muMYH/3w3vL95sTj0pWJwZaSu53iOk0sdfbCACspZcGAAAAAAAAAAAAAAAAAAAAAAAAAACAnbfmcv0HmoXrL+D/n6eSpaXFZFuX/e86kYf30zmmv12GjzdRyY7l/JRP9CTZq9Z/mm2v1d9mZ9vGxD8daK7+v3v/yL/dvzP76uNOZMcrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DugSHralVeS/UlGkpze/ayenAd7ncBOqe57rNWKh3mYD3Jwx/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiOa17/v5LG/fcaRemtJCeT3Ejye3ud4056uNcJPBlF95A/aASuXv+/kvRluUhv42lP0Tc+MTc7XVZV7C+Xf/3pZ5+Ut+51bxxVoaygbGHN4BLNFlpK+tau9YP6Wl8156oTl+o75qWFy1MT01fmfns18MXi80bV1Za1V/L9s5P/9lctxc2BEorPyy1tr9HuwMTi3Tt/8t4fVScu19ud2Njur61dr9is3S24vbQ4Vra0UHtr4U//8PYHLYteyPHk9cFkcO0W/n5569DS8fWP57psvyn+vDiYv82NHGzuMMVyUT6Oh+rbf+DW7aXF4XfeW7r5KKf7a3I6nGNJbib9bXL65/Y5Heu8b9b3ukpf2epIPaj8dbTLNm6qpcbRDo/rD+q7zED7bejQZrXL8dXlcW9mdKZtRn/9x0dyatvP9KkuLbZVfFP8d3E1X+XjlvE/KuXzfzJtj842VdQjW/aU1mVrDq9KI7K+5WOtC36+vs6ORyVPwF/kF/mtR89/peX1v/lc7c7rUUuL7Y+LZPvHxT8c2tCjrKr3SEfX9UjNV59O6zTzPNqI6pDnr+bHjTq38Yry42499hM6/v+uGMz/5YHxfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdfkfS0K68kJ5McTnKonK8my+tjHjxGe5WB4nHS3DGPk/Ozp+i4ocXDPMwHObjbGQEAAAAAAADwZFya+PrTzz4pb/Xv43vyG5UkP2l809+b5HDxN33jE3Oz010q6kturHyl37+9HG6Uv76/Ov9lOfdSl5X29vQBAHim/TIAAP//JS1j1w==") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) keyctl$revoke(0x3, r2) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000080)='./file0\x00', 0x21488b, &(0x7f0000000280)=ANY=[], 0x1, 0x664, &(0x7f0000001140)="$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") perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 3.009687826s ago: executing program 2 (id=1263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0xf2ff}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xf}, {0xfff7, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 2.820338268s ago: executing program 6 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r3, &(0x7f0000000600)=""/4099, 0xfdef, 0x110) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$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") setpgid(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x1fd, &(0x7f0000003c40)="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"}) 2.737243149s ago: executing program 2 (id=1267): gettid() r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', 0x0}) timer_create(0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1d2}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) unshare(0x22020600) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) memfd_secret(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lgetxattr(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2.67431681s ago: executing program 3 (id=1268): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x626, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@block_validity}, {@journal_async_commit}, {@bh}, {@noinit_itable}]}, 0x1, 0x479, &(0x7f0000000dc0)="$eJzs3LtvW9UfAPCvr2M36a/9pZTyaGkhUBAVgqRJH3RgKQKJASQkGIqYQhqqUpeiJgONIggMYUSV2BEjEn8BC2VBwITECjtCilAWCpPRta8fSew8jF2X+PORbJ/jc+xzvvfhe3yurwMYWGPpXS5iX0T8EhGj1ezaCmPVh9urizN/rS7O5KJcfu2PXKXen6uLM7Wqtdf9r5oplzdpd/nNiOlSafZ6lp+Yv/rexFwxy12afXfq3NzpU8eKZ6fOdCXO/Wlfj3xw7ejhl964+crMhZtv/fBV2t99WXlzHN0yVl26LT3R7cb6bH9TOjfUx46wI/mISFdXobL/j0Y+Ruplo/Hix33tHNBT5XJS3tO+eKkM7GLpQB0YRLUDffr9t3ZL8yN3ZvjRdyvnoz6PcTu7VUuGIsnqFLLvSL0wFhEXlv7+/MJwNd+LeQgAgGa3zkfE0xvHfxFJ3N9U7//ZuaEDEXFPRByMiHsj4lBE3BdRqftARDy4w/bXnyHZOP4pj3YU2Dal47/nsnNba8d/tdFfHMhnuf2V+Au5ty+XZk9my+REFPak+cnGWxbWt/HtCz9/2q79+vgvu6Xtp4+NGsnvQ+sm6C5Oz0/H+vN0HVr5KOLIUCP+4Xr8ufqYN23ncEQc6bCNy099ebRd2dbxb6ILg/LyFxFPVtf/UqxZ/42lm6ufn7yx8Mzlq9OXZivnJ8+dPjX57NmpMxPDUZo9OVHbKjb68aflV9u1/6/i74KVW+XY23L7r8d/IDccMXdj4UrlfO3czttY/vWTtt9pOt3+i7nXK+li/S4iJiOKuZej+an3p+fnr081XlvLVx4nq9v/ieOt9/+D0VgSD0VEuhEfi4iHI+KRrO+PRsRjEXF8k/i/f/7xd3Ye/yaz8l2Uxn9xq/Ufzet/y8RCRKx5Jn/lu693Hn9Nuv5PV1Insmdqn3+b2VZPO9qaAQAA4L8nqfwGPpeM19NJMj5e/Q3/odiblK4N1+vuq85/Js0zXbX50MlsbriWn1qXP5XNG3+WH6nkx2eulS72LWogsmt1Wu3/qd/y/e4d0HOu14LBZf8HgMHj+A+Dy/4Pg6vV/v9hH/oB3HlbHP8H5b8AYCAZ/8PgarP/9/TCa+Du4PgPA6nVtfH5iCglaVFaY5sX0m8rMRLdeZ/dlih27Q2/iYildLX1vM+R3BWLbhclCtGyaGjbf2bRYWJPy6J+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xz8BAAD//+380FY=") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x2, 0x400000, 0x0, 0x2, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x1, 0x8040024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000164000/0x1000)=nil, 0x1000, 0x200000f) io_uring_register$IORING_REGISTER_FILES(r3, 0x1f, &(0x7f0000000000), 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r5 = accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x800) r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x1080}, {r5, 0x122}, {r4, 0x4400}, {r4}, {0xffffffffffffffff, 0x805d}, {r6}, {r2, 0x8}], 0x7, &(0x7f0000000340), &(0x7f0000000380)={[0xb8a1]}, 0x8) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000002"], 0xfe44, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f0000007400)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557bae1d1d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822d1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d404a5f28eaf3781f2288249ae7b385a9c40929cae3fa5a6f142cd057ebdbc000000e34db2d14a6458499de0819d89f570a72fee0dd8cf744e0daf8f31b1d8edda87296ca7632e1e6e23", @ANYRES8, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC, @ANYRES32, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x0, 0x1, 0x80000}, 0x4d) mmap(&(0x7f0000164000/0x1000)=nil, 0x1000, 0x7, 0x110, r2, 0x67cb3000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.587078451s ago: executing program 2 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@oldalloc}, {@usrjquota}, {@bsdgroups}]}, 0x5, 0x4f6, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) socket$nl_netfilter(0x10, 0x3, 0xc) flock(0xffffffffffffffff, 0x1) rmdir(0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0xc004880) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 2.361529663s ago: executing program 0 (id=1271): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="eb9130d8fa30229ae83163b194f5affb92e9f154e3324c4641939c600b87f1594f797a8811938c7801f52730bfb0a6bfc0c9425ff983572e89b91e", 0x3b) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xff01, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.043238737s ago: executing program 5 (id=1272): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f0000000100), 0x3d) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x20000, &(0x7f0000000180), 0x0, &(0x7f0000000300), {0x6}, &(0x7f0000000380)=""/103, 0x67, &(0x7f0000000400)=""/17, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) sched_setscheduler(0x0, 0x6, &(0x7f0000000140)=0x1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffe4b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000dd0c0000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.573588162s ago: executing program 5 (id=1273): r0 = getpid() r1 = eventfd2(0x0, 0x800) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) io_setup(0x3, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2a34, r1, 0x0, 0x0, 0x10000, 0x0, 0x2}]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x4, 0x0, @tick, {0x4}, {0xe}, @raw32}], 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2b0c1ba719ce9e75) r5 = socket$inet6(0xa, 0x2, 0xc0000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xf, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8, 0x20, 0x2, 0xffffffff}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@remote, 0x4e22, 0x6, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x33, r6, r7}, {0x2, 0x1, 0x10, 0x3, 0x3, 0x3, 0x1ff, 0x3d}, {0x1, 0xb, 0x5, 0x8}, 0x4, 0x6e6bb3, 0x1, 0x1, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4d5, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x3, 0xe, 0xffffff7f, 0xfff, 0x80000}}, 0xe8) io_uring_setup(0x2273, &(0x7f0000000100)={0x0, 0xc7b4, 0x40, 0x2, 0x98}) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") socket$kcm(0x29, 0x720246c4b5190d74, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r8, 0x0) read(r8, &(0x7f0000001400)=""/4096, 0x1000) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) 936.082889ms ago: executing program 0 (id=1274): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0xffff}, {0xfff2, 0x1}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x8000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000b5b31cc1a90d3a6cd151acd707316adf9640e7d0f19aa75349725d4571598bca63ba6a3214301de36770437ac25a9bd6bd653953f50670f5a213b5dd49518ab6093ddc89715567667891698ac764c7a218070900d2dbbea99453b1585efcd7b7b8d4c4", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf2510000000180001801400020076657468315f766972745f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x400c1}, 0xc024) fcntl$setownex(r2, 0xf, &(0x7f0000000340)={0x2, 0xffffffffffffffff}) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 917.15604ms ago: executing program 0 (id=1275): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x300, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0xff01, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 767.087871ms ago: executing program 0 (id=1276): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffff, 0x3}, 0x0, 0x377, 0xb34c, 0x5, 0xc31bc7a, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2c042, 0x100) flock(r0, 0x5) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') lseek(r1, 0x339, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800002100000000300000003000000002000000000000000000001004000000000000000000000901000000000000d40d000004eed040070000000000000002000000050000000000"], 0x0, 0x4a}, 0x20) 617.119533ms ago: executing program 0 (id=1277): syz_usb_connect$midi(0x3, 0x2a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0x4, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x4, 0x6}]}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) syz_usb_connect(0x6, 0x98d, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x200, 0x6, 0x0, 0x66, 0x40, 0x7}, 0x5d, &(0x7f0000001380)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0xf6, 0x4, 0x1d26, 0xf, 0x0, [0xff0000, 0xff0000, 0x0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x0, 0x4, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "f8f08900a3043ecaad5172ad876b70b5"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "bb6646f059efcf82a7d8b1cff0232fb6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0xff, 0x6b}]}, 0x5, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x2c53}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x445}}, {0xd4, &(0x7f00000014c0)=@string={0xd4, 0x3, "dee4f50b55940d7e35c4595067da7c73fa3282a212014917c5c73faa8592e63e879bc5a9ddb062705be0dd70d281b97ea30674d1acf59da5fcb0f26cf3c915cd106ddf664a22183985ce6b78ccf0ff367544ce9e470cb4393f63a6856cf6146ae5594dabd49e695286cb1c626e6e81d31589525327d271cd5b012e3635f697a848d4d8e55a2df5b91a388ffc23b761a6054c3f7195fd3fb04fbbe621375b628bbe28d789ea24e2bdf0442080a1a9917505b0d369daee62d71f5d566ef0d0805919e87ed658e2a0dce72d3194392735c40e83"}}, {0xf3, &(0x7f00000015c0)=@string={0xf3, 0x3, "c848b86c75e1a0ed1cb2d1d2f6a29897a3568c58fe5387b6ef58fcdfd896e1d674856ead0f0a6fc8d05610e2a1e724463a45ca3b0810881d3ae700516e1251254692775144789173ea4fac99fb06cfc23cbdecf00ba1601a011cb6b7539ff8a131313a7485121827e1c2bf61a4e0e9b46edbbd7c97d8aa001d4fb3f48c38b01d658775a4290150f8305e3b2963965ec631a526780f6d5301633cee9ec4599f697a6b983d60b679722c9f115852dd13138660c8638d728216ab453d6325107a87780fad1e232b29e6b26a404e10028067ece57f7833697cebfc21e51a097761530f2f5e624a11aae0e5492efd50dc95706a"}}]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080), 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) read(r0, &(0x7f0000000700)=""/229, 0xe5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0xffffffffffffffa5, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x2}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x21, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)=[{0x4, 0x2, 0xb, 0xc}], 0x10, 0xf}, 0x94) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e21, 0x10, @mcast2, 0xff}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x100}}, {{0xa, 0x4e23, 0x2, @local}}}, 0x108) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf}]}, 0x24}}, 0x840) ppoll(&(0x7f0000000300)=[{r4, 0x4126}], 0x1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 584.025154ms ago: executing program 6 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_dev$usbfs(&(0x7f00000001c0), 0x4, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xf}, {0xfff7, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r4 = gettid() prlimit64(r4, 0xe, 0x0, 0x0) 509.768174ms ago: executing program 3 (id=1279): gettid() r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', 0x0}) timer_create(0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1d2}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) unshare(0x22020600) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) memfd_secret(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lgetxattr(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 403.324295ms ago: executing program 6 (id=1280): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001480)=[{0x2, &(0x7f0000001400)=0x2, 0x82}], 0x1, 0x0, 0x0, 0x200000000000000) r2 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) semtimedop(r2, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 402.843786ms ago: executing program 3 (id=1281): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') preadv(r1, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x38, 0xc51a) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r7, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) cachestat(r8, &(0x7f0000000000)={0x1, 0x2}, &(0x7f0000000040), 0x0) 355.471866ms ago: executing program 2 (id=1282): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040890) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0x15e, 0x7, 0x1, 0x0, "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"}]}], {0x14}}, 0x164}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x8, 0x10001, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000040)=0x10000001, 0x12740c130c62aeb2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 289.266527ms ago: executing program 3 (id=1283): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040890) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x13c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0x15e, 0x7, 0x1, 0x0, "bc06724f45b18369ebaaeeb3e8910c5b2c9bc8901f454ce0b05707bae000780141d742be3a09517aec2d2f33b20d63419a0810b0cd7c5d55858a416488efed98961d6acb1eae209a40d30b49a4b52b056c46056d7b4291d935ffb52ccc9e6504c8a56c2ca88398094fcff0c87590b96a4aee28e9f747261652248d03d2240677b58c06ccbed29b9c374741bd98831ac59f103a91787d600199b2aa9e9eeb0b9e178a14db4ec44e994d3377602a4be5503b54b813f9a7da873523968fc573ee92681a9a5399991df3e3174aedb3ac42207de51b478cfe861107a2fe04e20a65f72dba5bec567be473da879267280364e4b6137d84762c6cbcc5006817b36a0a"}]}], {0x14}}, 0x164}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x0, 0x1, 0x80, 0x8, 0x10001, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000040)=0x10000001, 0x12740c130c62aeb2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 280.188877ms ago: executing program 5 (id=1284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) 248.820217ms ago: executing program 5 (id=1285): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0xffff}, {0xfff2, 0x1}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x8000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000b5b31cc1a90d3a6cd151acd707316adf9640e7d0f19aa75349725d4571598bca63ba6a3214301de36770437ac25a9bd6bd653953f50670f5a213b5dd49518ab6093ddc89715567667891698ac764c7a218070900d2dbbea99453b1585efcd7b7b8d4c4", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf2510000000180001801400020076657468315f766972745f7769666900"], 0x2c}, 0x1, 0x0, 0x0, 0x400c1}, 0xc024) fcntl$setownex(r2, 0xf, &(0x7f0000000340)={0x2, 0xffffffffffffffff}) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 165.364988ms ago: executing program 3 (id=1286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts]}}}}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xbf, "880f3bfeb009efc4f635daf89b937eeb3eda9b540ce7283a5eb1a0992503f1e2ca909028b92bc0aa57783bed9fee679f176895e62e745a66265dcd8d3301c5a817ee01662d8f112d8dcc1ed312702b52384ec5919e46855fc43722186dc3eecf9022e1bcbf1e4462d8f253a9e6958526ee0256aab5da52f9aa58de001567df7d0bec7f334715855e22cd055d05962bcaedebcf7950967a019aacd6dc34fd5e44601efc2483465975dd0f95093dfa06e449f04199ec7a8a16389fadd5bec4f0"}, &(0x7f0000000240)=0xe3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) 53.15547ms ago: executing program 3 (id=1287): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1fe, 0x10220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000600)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC], 0x1, 0xa78, &(0x7f0000001a40)="$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") perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 49.19133ms ago: executing program 5 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xbed, 0x80}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bbd212aad79c254d23dc897afeb1128c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ab9cf955c579092f6ee2efad42699995"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="09f9aa2790dfd13069505f6870befd66"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1bf92aea0aa9540b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2ca170b6c65eb73"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3344a0d01bda118c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dae315fc9e8f81ebf345b239ab15622b"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="92005d18a6632bf325a2933bfab221de"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe78}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x64}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="10a9c980e1b2b51c14fc6c7f235c2e0e"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ca34fd6896f1c5f1"}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008804}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000001040500000000000000000000000000060006400000004a0800054000000000050001"], 0x6c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r6, &(0x7f0000002cc0)=[{{&(0x7f0000000140)=@phonet={0x23, 0x3c, 0x5, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="100000000082"], 0x10}}], 0x1, 0x9) 0s ago: executing program 5 (id=1289): r0 = syz_io_uring_setup(0x5421, &(0x7f0000000080)={0x0, 0xcc19, 0x1000, 0x0, 0x2fb}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x7ffffffe) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0xf, 0xb4, 0x3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0xd, r2, 0xffffffff00000000}, 0x38) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x249402, 0x40) renameat2(r1, &(0x7f0000000100)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000000080)="c7", 0x5f) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x8000008) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x80000000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRESOCT=r5, @ANYRESHEX=0x0], &(0x7f0000000740)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.356458][ T6807] RSP: 002b:00007fbd5c307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.356479][ T6807] RAX: ffffffffffffffda RBX: 00007fbd5db25fa0 RCX: 00007fbd5d8acdd9 [ 276.356494][ T6807] RDX: 00002000000000c0 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 276.356508][ T6807] RBP: 00007fbd5c307090 R08: 0000000000000000 R09: 0000000000000000 [ 276.356577][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.356590][ T6807] R13: 00007fbd5db26038 R14: 00007fbd5db25fa0 R15: 00007ffc0de22a58 [ 276.356608][ T6807] [ 276.623567][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.068838][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 277.068859][ T28] audit: type=1400 audit(1778039186.649:1173): avc: denied { write } for pid=6808 comm="syz.5.791" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.163106][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.791'. [ 277.272796][ T6846] loop1: detected capacity change from 0 to 764 [ 277.290132][ T6846] futex_wake_op: syz.1.851 tries to shift op by 144; fix this program [ 277.311272][ T6846] Symlink component flag not implemented [ 277.321383][ T6846] Symlink component flag not implemented [ 277.330917][ T6846] Symlink component flag not implemented (129) [ 277.342541][ T6846] Symlink component flag not implemented (6) [ 277.425317][ T28] audit: type=1400 audit(1778039187.009:1174): avc: denied { ioctl } for pid=6849 comm="syz.1.853" path="socket:[15958]" dev="sockfs" ino=15958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.508283][ T6695] vhci_hcd: connection reset by peer [ 277.514494][ T30] vhci_hcd vhci_hcd.3: stop threads [ 277.574102][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 277.611112][ T6856] loop3: detected capacity change from 0 to 764 [ 277.628946][ T30] vhci_hcd vhci_hcd.3: release socket [ 277.635463][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 277.659040][ T6856] rock: directory entry would overflow storage [ 277.681270][ T6856] rock: sig=0x4654, size=5, remaining=4 [ 278.180165][ T6869] netlink: 284 bytes leftover after parsing attributes in process `syz.5.859'. [ 279.300540][ T6890] netlink: 104 bytes leftover after parsing attributes in process `syz.1.865'. [ 279.328326][ T6884] loop3: detected capacity change from 0 to 1764 [ 279.428992][ T6886] loop5: detected capacity change from 0 to 1764 [ 280.730619][ T3368] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 281.179951][ T6911] netlink: 284 bytes leftover after parsing attributes in process `syz.0.872'. [ 282.765325][ T6939] netlink: 36 bytes leftover after parsing attributes in process `syz.5.879'. [ 284.138610][ T6943] loop3: detected capacity change from 0 to 1764 [ 284.746155][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 285.094673][ T6952] loop5: detected capacity change from 0 to 512 [ 285.206263][ T6947] netlink: 284 bytes leftover after parsing attributes in process `syz.1.882'. [ 285.292519][ T6952] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.884: corrupted in-inode xattr: invalid ea_ino [ 285.360129][ T6952] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.360352][ T6952] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.884: couldn't read orphan inode 15 (err -117) [ 285.382418][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 285.382440][ C0] EXT4-fs (loop5): initial error at time 1778039194: ext4_iget_extra_inode:5128: inode 15 [ 285.382468][ C0] EXT4-fs (loop5): last error at time 1778039194: ext4_iget_extra_inode:5128: inode 15 [ 285.580824][ T6952] loop5: lost filesystem error report for type 5 error -117 [ 285.610178][ T6952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.633328][ T6968] netlink: 284 bytes leftover after parsing attributes in process `syz.2.886'. [ 285.645825][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.884'. [ 285.704060][ T6975] netlink: 284 bytes leftover after parsing attributes in process `syz.3.887'. [ 285.761858][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.832486][ T6982] netlink: 284 bytes leftover after parsing attributes in process `syz.1.889'. [ 285.888548][ T6988] loop5: detected capacity change from 0 to 1024 [ 285.910931][ T6988] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.942559][ T6988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.962105][ T6988] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.986304][ T28] audit: type=1400 audit(1778039195.569:1175): avc: denied { ioctl } for pid=6987 comm="syz.5.894" path="socket:[16699]" dev="sockfs" ino=16699 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 286.059942][ T28] audit: type=1400 audit(1778039195.639:1176): avc: denied { write } for pid=6987 comm="syz.5.894" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.070694][ T6988] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.894: lblock 0 mapped to illegal pblock 0 (length 1) [ 286.123488][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.240217][ T7002] tmpfs: Bad value for 'mpol' [ 286.245146][ T28] audit: type=1400 audit(1778039195.819:1177): avc: denied { mounton } for pid=7001 comm="syz.3.898" path="/161/file4" dev="tmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 286.273809][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'. [ 286.302954][ T28] audit: type=1400 audit(1778039195.889:1178): avc: denied { map } for pid=7007 comm="syz.5.899" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 286.330950][ T28] audit: type=1400 audit(1778039195.909:1179): avc: denied { bind } for pid=7001 comm="syz.3.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.367086][ T7012] FAULT_INJECTION: forcing a failure. [ 286.367086][ T7012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.382247][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.5.900 Not tainted syzkaller #0 PREEMPT(full) [ 286.382282][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.382341][ T7012] Call Trace: [ 286.382348][ T7012] [ 286.382355][ T7012] __dump_stack+0x1d/0x30 [ 286.382437][ T7012] dump_stack_lvl+0x95/0xd0 [ 286.382537][ T7012] dump_stack+0x15/0x1b [ 286.382563][ T7012] should_fail_ex+0x263/0x280 [ 286.382594][ T7012] should_fail+0xb/0x20 [ 286.382665][ T7012] should_fail_usercopy+0x1a/0x20 [ 286.382699][ T7012] _copy_to_user+0x20/0xa0 [ 286.382792][ T7012] simple_read_from_buffer+0xb5/0x130 [ 286.382830][ T7012] proc_fail_nth_read+0x10e/0x150 [ 286.382864][ T7012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.382975][ T7012] vfs_read+0x1ab/0x7f0 [ 286.383005][ T7012] ? __rcu_read_unlock+0x4e/0x70 [ 286.383028][ T7012] ? __fget_files+0x184/0x1c0 [ 286.383049][ T7012] ? up_write+0x18/0x60 [ 286.383090][ T7012] ? mutex_lock+0x57/0x90 [ 286.383126][ T7012] ksys_read+0xdc/0x1a0 [ 286.383155][ T7012] __x64_sys_read+0x40/0x50 [ 286.383207][ T7012] x64_sys_call+0x2886/0x3020 [ 286.383315][ T7012] do_syscall_64+0x12c/0x3b0 [ 286.383341][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.383439][ T7012] RIP: 0033:0x7fcdd8add60e [ 286.383457][ T7012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 286.383476][ T7012] RSP: 002b:00007fcdd756efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.383498][ T7012] RAX: ffffffffffffffda RBX: 00007fcdd756f6c0 RCX: 00007fcdd8add60e [ 286.383558][ T7012] RDX: 000000000000000f RSI: 00007fcdd756f0a0 RDI: 0000000000000004 [ 286.383572][ T7012] RBP: 00007fcdd756f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.383588][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.383602][ T7012] R13: 00007fcdd8d96038 R14: 00007fcdd8d95fa0 R15: 00007fff0c3c6818 [ 286.383640][ T7012] [ 286.625444][ T7016] loop5: detected capacity change from 0 to 256 [ 286.660254][ T28] audit: type=1400 audit(1778039196.239:1180): avc: denied { watch watch_reads } for pid=7017 comm="syz.3.903" path="/163" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 286.851810][ T7031] netlink: 284 bytes leftover after parsing attributes in process `syz.5.907'. [ 286.943778][ T7040] syzkaller0: entered promiscuous mode [ 286.959358][ T7040] syzkaller0: entered allmulticast mode [ 286.970524][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.982164][ T7040] FAULT_INJECTION: forcing a failure. [ 286.982164][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.004373][ T28] audit: type=1400 audit(1778039196.569:1181): avc: denied { create } for pid=7047 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 287.025663][ T28] audit: type=1400 audit(1778039196.569:1182): avc: denied { setopt } for pid=7047 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 287.046887][ T28] audit: type=1400 audit(1778039196.569:1183): avc: denied { getopt } for pid=7047 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 287.082032][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.133106][ T28] audit: type=1400 audit(1778039196.719:1184): avc: denied { map } for pid=7047 comm="syz.5.913" path="/newroot/proc/51" dev="proc" ino=16209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 287.135919][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.3.911 Not tainted syzkaller #0 PREEMPT(full) [ 287.135991][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.136004][ T7040] Call Trace: [ 287.136012][ T7040] [ 287.136021][ T7040] __dump_stack+0x1d/0x30 [ 287.136048][ T7040] dump_stack_lvl+0x95/0xd0 [ 287.136071][ T7040] dump_stack+0x15/0x1b [ 287.136107][ T7040] should_fail_ex+0x263/0x280 [ 287.136136][ T7040] should_fail+0xb/0x20 [ 287.136162][ T7040] should_fail_usercopy+0x1a/0x20 [ 287.136263][ T7040] _copy_from_iter+0x21c/0xea0 [ 287.136296][ T7040] copy_page_from_iter+0x161/0x1f0 [ 287.136341][ T7040] skb_copy_datagram_from_iter+0x22d/0x480 [ 287.136416][ T7040] packet_sendmsg+0x2564/0x3240 [ 287.136449][ T7040] ? __rcu_read_unlock+0x4e/0x70 [ 287.136471][ T7040] ? avc_has_perm_noaudit+0xab/0x130 [ 287.136560][ T7040] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 287.136660][ T7040] ? __pfx_packet_sendmsg+0x10/0x10 [ 287.136691][ T7040] ____sys_sendmsg+0x563/0x5b0 [ 287.136718][ T7040] ___sys_sendmsg+0x195/0x1e0 [ 287.136752][ T7040] __x64_sys_sendmsg+0xd4/0x160 [ 287.136779][ T7040] x64_sys_call+0x194c/0x3020 [ 287.136824][ T7040] do_syscall_64+0x12c/0x3b0 [ 287.136909][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.136933][ T7040] RIP: 0033:0x7f05932bcdd9 [ 287.137030][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.137050][ T7040] RSP: 002b:00007f0591d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.137071][ T7040] RAX: ffffffffffffffda RBX: 00007f0593535fa0 RCX: 00007f05932bcdd9 [ 287.137086][ T7040] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000004 [ 287.137099][ T7040] RBP: 00007f0591d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 287.137112][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.137179][ T7040] R13: 00007f0593536038 R14: 00007f0593535fa0 R15: 00007fffe3cfe0a8 [ 287.137242][ T7040] [ 287.390206][ T7064] loop1: detected capacity change from 0 to 2048 [ 287.398501][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.398659][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.399655][ T7066] can: request_module (can-proto-0) failed. [ 287.480587][ T7064] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 15 [ 287.682656][ T7050] loop1: detected capacity change from 0 to 512 [ 287.697309][ T7050] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 287.706969][ T7050] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 287.707094][ T7050] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.717306][ T7050] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.717428][ T7050] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 287.732707][ T7050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.914: bg 0: block 15: invalid block bitmap [ 287.732814][ T7050] loop1: lost filesystem error report for type 5 error -117 [ 287.750083][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 287.750119][ C1] EXT4-fs (loop1): initial error at time 1778039197: ext4_validate_block_bitmap:432 [ 287.750151][ C1] EXT4-fs (loop1): last error at time 1778039197: ext4_validate_block_bitmap:432 [ 287.750676][ T7050] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 287.750696][ T7050] loop1: lost filesystem error report for type 5 error -117 [ 287.751149][ T7050] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.914: data will be lost [ 287.751224][ T7050] EXT4-fs (loop1): 1 truncate cleaned up [ 287.751678][ T7050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.236952][ T7080] loop5: detected capacity change from 0 to 2048 [ 288.305068][ T7080] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 15 [ 288.735303][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.645652][ T7104] netlink: 284 bytes leftover after parsing attributes in process `syz.3.920'. [ 289.759402][ T7110] loop1: detected capacity change from 0 to 512 [ 289.827143][ T7110] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.922: invalid block [ 289.865670][ T7110] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 289.868159][ T7110] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.922: invalid indirect mapped block 4294967295 (level 1) [ 289.877574][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 289.877601][ C0] EXT4-fs (loop1): initial error at time 1778039199: ext4_get_branch:178: inode 11: block 4294967295 [ 289.877644][ C0] EXT4-fs (loop1): last error at time 1778039199: ext4_get_branch:178: inode 11: block 4294967295 [ 289.923542][ T7110] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 289.923737][ T7110] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.922: invalid indirect mapped block 4294967295 (level 1) [ 290.008847][ T7110] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 290.014770][ T7110] EXT4-fs (loop1): 2 truncates cleaned up [ 290.070613][ T7110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.134771][ T7141] FAULT_INJECTION: forcing a failure. [ 290.134771][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.181034][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.0.927 Not tainted syzkaller #0 PREEMPT(full) [ 290.181068][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.181159][ T7141] Call Trace: [ 290.181200][ T7141] [ 290.181208][ T7141] __dump_stack+0x1d/0x30 [ 290.181235][ T7141] dump_stack_lvl+0x95/0xd0 [ 290.181256][ T7141] dump_stack+0x15/0x1b [ 290.181334][ T7141] should_fail_ex+0x263/0x280 [ 290.181367][ T7141] should_fail+0xb/0x20 [ 290.181394][ T7141] should_fail_usercopy+0x1a/0x20 [ 290.181455][ T7141] _copy_from_user+0x1c/0xb0 [ 290.181490][ T7141] ___sys_sendmsg+0xc1/0x1e0 [ 290.181530][ T7141] __x64_sys_sendmsg+0xd4/0x160 [ 290.181563][ T7141] x64_sys_call+0x194c/0x3020 [ 290.181629][ T7141] do_syscall_64+0x12c/0x3b0 [ 290.181660][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.181686][ T7141] RIP: 0033:0x7fbebdb0cdd9 [ 290.181715][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.181738][ T7141] RSP: 002b:00007fbebc55f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.181814][ T7141] RAX: ffffffffffffffda RBX: 00007fbebdd85fa0 RCX: 00007fbebdb0cdd9 [ 290.181854][ T7141] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 290.181869][ T7141] RBP: 00007fbebc55f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.181883][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.181897][ T7141] R13: 00007fbebdd86038 R14: 00007fbebdd85fa0 R15: 00007ffd67141928 [ 290.181919][ T7141] [ 290.403273][ T7153] loop2: detected capacity change from 0 to 512 [ 290.423750][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.454105][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.493108][ T7153] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.653341][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.809826][ T7180] loop1: detected capacity change from 0 to 1764 [ 290.874103][ T7179] netlink: 284 bytes leftover after parsing attributes in process `syz.5.933'. [ 291.348981][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 291.868279][ T7195] loop3: detected capacity change from 0 to 2048 [ 291.963498][ T7195] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 15 [ 293.315473][ T7215] capability: warning: `syz.3.944' uses 32-bit capabilities (legacy support in use) [ 293.327322][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 293.327354][ T28] audit: type=1400 audit(1778039202.909:1193): avc: denied { create } for pid=7210 comm="syz.3.944" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 293.989272][ T7220] loop2: detected capacity change from 0 to 256 [ 294.052936][ T7220] FAT-fs (loop2): Directory bread(block 64) failed [ 294.067181][ T7220] FAT-fs (loop2): Directory bread(block 65) failed [ 294.074845][ T7220] FAT-fs (loop2): Directory bread(block 66) failed [ 294.081982][ T7220] FAT-fs (loop2): Directory bread(block 67) failed [ 294.129677][ T7220] FAT-fs (loop2): Directory bread(block 68) failed [ 294.137426][ T7220] FAT-fs (loop2): Directory bread(block 69) failed [ 294.144647][ T7220] FAT-fs (loop2): Directory bread(block 70) failed [ 294.151714][ T7220] FAT-fs (loop2): Directory bread(block 71) failed [ 294.158627][ T7220] FAT-fs (loop2): Directory bread(block 72) failed [ 294.166596][ T7220] FAT-fs (loop2): Directory bread(block 73) failed [ 294.227503][ T7230] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 294.318224][ T7236] netlink: 284 bytes leftover after parsing attributes in process `syz.0.948'. [ 294.342022][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.950'. [ 294.441648][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 294.546461][ T7244] loop5: detected capacity change from 0 to 2048 [ 294.580798][ T7244] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 15 [ 294.723160][ T7242] loop3: detected capacity change from 0 to 1024 [ 294.753363][ T7242] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 294.787339][ T7242] EXT4-fs (loop3): group descriptors corrupted! [ 296.023824][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 296.316713][ T7251] loop2: detected capacity change from 0 to 2048 [ 296.416691][ T7244] loop5: detected capacity change from 0 to 512 [ 296.549299][ T7244] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 296.579281][ T7251] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 15 [ 296.880315][ T7244] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 296.893336][ T7244] EXT4-fs (loop5): orphan cleanup on readonly fs [ 296.909023][ T7244] Quota error (device loop5): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 296.923639][ T7244] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 296.940492][ T7244] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 296.979859][ T7244] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.951: bg 0: block 15: invalid block bitmap [ 296.993069][ T7244] loop5: lost filesystem error report for type 5 error -117 [ 296.997864][ T7244] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 297.007339][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 297.007434][ C1] EXT4-fs (loop5): initial error at time 1778039206: ext4_validate_block_bitmap:432 [ 297.007713][ C1] EXT4-fs (loop5): last error at time 1778039206: ext4_validate_block_bitmap:432 [ 297.049086][ T7244] loop5: lost filesystem error report for type 5 error -117 [ 297.052147][ T7244] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.951: data will be lost [ 297.077186][ T7244] EXT4-fs (loop5): 1 truncate cleaned up [ 297.137871][ T7244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.284007][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.544246][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.572735][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.606128][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.961'. [ 298.634658][ T28] audit: type=1400 audit(1778039208.189:1194): avc: denied { name_bind } for pid=7274 comm="syz.5.961" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 298.682586][ T28] audit: type=1400 audit(1778039208.209:1195): avc: denied { create } for pid=7274 comm="syz.5.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.743481][ T7306] loop5: detected capacity change from 0 to 2048 [ 301.867012][ T7306] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 15 [ 302.517810][ T7310] netlink: 284 bytes leftover after parsing attributes in process `syz.2.966'. [ 302.691098][ T28] audit: type=1400 audit(1778039212.249:1196): avc: denied { bind } for pid=7311 comm="syz.0.969" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.779661][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.970'. [ 303.067002][ T28] audit: type=1400 audit(1778039212.249:1197): avc: denied { name_bind } for pid=7311 comm="syz.0.969" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 303.102914][ T28] audit: type=1400 audit(1778039212.249:1198): avc: denied { node_bind } for pid=7311 comm="syz.0.969" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 303.644101][ T7318] loop1: detected capacity change from 0 to 1024 [ 303.898161][ T7318] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 303.946889][ T7318] EXT4-fs (loop1): group descriptors corrupted! [ 304.058562][ T7331] loop2: detected capacity change from 0 to 512 [ 304.097161][ T7331] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.107358][ T7331] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 304.588987][ T28] audit: type=1400 audit(1778039213.799:1199): avc: denied { setopt } for pid=7330 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.728438][ T28] audit: type=1400 audit(1778039214.309:1200): avc: denied { validate_trans } for pid=7332 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 304.765426][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 304.936321][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 304.990845][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.025956][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.142657][ T7357] loop2: detected capacity change from 0 to 2048 [ 305.170774][ T7357] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 15 [ 305.567958][ T7364] loop5: detected capacity change from 0 to 128 [ 305.620265][ T7364] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.648226][ T7364] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.693596][ T28] audit: type=1400 audit(1778039215.279:1201): avc: denied { write } for pid=7363 comm="syz.5.982" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.739532][ T7373] loop1: detected capacity change from 0 to 256 [ 305.769668][ T28] audit: type=1400 audit(1778039215.349:1202): avc: denied { setattr } for pid=7363 comm="syz.5.982" path="/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 305.837403][ T7373] syzkaller0: entered promiscuous mode [ 305.844398][ T7373] syzkaller0: entered allmulticast mode [ 305.911019][ T7380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7380 comm=syz.0.986 [ 305.924621][ T7380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=7380 comm=syz.0.986 [ 306.166189][ T7364] syzkaller0: entered promiscuous mode [ 306.173258][ T7364] syzkaller0: entered allmulticast mode [ 307.041579][ T6545] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.328178][ T7393] loop3: detected capacity change from 0 to 1764 [ 308.377390][ T7397] loop1: detected capacity change from 0 to 2048 [ 308.439786][ T7397] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 15 [ 308.858419][ T7397] loop1: detected capacity change from 0 to 512 [ 308.912768][ T7397] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 308.957728][ T7397] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 308.982606][ T7397] EXT4-fs (loop1): orphan cleanup on readonly fs [ 308.998164][ T7397] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 309.029983][ T7397] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 309.048025][ T7397] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 309.073966][ T7397] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.990: bg 0: block 15: invalid block bitmap [ 309.088606][ T7397] loop1: lost filesystem error report for type 5 error -117 [ 309.107603][ T7397] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 309.116565][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 309.116814][ C0] EXT4-fs (loop1): initial error at time 1778039218: ext4_validate_block_bitmap:432 [ 309.116944][ C0] EXT4-fs (loop1): last error at time 1778039218: ext4_validate_block_bitmap:432 [ 309.173903][ T7397] loop1: lost filesystem error report for type 5 error -117 [ 309.177076][ T7397] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.990: data will be lost [ 309.213562][ T7397] EXT4-fs (loop1): 1 truncate cleaned up [ 309.228863][ T7397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.269982][ T7397] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 309.291750][ T28] audit: type=1400 audit(1778039218.879:1203): avc: denied { create } for pid=7406 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 309.422983][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.996'. [ 309.454688][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.996'. [ 309.475962][ T7421] FAULT_INJECTION: forcing a failure. [ 309.475962][ T7421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.490480][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.500889][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.0.994 Not tainted syzkaller #0 PREEMPT(full) [ 309.500923][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.500939][ T7421] Call Trace: [ 309.500946][ T7421] [ 309.500955][ T7421] __dump_stack+0x1d/0x30 [ 309.501050][ T7421] dump_stack_lvl+0x95/0xd0 [ 309.501076][ T7421] dump_stack+0x15/0x1b [ 309.501130][ T7421] should_fail_ex+0x263/0x280 [ 309.501159][ T7421] should_fail_alloc_page+0xf2/0x100 [ 309.501208][ T7421] __alloc_frozen_pages_noprof+0x108/0x350 [ 309.501236][ T7421] alloc_pages_mpol+0xb3/0x260 [ 309.501261][ T7421] folio_alloc_mpol_noprof+0x39/0x80 [ 309.501290][ T7421] shmem_get_folio_gfp+0x3da/0xd60 [ 309.501367][ T7421] shmem_write_begin+0xfc/0x1f0 [ 309.501396][ T7421] generic_perform_write+0x183/0x490 [ 309.501504][ T7421] shmem_file_write_iter+0xc5/0xf0 [ 309.501653][ T7421] do_iter_readv_writev+0x4fd/0x5a0 [ 309.501686][ T7421] vfs_writev+0x2e1/0x900 [ 309.501718][ T7421] __se_sys_pwritev2+0xfc/0x1c0 [ 309.501769][ T7421] __x64_sys_pwritev2+0x67/0x80 [ 309.501800][ T7421] x64_sys_call+0xe07/0x3020 [ 309.501837][ T7421] do_syscall_64+0x12c/0x3b0 [ 309.501946][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.502034][ T7421] RIP: 0033:0x7fbebdb0cdd9 [ 309.502052][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.502074][ T7421] RSP: 002b:00007fbebc55f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 309.502099][ T7421] RAX: ffffffffffffffda RBX: 00007fbebdd85fa0 RCX: 00007fbebdb0cdd9 [ 309.502144][ T7421] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 309.502158][ T7421] RBP: 00007fbebc55f090 R08: 0000000000000000 R09: 0000000000000000 [ 309.502171][ T7421] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001 [ 309.502184][ T7421] R13: 00007fbebdd86038 R14: 00007fbebdd85fa0 R15: 00007ffd67141928 [ 309.502203][ T7421] [ 309.723283][ T7417] loop3: detected capacity change from 0 to 764 [ 309.725760][ T7425] loop5: detected capacity change from 0 to 128 [ 309.826997][ T7417] Symlink component flag not implemented [ 309.841246][ T7429] loop1: detected capacity change from 0 to 8192 [ 309.863944][ T7417] Symlink component flag not implemented (116) [ 309.901297][ T7429] loop1: p1 p2 p3 p4 [ 309.905693][ T7429] loop1: p1 size 67898881 extends beyond EOD, truncated [ 309.935472][ T7429] loop1: p3 start 4294443008 is beyond EOD, truncated [ 309.942810][ T7429] loop1: p4 size 262144 extends beyond EOD, truncated [ 312.259174][ T28] audit: type=1400 audit(1778039221.839:1204): avc: denied { map } for pid=7426 comm="syz.1.997" path="socket:[18377]" dev="sockfs" ino=18377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.317468][ T28] audit: type=1400 audit(1778039221.839:1205): avc: denied { accept } for pid=7426 comm="syz.1.997" path="socket:[18377]" dev="sockfs" ino=18377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.424649][ T28] audit: type=1400 audit(1778039223.009:1206): avc: denied { write } for pid=7455 comm="syz.3.1006" path="socket:[18431]" dev="sockfs" ino=18431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.463490][ T7457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7457 comm=syz.5.1005 [ 313.477938][ T7457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=7457 comm=syz.5.1005 [ 313.748743][ T7458] loop5: detected capacity change from 0 to 512 [ 313.767001][ T7462] FAULT_INJECTION: forcing a failure. [ 313.767001][ T7462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.456845][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT(full) [ 314.456876][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.456934][ T7462] Call Trace: [ 314.456943][ T7462] [ 314.456953][ T7462] __dump_stack+0x1d/0x30 [ 314.456979][ T7462] dump_stack_lvl+0x95/0xd0 [ 314.457048][ T7462] dump_stack+0x15/0x1b [ 314.457072][ T7462] should_fail_ex+0x263/0x280 [ 314.457179][ T7462] should_fail+0xb/0x20 [ 314.457203][ T7462] should_fail_usercopy+0x1a/0x20 [ 314.457235][ T7462] _copy_from_user+0x1c/0xb0 [ 314.457328][ T7462] ___sys_sendmsg+0xc1/0x1e0 [ 314.457408][ T7462] __x64_sys_sendmsg+0xd4/0x160 [ 314.457440][ T7462] x64_sys_call+0x194c/0x3020 [ 314.457467][ T7462] do_syscall_64+0x12c/0x3b0 [ 314.457642][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.457666][ T7462] RIP: 0033:0x7fbebdb0cdd9 [ 314.457686][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.457760][ T7462] RSP: 002b:00007fbebc55f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.457783][ T7462] RAX: ffffffffffffffda RBX: 00007fbebdd85fa0 RCX: 00007fbebdb0cdd9 [ 314.457800][ T7462] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 314.457817][ T7462] RBP: 00007fbebc55f090 R08: 0000000000000000 R09: 0000000000000000 [ 314.457833][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.457849][ T7462] R13: 00007fbebdd86038 R14: 00007fbebdd85fa0 R15: 00007ffd67141928 [ 314.457904][ T7462] [ 314.482419][ T7464] loop3: detected capacity change from 0 to 2048 [ 314.500547][ T7458] EXT4-fs: Ignoring removed oldalloc option [ 314.829309][ T7464] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 15 [ 314.901241][ T7458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.984548][ T7464] loop3: detected capacity change from 0 to 512 [ 314.993716][ T7464] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 315.079020][ T7474] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1009'. [ 315.088592][ T7464] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 315.096927][ T7464] EXT4-fs (loop3): orphan cleanup on readonly fs [ 315.112093][ T7464] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 315.123351][ T7464] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.152602][ T7464] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 315.160004][ T7464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1007: bg 0: block 15: invalid block bitmap [ 315.172807][ T7464] loop3: lost filesystem error report for type 5 error -117 [ 315.173623][ T7464] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 315.181526][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 315.181671][ C0] EXT4-fs (loop3): initial error at time 1778039224: ext4_validate_block_bitmap:432 [ 315.182041][ C0] EXT4-fs (loop3): last error at time 1778039224: ext4_validate_block_bitmap:432 [ 315.229992][ T7464] loop3: lost filesystem error report for type 5 error -117 [ 315.232290][ T7464] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.1007: data will be lost [ 315.270093][ T7464] EXT4-fs (loop3): 1 truncate cleaned up [ 315.276352][ T7464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.323456][ T7458] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1005: iget: bad i_size value: 38620345925642 [ 315.355600][ T28] audit: type=1400 audit(1778039224.929:1207): avc: denied { ioctl } for pid=7468 comm="syz.1.1010" path="socket:[18748]" dev="sockfs" ino=18748 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 315.380923][ T28] audit: type=1400 audit(1778039224.939:1208): avc: denied { ioctl } for pid=7468 comm="syz.1.1010" path="socket:[18749]" dev="sockfs" ino=18749 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 315.382107][ T7464] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 315.417682][ T7458] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 315.420026][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 315.420049][ C1] EXT4-fs (loop5): initial error at time 1778039224: ext4_orphan_get:1397: inode 15 [ 315.420081][ C1] EXT4-fs (loop5): last error at time 1778039224: ext4_orphan_get:1397: inode 15 [ 315.475257][ T7458] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1005: couldn't read orphan inode 15 (err -117) [ 315.511080][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.514030][ T7458] loop5: lost filesystem error report for type 5 error -117 [ 315.522007][ T7458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.544658][ T28] audit: type=1400 audit(1778039225.129:1209): avc: denied { setopt } for pid=7468 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 315.564912][ T7451] loop2: detected capacity change from 0 to 512 [ 315.586714][ T28] audit: type=1400 audit(1778039225.169:1210): avc: denied { write } for pid=7453 comm="syz.5.1005" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.670657][ T7451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.699505][ T7451] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.836973][ T28] audit: type=1400 audit(1778039225.409:1211): avc: denied { write } for pid=7450 comm="syz.2.1004" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 315.865580][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1013'. [ 315.912622][ T311] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 315.941787][ T28] audit: type=1400 audit(1778039225.419:1212): avc: denied { setattr } for pid=7450 comm="syz.2.1004" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 315.970466][ T311] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 315.986186][ T311] EXT4-fs (loop5): This should not happen!! Data will be lost [ 315.986186][ T311] [ 315.997942][ T311] EXT4-fs (loop5): Total free blocks count 0 [ 316.004385][ T311] EXT4-fs (loop5): Free/Dirty block details [ 316.010731][ T311] EXT4-fs (loop5): free_blocks=0 [ 316.015824][ T311] EXT4-fs (loop5): dirty_blocks=6144 [ 316.021548][ T311] EXT4-fs (loop5): Block reservation details [ 316.027573][ T311] EXT4-fs (loop5): i_reserved_data_blocks=6144 [ 316.041839][ T311] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 316.060659][ T6545] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 316.087772][ T7495] sit0: entered allmulticast mode [ 316.097414][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.106159][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.147267][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.678999][ T7513] loop2: detected capacity change from 0 to 1764 [ 318.576685][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 318.607351][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 318.607365][ T28] audit: type=1400 audit(1778039228.189:1216): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 319.074500][ T28] audit: type=1400 audit(1778039228.589:1217): avc: denied { map } for pid=7521 comm="syz.0.1022" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.279338][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'. [ 319.304723][ T28] audit: type=1400 audit(1778039228.589:1218): avc: denied { read write } for pid=7521 comm="syz.0.1022" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.880438][ T7538] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1026'. [ 320.027593][ T7542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1027'. [ 320.132407][ T28] audit: type=1400 audit(1778039229.719:1219): avc: denied { tracepoint } for pid=7543 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 320.500061][ T7550] loop5: detected capacity change from 0 to 128 [ 320.822286][ T7560] loop5: detected capacity change from 0 to 2048 [ 320.957795][ T7557] loop2: detected capacity change from 0 to 2048 [ 320.982498][ T7563] loop1: detected capacity change from 0 to 2048 [ 321.770224][ T7560] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 15 [ 322.151563][ T7557] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 15 [ 322.941017][ T7563] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 15 [ 323.094289][ T28] audit: type=1400 audit(1778039231.709:1220): avc: denied { setopt } for pid=7553 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 323.129125][ T7572] loop5: detected capacity change from 0 to 512 [ 323.874985][ T7572] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 324.204227][ T7572] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 324.204277][ T7572] EXT4-fs: failed to create workqueue [ 324.219620][ T7572] EXT4-fs (loop5): mount failed [ 324.737168][ T7584] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1036'. [ 324.843981][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 324.870719][ T7582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7582 comm=syz.3.1037 [ 325.171882][ T7593] loop3: detected capacity change from 0 to 512 [ 325.197943][ T7597] loop5: detected capacity change from 0 to 512 [ 325.244426][ T7597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.291806][ T7597] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.312045][ T7597] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1040: bg 0: block 259: padding at end of block bitmap is not set [ 325.326910][ T7597] Quota error (device loop5): write_blk: dquota write failed [ 325.334940][ T7597] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 325.345262][ T7597] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1040: Failed to acquire dquot type 0 [ 325.406135][ T7604] loop1: detected capacity change from 0 to 512 [ 325.471431][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.471810][ T7606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1041'. [ 325.568486][ T7604] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1039: inode has both inline data and extents flags [ 325.585447][ T7604] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 325.586346][ T7604] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1039: couldn't read orphan inode 15 (err -117) [ 325.595555][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 325.595579][ C1] EXT4-fs (loop1): initial error at time 1778039235: ext4_orphan_get:1397: inode 15 [ 325.595619][ C1] EXT4-fs (loop1): last error at time 1778039235: ext4_orphan_get:1397: inode 15 [ 325.632900][ T7604] loop1: lost filesystem error report for type 5 error -117 [ 325.634824][ T7604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.831466][ T7619] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1044'. [ 325.894681][ T28] audit: type=1400 audit(1778039235.469:1221): avc: denied { name_connect } for pid=7620 comm="syz.3.1045" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 325.998882][ T28] audit: type=1400 audit(1778039235.579:1222): avc: denied { read write } for pid=7623 comm="syz.0.1046" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 326.027127][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.046611][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.075736][ T28] audit: type=1400 audit(1778039235.579:1223): avc: denied { open } for pid=7623 comm="syz.0.1046" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 326.205501][ T7598] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.362631][ T311] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.381765][ T7632] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.424086][ T311] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.526441][ T7632] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.558372][ T311] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.638307][ T7647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1054'. [ 326.713200][ T7632] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.737030][ T311] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.846942][ T7632] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.979082][ T3446] Bluetooth: hci0: Frame reassembly failed (-84) [ 327.016447][ T28] audit: type=1400 audit(1778039236.589:1224): avc: denied { create } for pid=7662 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 327.050319][ T30] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.106882][ T311] bridge_slave_1: left allmulticast mode [ 327.124612][ T311] bridge_slave_1: left promiscuous mode [ 327.140380][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.153080][ T311] bridge_slave_0: left allmulticast mode [ 327.158975][ T311] bridge_slave_0: left promiscuous mode [ 327.170991][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.256665][ T311] bond1 (unregistering): (slave geneve2): Releasing active interface [ 327.272139][ T311] geneve2 (unregistering): left allmulticast mode [ 327.313555][ T28] audit: type=1400 audit(1778039236.899:1225): avc: denied { write } for pid=7675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.395598][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.449643][ T28] audit: type=1400 audit(1778039237.029:1226): avc: denied { write } for pid=7691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.501511][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.556017][ T311] bond0 (unregistering): Released all slaves [ 327.608710][ T311] bond1 (unregistering): Released all slaves [ 327.649980][ T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.770969][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.807979][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.886613][ T7636] bridge_slave_0: entered allmulticast mode [ 327.952843][ T7636] bridge_slave_0: entered promiscuous mode [ 328.026246][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.049881][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.073136][ T28] audit: type=1400 audit(1778039237.659:1227): avc: denied { setattr } for pid=7700 comm="syz.3.1061" name="CAN_RAW" dev="sockfs" ino=19358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.101135][ T7636] bridge_slave_1: entered allmulticast mode [ 328.117424][ T7636] bridge_slave_1: entered promiscuous mode [ 328.157556][ T28] audit: type=1400 audit(1778039237.729:1228): avc: denied { getopt } for pid=7700 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.185747][ T7636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.215303][ T7636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.282838][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 328.292785][ T30] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.310129][ T30] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.330663][ T7636] team0: Port device team_slave_0 added [ 328.347303][ T311] tipc: Left network mode [ 328.379535][ T311] hsr_slave_0: left promiscuous mode [ 328.393834][ T311] hsr_slave_1: left promiscuous mode [ 328.405841][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.433244][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.456298][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.456319][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.469505][ T311] veth1_macvtap: left promiscuous mode [ 328.469533][ T311] veth0_macvtap: left promiscuous mode [ 328.469656][ T311] veth1_vlan: left promiscuous mode [ 328.469685][ T311] veth0_vlan: left promiscuous mode [ 328.711044][ T311] team_slave_1 (unregistering): left allmulticast mode [ 328.736652][ T311] team0 (unregistering): Port device team_slave_1 removed [ 328.766322][ T311] team_slave_0 (unregistering): left allmulticast mode [ 328.787691][ T311] team0 (unregistering): Port device team_slave_0 removed [ 328.912109][ T7636] team0: Port device team_slave_1 added [ 328.983934][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.014720][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.046254][ T3920] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 329.056421][ T7636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.079745][ T7726] ip6gretap1: entered promiscuous mode [ 329.104339][ T7726] ip6gretap1: entered allmulticast mode [ 329.133488][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.150195][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.168950][ T7744] ------------[ cut here ]------------ [ 329.181637][ T7744] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.2.1069/7744 [ 329.191692][ T7744] Modules linked in: [ 329.195635][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.2.1069 Not tainted syzkaller #0 PREEMPT(full) [ 329.204979][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.215045][ T7744] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 329.220950][ T7744] Code: 8b 05 f1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 a8 5e 04 cc e8 5e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 50 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 329.240914][ T7744] RSP: 0018:ffffc90000e5bdd8 EFLAGS: 00010093 [ 329.246997][ T7744] RAX: ffffffff813b1652 RBX: ffff8881044d2200 RCX: ffff8881044d2200 [ 329.255232][ T7744] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 329.263220][ T7744] RBP: 0000000000000080 R08: ffff8881044d2cf8 R09: 0000000000000000 [ 329.271247][ T7744] R10: ffffc90000e5bdf0 R11: 0001c90000e5bdf0 R12: ffff8881044d2200 [ 329.279323][ T7744] R13: ffff8881044d2a28 R14: ffff888105283a90 R15: 0000000000000080 [ 329.287309][ T7744] FS: 0000000000000000(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 329.296249][ T7744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.302934][ T7744] CR2: 00007fbf7221a4e8 CR3: 000000010d694000 CR4: 00000000003506f0 [ 329.310969][ T7744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.319036][ T7744] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 329.327250][ T7744] Call Trace: [ 329.330663][ T7744] [ 329.333911][ T7744] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 329.339388][ T7744] ? __list_add_valid_or_report+0x38/0xe0 [ 329.345254][ T7744] do_exit+0xc13/0x1530 [ 329.349640][ T7744] __x64_sys_exit+0x1f/0x20 [ 329.354257][ T7744] x64_sys_call+0x301d/0x3020 [ 329.358990][ T7744] do_syscall_64+0x12c/0x3b0 [ 329.363601][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.369605][ T7744] RIP: 0033:0x7fdfc1fecdd9 [ 329.374135][ T7744] Code: Unable to access opcode bytes at 0x7fdfc1fecdaf. [ 329.381339][ T7744] RSP: 002b:00002000000002d8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 329.389912][ T7744] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fdfc1fecdd9 [ 329.398026][ T7744] RDX: 00007fdfc1fecdd9 RSI: 0000200000000300 RDI: 000000000000000b [ 329.406102][ T7744] RBP: 00007fdfc2082d69 R08: 0000200000000940 R09: 4e6dccd09703c944 [ 329.414248][ T7744] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 329.422351][ T7744] R13: 00007fdfc2266038 R14: 00007fdfc2265fa0 R15: 00007fffe2913be8 [ 329.430561][ T7744] [ 329.433600][ T7744] ---[ end trace 0000000000000000 ]--- [ 329.448261][ T7636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.488450][ T7636] hsr_slave_0: entered promiscuous mode [ 329.495614][ T7636] hsr_slave_1: entered promiscuous mode [ 329.502510][ T7636] debugfs: 'hsr0' already exists in 'hsr' [ 329.508668][ T7636] Cannot create hsr debugfs directory [ 329.531885][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 329.590769][ T7753] FAULT_INJECTION: forcing a failure. [ 329.590769][ T7753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.631719][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.2.1070 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.631797][ T7753] Tainted: [W]=WARN [ 329.631804][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.631819][ T7753] Call Trace: [ 329.631827][ T7753] [ 329.631836][ T7753] __dump_stack+0x1d/0x30 [ 329.631866][ T7753] dump_stack_lvl+0x95/0xd0 [ 329.631918][ T7753] dump_stack+0x15/0x1b [ 329.631943][ T7753] should_fail_ex+0x263/0x280 [ 329.631976][ T7753] should_fail+0xb/0x20 [ 329.632005][ T7753] should_fail_usercopy+0x1a/0x20 [ 329.632063][ T7753] _copy_from_iter+0xcf/0xea0 [ 329.632114][ T7753] ? __pfx_woken_wake_function+0x10/0x10 [ 329.632142][ T7753] file_tty_write+0x322/0x680 [ 329.632175][ T7753] ? __pfx_tty_write+0x10/0x10 [ 329.632257][ T7753] tty_write+0x25/0x30 [ 329.632285][ T7753] vfs_write+0x5a6/0x9f0 [ 329.632321][ T7753] ksys_write+0xdc/0x1a0 [ 329.632381][ T7753] __x64_sys_write+0x40/0x50 [ 329.632413][ T7753] x64_sys_call+0x27e1/0x3020 [ 329.632439][ T7753] do_syscall_64+0x12c/0x3b0 [ 329.632517][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.632612][ T7753] RIP: 0033:0x7fdfc1fecdd9 [ 329.632634][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.632655][ T7753] RSP: 002b:00007fdfc0a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.632680][ T7753] RAX: ffffffffffffffda RBX: 00007fdfc2265fa0 RCX: 00007fdfc1fecdd9 [ 329.632696][ T7753] RDX: 0000000000001006 RSI: 0000200000004500 RDI: 0000000000000004 [ 329.632712][ T7753] RBP: 00007fdfc0a47090 R08: 0000000000000000 R09: 0000000000000000 [ 329.632792][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.632806][ T7753] R13: 00007fdfc2266038 R14: 00007fdfc2265fa0 R15: 00007fffe2913be8 [ 329.632899][ T7753] [ 329.652681][ T311] IPVS: stop unused estimator thread 0... [ 329.692373][ T7636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.742327][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.742988][ T7636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.744985][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.745543][ T7636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.747378][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.748104][ T7636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.751248][ T7636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.074323][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.107928][ T7636] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.130903][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.130943][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.151829][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.151870][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.161512][ T7781] program syz.0.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.446913][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 332.439293][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 332.439313][ T28] audit: type=1400 audit(1778039242.019:1234): avc: denied { write } for pid=7800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.615985][ T28] audit: type=1400 audit(1778039242.189:1235): avc: denied { write } for pid=7820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.728592][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 332.795058][ T7636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.625555][ T7840] loop5: detected capacity change from 0 to 512 [ 333.749778][ T7840] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.1081: Bad quota inum: 2, type: 1 [ 333.868032][ T7853] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1083'. [ 333.869883][ T7840] loop5: lost filesystem error report for type 5 error -117 [ 333.950018][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 333.963995][ C0] EXT4-fs (loop5): initial error at time 1778039243: ext4_quota_enable:7221 [ 333.972839][ C0] EXT4-fs (loop5): last error at time 1778039243: ext4_quota_enable:7221 [ 333.980595][ T7840] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 334.054985][ T7636] veth0_vlan: entered promiscuous mode [ 334.078272][ T7840] EXT4-fs (loop5): mount failed [ 334.079746][ T7636] veth1_vlan: entered promiscuous mode [ 334.118083][ T7862] loop3: detected capacity change from 0 to 512 [ 334.124634][ T7636] veth0_macvtap: entered promiscuous mode [ 334.143366][ T7636] veth1_macvtap: entered promiscuous mode [ 334.156518][ T7862] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1084: invalid indirect mapped block 256 (level 2) [ 334.166487][ T7636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.207137][ T7862] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 334.207523][ T7862] EXT4-fs (loop3): 2 truncates cleaned up [ 334.216821][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 334.216843][ C1] EXT4-fs (loop3): initial error at time 1778039243: ext4_free_branches:1023: inode 11 [ 334.216875][ C1] EXT4-fs (loop3): last error at time 1778039243: ext4_free_branches:1023: inode 11 [ 334.251491][ T7636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.276593][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.295852][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.315381][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.325584][ T7862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.342602][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.357281][ T7862] FAULT_INJECTION: forcing a failure. [ 334.357281][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.359309][ T28] audit: type=1400 audit(1778039243.939:1236): avc: denied { write } for pid=7861 comm="syz.3.1084" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.390450][ T7862] CPU: 1 UID: 0 PID: 7862 Comm: syz.3.1084 Tainted: G W syzkaller #0 PREEMPT(full) [ 334.390534][ T7862] Tainted: [W]=WARN [ 334.390542][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.390555][ T7862] Call Trace: [ 334.390562][ T7862] [ 334.390632][ T7862] __dump_stack+0x1d/0x30 [ 334.390658][ T7862] dump_stack_lvl+0x95/0xd0 [ 334.390681][ T7862] dump_stack+0x15/0x1b [ 334.390702][ T7862] should_fail_ex+0x263/0x280 [ 334.390742][ T7862] should_fail+0xb/0x20 [ 334.390769][ T7862] should_fail_usercopy+0x1a/0x20 [ 334.390799][ T7862] strncpy_from_user+0x27/0x250 [ 334.390823][ T7862] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 334.390904][ T7862] do_getname+0x59/0x1c0 [ 334.390925][ T7862] __se_sys_rename+0x2f/0x1c0 [ 334.391006][ T7862] __x64_sys_rename+0x31/0x40 [ 334.391027][ T7862] x64_sys_call+0x2b3/0x3020 [ 334.391053][ T7862] do_syscall_64+0x12c/0x3b0 [ 334.391115][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.391139][ T7862] RIP: 0033:0x7f05932bcdd9 [ 334.391158][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.391177][ T7862] RSP: 002b:00007f0591d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 334.391201][ T7862] RAX: ffffffffffffffda RBX: 00007f0593535fa0 RCX: 00007f05932bcdd9 [ 334.391217][ T7862] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 334.391280][ T7862] RBP: 00007f0591d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.391294][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.391307][ T7862] R13: 00007f0593536038 R14: 00007f0593535fa0 R15: 00007fffe3cfe0a8 [ 334.391326][ T7862] [ 334.670473][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.762004][ T7866] loop2: detected capacity change from 0 to 2048 [ 334.769014][ T7866] ext4: Unknown parameter 'posixacl' [ 334.846639][ T28] audit: type=1400 audit(1778039244.419:1237): avc: denied { mount } for pid=7636 comm="syz-executor" name="/" dev="gadgetfs" ino=4753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 334.935854][ T7879] netlink: 884 bytes leftover after parsing attributes in process `syz.6.1052'. [ 334.947263][ T7879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7879 comm=syz.6.1052 [ 335.032041][ T28] audit: type=1400 audit(1778039244.619:1238): avc: denied { connect } for pid=7869 comm="syz.3.1085" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.155342][ T7885] loop2: detected capacity change from 0 to 512 [ 335.177579][ T7885] EXT4-fs: Ignoring removed bh option [ 335.197599][ T7885] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 335.258882][ T7885] EXT4-fs (loop2): 1 truncate cleaned up [ 335.301891][ T7892] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1091'. [ 335.452348][ T7885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.562109][ T7899] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1094'. [ 335.577088][ T28] audit: type=1326 audit(1778039245.159:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1090" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc1fecdd9 code=0x7ffc0000 [ 335.648685][ T28] audit: type=1326 audit(1778039245.159:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1090" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc1fecdd9 code=0x7ffc0000 [ 335.715358][ T28] audit: type=1326 audit(1778039245.159:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1090" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc1fecdd9 code=0x7ffc0000 [ 335.781542][ T28] audit: type=1326 audit(1778039245.159:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1090" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdfc1fecdd9 code=0x7ffc0000 [ 335.811170][ T7908] loop3: detected capacity change from 0 to 1024 [ 335.858710][ T7908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.861591][ T28] audit: type=1326 audit(1778039245.159:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.2.1090" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc1fecdd9 code=0x7ffc0000 [ 335.897832][ T7908] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.000662][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.063048][ T7915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1098: bg 0: block 112: padding at end of block bitmap is not set [ 336.266021][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.695903][ T7924] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1102'. [ 336.789187][ T7935] FAULT_INJECTION: forcing a failure. [ 336.789187][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 336.802280][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.2.1104 Tainted: G W syzkaller #0 PREEMPT(full) [ 336.802366][ T7935] Tainted: [W]=WARN [ 336.802375][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.802416][ T7935] Call Trace: [ 336.802424][ T7935] [ 336.802434][ T7935] __dump_stack+0x1d/0x30 [ 336.802460][ T7935] dump_stack_lvl+0x95/0xd0 [ 336.802482][ T7935] dump_stack+0x15/0x1b [ 336.802503][ T7935] should_fail_ex+0x263/0x280 [ 336.802611][ T7935] should_failslab+0x8c/0xb0 [ 336.802719][ T7935] __kmalloc_noprof+0xb8/0x4d0 [ 336.802754][ T7935] ? security_prepare_creds+0x52/0x120 [ 336.802785][ T7935] security_prepare_creds+0x52/0x120 [ 336.802873][ T7935] prepare_creds+0x381/0x540 [ 336.802942][ T7935] copy_creds+0x8f/0x340 [ 336.802974][ T7935] ? dup_task_struct+0x5d6/0x660 [ 336.803001][ T7935] copy_process+0x84c/0x2370 [ 336.803027][ T7935] ? __rcu_read_unlock+0x4e/0x70 [ 336.803071][ T7935] kernel_clone+0x1a5/0x5e0 [ 336.803098][ T7935] ? vfs_write+0x86e/0x9f0 [ 336.803133][ T7935] __x64_sys_clone+0x143/0x180 [ 336.803217][ T7935] x64_sys_call+0x1222/0x3020 [ 336.803242][ T7935] do_syscall_64+0x12c/0x3b0 [ 336.803317][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.803340][ T7935] RIP: 0033:0x7fdfc1fecdd9 [ 336.803356][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.803375][ T7935] RSP: 002b:00007fdfc0a04fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 336.803445][ T7935] RAX: ffffffffffffffda RBX: 00007fdfc2266180 RCX: 00007fdfc1fecdd9 [ 336.803460][ T7935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 336.803528][ T7935] RBP: 00007fdfc0a05090 R08: 0000000000000000 R09: 0000000000000000 [ 336.803542][ T7935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 336.803629][ T7935] R13: 00007fdfc2266218 R14: 00007fdfc2266180 R15: 00007fffe2913be8 [ 336.803648][ T7935] [ 337.017466][ T7935] loop2: detected capacity change from 0 to 1024 [ 337.025421][ T7935] EXT4-fs: Ignoring removed oldalloc option [ 337.031435][ T7935] EXT4-fs: Ignoring removed i_version option [ 337.037570][ T7935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.158841][ T7935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.180525][ T7935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.556464][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 337.556482][ T28] audit: type=1400 audit(1778039247.139:1317): avc: denied { write } for pid=7950 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 337.609620][ T7953] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1108'. [ 337.896261][ T7966] loop5: detected capacity change from 0 to 512 [ 337.965164][ T7966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.988851][ T7966] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.353825][ T28] audit: type=1400 audit(1778039247.939:1318): avc: denied { write } for pid=7954 comm="syz.5.1110" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.172782][ T28] audit: type=1400 audit(1778039249.759:1319): avc: denied { map } for pid=7999 comm="syz.6.1122" path="socket:[21554]" dev="sockfs" ino=21554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 340.355999][ T7986] loop2: detected capacity change from 0 to 2048 [ 340.428655][ T8004] loop6: detected capacity change from 0 to 128 [ 340.436442][ T8004] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.558306][ T8005] geneve2: entered promiscuous mode [ 340.729478][ T8005] geneve2: entered allmulticast mode [ 341.074078][ T7986] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 15 [ 341.682878][ T8023] loop6: detected capacity change from 0 to 512 [ 341.733654][ T8023] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.1128: corrupted xattr block 95: invalid header [ 341.769616][ T8023] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 341.780166][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 341.797781][ C0] EXT4-fs (loop6): initial error at time 1778039251: ext4_expand_extra_isize_ea:2810: inode 11 [ 341.808155][ C0] EXT4-fs (loop6): last error at time 1778039251: ext4_expand_extra_isize_ea:2810: inode 11 [ 341.830526][ T8023] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1128: bg 0: block 7: invalid block bitmap [ 341.843178][ T8023] loop6: lost filesystem error report for type 5 error -117 [ 341.846860][ T8023] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 341.881957][ T8023] loop6: lost filesystem error report for type 5 error -117 [ 341.886179][ T8023] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.1128: corrupted xattr block 95: invalid header [ 341.907127][ T8023] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 341.907688][ T8023] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 341.935100][ T8023] EXT4-fs (loop6): 1 orphan inode deleted [ 341.942340][ T8023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.989818][ T28] audit: type=1400 audit(1778039251.539:1320): avc: denied { write } for pid=8014 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.108350][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.150204][ T28] audit: type=1400 audit(1778039251.569:1321): avc: denied { read } for pid=8014 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 343.442186][ T7636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.536249][ T8035] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1132'. [ 343.662132][ T8040] loop3: detected capacity change from 0 to 1024 [ 343.699843][ T8040] EXT4-fs: Ignoring removed mblk_io_submit option [ 343.753144][ T8040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 343.811603][ T8040] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.080453][ T8052] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.1134: lblock 0 mapped to illegal pblock 0 (length 1) [ 344.104032][ T28] audit: type=1400 audit(1778039253.659:1322): avc: denied { write } for pid=8039 comm="syz.3.1134" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.175252][ T8061] loop5: detected capacity change from 0 to 256 [ 344.183191][ T8047] loop6: detected capacity change from 0 to 512 [ 344.185662][ T28] audit: type=1400 audit(1778039253.659:1323): avc: denied { read } for pid=8039 comm="syz.3.1134" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 344.217650][ T8061] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.235724][ T8047] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.261872][ T8061] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.315165][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 344.341373][ T28] audit: type=1400 audit(1778039253.919:1324): avc: denied { write } for pid=8058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.341591][ T8047] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.1131: Allocating blocks 41-42 which overlap fs metadata [ 344.390787][ T8047] loop6: lost filesystem error report for type 5 error -117 [ 344.397930][ T8047] Quota error (device loop6): write_blk: dquota write failed [ 344.405636][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 344.405663][ C0] EXT4-fs (loop6): initial error at time 1778039253: ext4_mb_mark_diskspace_used:4222 [ 344.405685][ C0] EXT4-fs (loop6): last error at time 1778039253: ext4_mb_mark_diskspace_used:4222 [ 344.479760][ T28] audit: type=1400 audit(1778039254.059:1325): avc: denied { write } for pid=8074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.601358][ T28] audit: type=1400 audit(1778039254.059:1326): avc: denied { write } for pid=8073 comm="syz.3.1138" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 344.718402][ T8047] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 345.536798][ T8047] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.1131: Allocating blocks 41-42 which overlap fs metadata [ 345.756159][ T8047] loop6: lost filesystem error report for type 5 error -117 [ 345.756372][ T8047] Quota error (device loop6): write_blk: dquota write failed [ 346.800857][ T8047] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 347.224377][ T8087] loop3: detected capacity change from 0 to 1024 [ 347.253078][ T8087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a856c028, mo2=0002] [ 347.261676][ T8087] System zones: 0-1, 3-12 [ 347.267154][ T8087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.283796][ T8087] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.1138: corrupted in-inode xattr: invalid ea_ino [ 347.298522][ T8087] EXT4-fs (loop3): Remounting filesystem read-only [ 347.433028][ T8097] loop5: detected capacity change from 0 to 1024 [ 347.445764][ T8047] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1131: Failed to acquire dquot type 1 [ 347.551203][ T8047] loop6: lost filesystem error report for type 5 error -117 [ 347.552005][ T8047] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 347.560163][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.574660][ T8047] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1131: corrupted inode contents [ 347.600586][ T8097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.624056][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.624254][ T8047] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.1131: mark_inode_dirty error [ 347.650074][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.650263][ T8047] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1131: corrupted inode contents [ 347.717390][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.719068][ T8047] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.1131: mark_inode_dirty error [ 347.794060][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.794313][ T8047] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1131: corrupted inode contents [ 347.860026][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.860303][ T8047] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 347.907128][ T8047] loop6: lost filesystem error report for type 5 error -117 [ 347.907370][ T8047] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.1131: corrupted inode contents [ 347.957039][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.957233][ T8047] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.1131: mark_inode_dirty error [ 348.160152][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 348.160171][ T28] audit: type=1400 audit(1778039257.709:1330): avc: denied { write } for pid=8095 comm="syz.5.1140" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.190671][ T8047] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 348.193645][ T8047] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 348.269873][ T8047] loop6: lost filesystem error report for type 5 error -117 [ 348.270286][ T8047] EXT4-fs (loop6): 1 truncate cleaned up [ 348.304118][ T28] audit: type=1400 audit(1778039257.729:1331): avc: denied { mount } for pid=8124 comm="syz.0.1141" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 348.334388][ T8129] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1144'. [ 348.357797][ T8047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.358352][ T28] audit: type=1400 audit(1778039257.729:1332): avc: denied { mounton } for pid=8124 comm="syz.0.1141" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 348.393215][ T28] audit: type=1400 audit(1778039257.829:1333): avc: denied { write } for pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.420034][ T28] audit: type=1400 audit(1778039257.979:1334): avc: denied { write } for pid=8130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.482723][ T7636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.550248][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.619812][ T28] audit: type=1400 audit(1778039258.199:1335): avc: denied { write } for pid=8136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.732651][ T28] audit: type=1400 audit(1778039258.319:1336): avc: denied { write } for pid=8159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.525526][ T8168] loop3: detected capacity change from 0 to 1764 [ 349.596115][ T28] audit: type=1400 audit(1778039259.179:1337): avc: denied { ioctl } for pid=8132 comm="syz.0.1145" path="socket:[21308]" dev="sockfs" ino=21308 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.803073][ T8177] loop3: detected capacity change from 0 to 512 [ 350.810431][ T8177] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 350.822371][ T8177] EXT4-fs (loop3): orphan cleanup on readonly fs [ 350.849874][ T8177] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1152: Block bitmap for bg 0 marked uninitialized [ 350.914377][ T8177] loop3: lost filesystem error report for type 5 error -117 [ 350.914624][ T8177] EXT4-fs (loop3): Remounting filesystem read-only [ 350.922502][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 350.922522][ C1] EXT4-fs (loop3): initial error at time 1778039260: ext4_read_block_bitmap_nowait:517 [ 350.922544][ C1] EXT4-fs (loop3): last error at time 1778039260: ext4_read_block_bitmap_nowait:517 [ 350.933126][ T8186] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1156'. [ 350.983367][ T8189] FAULT_INJECTION: forcing a failure. [ 350.983367][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.996782][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.0.1157 Tainted: G W syzkaller #0 PREEMPT(full) [ 350.996822][ T8189] Tainted: [W]=WARN [ 350.996831][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.996888][ T8189] Call Trace: [ 350.996896][ T8189] [ 350.996905][ T8189] __dump_stack+0x1d/0x30 [ 350.996931][ T8189] dump_stack_lvl+0x95/0xd0 [ 350.996956][ T8189] dump_stack+0x15/0x1b [ 350.996979][ T8189] should_fail_ex+0x263/0x280 [ 350.997033][ T8189] should_fail+0xb/0x20 [ 350.997058][ T8189] should_fail_usercopy+0x1a/0x20 [ 350.997095][ T8189] _copy_from_iter+0xcf/0xea0 [ 350.997111][ T8177] EXT4-fs (loop3): 1 orphan inode deleted [ 350.997128][ T8189] ? __alloc_skb+0x4f6/0x690 [ 350.997201][ T8189] ? __alloc_skb+0x200/0x690 [ 350.997236][ T8189] netlink_sendmsg+0x4ae/0x6f0 [ 350.997331][ T8189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.997361][ T8189] ____sys_sendmsg+0x563/0x5b0 [ 350.997389][ T8189] ___sys_sendmsg+0x195/0x1e0 [ 350.997482][ T8189] __x64_sys_sendmsg+0xd4/0x160 [ 350.997579][ T8189] x64_sys_call+0x194c/0x3020 [ 350.997680][ T8189] do_syscall_64+0x12c/0x3b0 [ 350.997834][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.997858][ T8189] RIP: 0033:0x7fbebdb0cdd9 [ 350.997881][ T8189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.997938][ T8189] RSP: 002b:00007fbebc55f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.997962][ T8189] RAX: ffffffffffffffda RBX: 00007fbebdd85fa0 RCX: 00007fbebdb0cdd9 [ 350.997977][ T8189] RDX: 0000000004000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 350.998043][ T8189] RBP: 00007fbebc55f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.998152][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.998166][ T8189] R13: 00007fbebdd86038 R14: 00007fbebdd85fa0 R15: 00007ffd67141928 [ 350.998263][ T8189] [ 351.204918][ T8177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 351.272507][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1161'. [ 351.320181][ T8198] loop6: detected capacity change from 0 to 128 [ 351.340283][ T28] audit: type=1400 audit(1778039260.919:1338): avc: denied { sys_module } for pid=8196 comm="syz.0.1160" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 351.374372][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.400419][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 351.428641][ T8198] xt_hashlimit: size too large, truncated to 1048576 [ 351.510079][ T28] audit: type=1326 audit(1778039261.089:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.6.1161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e27bfcdd9 code=0x7ffc0000 [ 351.580458][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1165'. [ 351.784811][ T8215] veth3: entered promiscuous mode [ 351.791479][ T8215] veth3: entered allmulticast mode [ 351.878027][ T8226] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1168'. [ 351.981523][ T8224] loop5: detected capacity change from 0 to 8192 [ 352.502765][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1178'. [ 352.564964][ T8249] loop6: detected capacity change from 0 to 1024 [ 352.590377][ T8249] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 352.620854][ T8249] EXT4-fs (loop6): group descriptors corrupted! [ 352.677522][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1181'. [ 352.719261][ T8256] loop2: detected capacity change from 0 to 1024 [ 352.750388][ T8256] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 352.795559][ T8256] EXT4-fs (loop2): group descriptors corrupted! [ 352.967358][ T8243] syz.3.1175 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 353.004588][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.3.1175 Tainted: G W syzkaller #0 PREEMPT(full) [ 353.004653][ T8243] Tainted: [W]=WARN [ 353.004660][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.004713][ T8243] Call Trace: [ 353.004721][ T8243] [ 353.004730][ T8243] __dump_stack+0x1d/0x30 [ 353.004762][ T8243] dump_stack_lvl+0x95/0xd0 [ 353.004783][ T8243] dump_stack+0x15/0x1b [ 353.004804][ T8243] dump_header+0x80/0x240 [ 353.004866][ T8243] oom_kill_process+0x295/0x350 [ 353.004971][ T8243] out_of_memory+0x97d/0xb80 [ 353.005007][ T8243] try_charge_memcg+0x62f/0xa10 [ 353.005047][ T8243] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 353.005091][ T8243] __alloc_frozen_pages_noprof+0x18a/0x350 [ 353.005117][ T8243] alloc_pages_mpol+0xb3/0x260 [ 353.005143][ T8243] alloc_pages_noprof+0x8f/0x140 [ 353.005171][ T8243] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 353.005333][ T8243] __kvmalloc_node_noprof+0x3d4/0x640 [ 353.005356][ T8243] ? futex_hash_allocate+0x190/0x9a0 [ 353.005396][ T8243] ? futex_hash_allocate+0x190/0x9a0 [ 353.005537][ T8243] futex_hash_allocate+0x190/0x9a0 [ 353.005571][ T8243] ? cap_task_prctl+0x13f/0x6b0 [ 353.005601][ T8243] futex_hash_prctl+0xd8/0xf0 [ 353.005637][ T8243] __se_sys_prctl+0x4f4/0x1400 [ 353.005734][ T8243] __x64_sys_prctl+0x67/0x80 [ 353.005760][ T8243] x64_sys_call+0x2533/0x3020 [ 353.005808][ T8243] do_syscall_64+0x12c/0x3b0 [ 353.005839][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.005864][ T8243] RIP: 0033:0x7f05932bcdd9 [ 353.005886][ T8243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.005973][ T8243] RSP: 002b:00007f0591d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 353.005998][ T8243] RAX: ffffffffffffffda RBX: 00007f0593535fa0 RCX: 00007f05932bcdd9 [ 353.006013][ T8243] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 353.006031][ T8243] RBP: 00007f0593352d69 R08: 0000000000000000 R09: 0000000000000000 [ 353.006048][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.006064][ T8243] R13: 00007f0593536038 R14: 00007f0593535fa0 R15: 00007fffe3cfe0a8 [ 353.006163][ T8243] [ 353.006313][ T8243] memory: usage 307200kB, limit 307200kB, failcnt 357 [ 353.250117][ T8243] memory+swap: usage 227824kB, limit 9007199254740988kB, failcnt 0 [ 353.270054][ T8243] kmem: usage 219404kB, limit 9007199254740988kB, failcnt 0 [ 353.277487][ T8243] Memory cgroup stats for /syz3: [ 353.277782][ T8243] cache 24576 [ 353.286744][ T8243] rss 4096 [ 353.290276][ T8243] shmem 0 [ 353.294838][ T8243] mapped_file 24576 [ 353.310051][ T8243] dirty 0 [ 353.313142][ T8243] writeback 0 [ 353.316517][ T8243] workingset_refault_anon 78 [ 353.321534][ T8243] workingset_refault_file 3235 [ 353.330276][ T8243] swap 188416 [ 353.344437][ T8243] swapcached 1417216 [ 353.349972][ T8243] pgpgin 292424 [ 353.365999][ T8243] pgpgout 292408 [ 353.381606][ T8243] pgfault 227860 [ 353.388347][ T8243] pgmajfault 79 [ 353.393269][ T8243] inactive_anon 4096 [ 353.405952][ T8243] active_anon 0 [ 353.421920][ T8243] inactive_file 61440 [ 353.441981][ T8243] active_file 0 [ 353.449488][ T8243] unevictable 0 [ 353.459923][ T8243] hierarchical_memory_limit 314572800 [ 353.469248][ T8243] hierarchical_memsw_limit 9223372036854771712 [ 353.480934][ T8243] total_cache 24576 [ 353.493814][ T8243] total_rss 4096 [ 353.501546][ T8243] total_shmem 0 [ 353.606728][ T8243] total_mapped_file 24576 [ 353.611558][ T8243] total_dirty 0 [ 353.615492][ T8243] total_writeback 0 [ 353.619369][ T8243] total_workingset_refault_anon 78 [ 353.624588][ T8243] total_workingset_refault_file 3235 [ 353.630123][ T8243] total_swap 188416 [ 353.634050][ T8243] total_swapcached 1417216 [ 353.638492][ T8243] total_pgpgin 292424 [ 353.642536][ T8243] total_pgpgout 292408 [ 353.646623][ T8243] total_pgfault 227860 [ 353.658665][ T8243] total_pgmajfault 79 [ 353.666617][ T8243] total_inactive_anon 4096 [ 353.680281][ T8243] total_active_anon 0 [ 353.703406][ T8243] total_inactive_file 61440 [ 354.341062][ T8243] total_active_file 0 [ 354.372950][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 354.372991][ T28] audit: type=1400 audit(1778039263.949:1463): avc: denied { connect } for pid=8278 comm="syz.6.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 354.406644][ T8243] total_unevictable 0 [ 354.484117][ T8243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1175,pid=8242,uid=0 [ 354.537205][ T8279] tc_dump_action: action bad kind [ 354.607625][ T8243] Memory cgroup out of memory: Killed process 8242 (syz.3.1175) total-vm:94036kB, anon-rss:1228kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 354.659464][ T28] audit: type=1400 audit(1778039264.189:1464): avc: denied { mount } for pid=8278 comm="syz.6.1188" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 355.503158][ T8298] xt_l2tp: wrong L2TP version: 0 [ 355.993488][ T8312] loop3: detected capacity change from 0 to 128 [ 356.032213][ T8312] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.055170][ T8312] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.323488][ T28] audit: type=1400 audit(1778039265.909:1465): avc: denied { bind } for pid=8309 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.434678][ T6000] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.643936][ T8318] FAULT_INJECTION: forcing a failure. [ 356.643936][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 356.804886][ T8318] CPU: 0 UID: 0 PID: 8318 Comm: syz.3.1198 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.804962][ T8318] Tainted: [W]=WARN [ 356.804969][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.805053][ T8318] Call Trace: [ 356.805071][ T8318] [ 356.805081][ T8318] __dump_stack+0x1d/0x30 [ 356.805111][ T8318] dump_stack_lvl+0x95/0xd0 [ 356.805140][ T8318] dump_stack+0x15/0x1b [ 356.805161][ T8318] should_fail_ex+0x263/0x280 [ 356.805191][ T8318] should_failslab+0x8c/0xb0 [ 356.805227][ T8318] __kmalloc_node_noprof+0xc8/0x550 [ 356.805313][ T8318] ? __schedule+0x936/0xd20 [ 356.805360][ T8318] ? qdisc_alloc+0x65/0x410 [ 356.805414][ T8318] qdisc_alloc+0x65/0x410 [ 356.805440][ T8318] ? nla_strcmp+0xc3/0xe0 [ 356.805540][ T8318] qdisc_create+0xf5/0x9d0 [ 356.805616][ T8318] ? preempt_schedule_thunk+0x16/0x30 [ 356.805747][ T8318] tc_modify_qdisc+0xffc/0x14f0 [ 356.805784][ T8318] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 356.805963][ T8318] rtnetlink_rcv_msg+0x6a7/0x720 [ 356.805993][ T8318] netlink_rcv_skb+0x123/0x220 [ 356.806020][ T8318] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.806084][ T8318] rtnetlink_rcv+0x1c/0x30 [ 356.806109][ T8318] netlink_unicast+0x5a8/0x680 [ 356.806219][ T8318] netlink_sendmsg+0x5c8/0x6f0 [ 356.806251][ T8318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.806284][ T8318] ____sys_sendmsg+0x563/0x5b0 [ 356.806376][ T8318] ___sys_sendmsg+0x195/0x1e0 [ 356.806414][ T8318] __x64_sys_sendmsg+0xd4/0x160 [ 356.806501][ T8318] x64_sys_call+0x194c/0x3020 [ 356.806530][ T8318] do_syscall_64+0x12c/0x3b0 [ 356.806559][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.806731][ T8318] RIP: 0033:0x7f05932bcdd9 [ 356.806752][ T8318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.806774][ T8318] RSP: 002b:00007f0591d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.806867][ T8318] RAX: ffffffffffffffda RBX: 00007f0593535fa0 RCX: 00007f05932bcdd9 [ 356.806885][ T8318] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 356.806902][ T8318] RBP: 00007f0591d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.806918][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.806981][ T8318] R13: 00007f0593536038 R14: 00007f0593535fa0 R15: 00007fffe3cfe0a8 [ 356.807001][ T8318] [ 357.150034][ T28] audit: type=1400 audit(1778039266.709:1466): avc: denied { getopt } for pid=8323 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 357.259893][ T8329] tipc: Enabling of bearer rejected, failed to enable media [ 358.411998][ T8343] loop2: detected capacity change from 0 to 512 [ 358.693916][ T8343] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.951437][ T8343] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1200: Allocating blocks 41-42 which overlap fs metadata [ 359.060846][ T8343] loop2: lost filesystem error report for type 5 error -117 [ 359.061847][ T8343] Quota error (device loop2): write_blk: dquota write failed [ 359.076666][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 359.076688][ C0] EXT4-fs (loop2): initial error at time 1778039268: ext4_mb_mark_diskspace_used:4222 [ 359.076713][ C0] EXT4-fs (loop2): last error at time 1778039268: ext4_mb_mark_diskspace_used:4222 [ 359.265306][ T8343] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 359.297471][ T8343] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1200: Allocating blocks 41-42 which overlap fs metadata [ 359.335268][ T8343] loop2: lost filesystem error report for type 5 error -117 [ 359.335471][ T8343] Quota error (device loop2): write_blk: dquota write failed [ 359.370735][ T8343] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 359.416204][ T8343] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1200: Failed to acquire dquot type 1 [ 359.429053][ T8343] loop2: lost filesystem error report for type 5 error -117 [ 359.429289][ T8343] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 359.470845][ T8343] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1200: corrupted inode contents [ 359.500099][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.500433][ T8343] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.1200: mark_inode_dirty error [ 359.557257][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.557618][ T8343] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1200: corrupted inode contents [ 359.587713][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1211'. [ 359.600108][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.603903][ T8343] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.1200: mark_inode_dirty error [ 359.643616][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.645790][ T8343] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1200: corrupted inode contents [ 359.673615][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.673852][ T8343] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 359.692228][ T8343] loop2: lost filesystem error report for type 5 error -117 [ 359.693608][ T8343] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1200: corrupted inode contents [ 359.725210][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.725612][ T8343] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.1200: mark_inode_dirty error [ 359.755433][ T8377] loop5: detected capacity change from 0 to 736 [ 359.767571][ T8343] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 359.767826][ T8343] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 359.787064][ T28] audit: type=1400 audit(1778039269.359:1467): avc: denied { create } for pid=8380 comm="syz.6.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.808494][ T8343] loop2: lost filesystem error report for type 5 error -117 [ 359.808761][ T28] audit: type=1400 audit(1778039269.369:1468): avc: denied { write } for pid=8380 comm="syz.6.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.840272][ T8379] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1212'. [ 359.849810][ T8343] EXT4-fs (loop2): 1 truncate cleaned up [ 359.856520][ T8343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.911955][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.012295][ T28] audit: type=1326 audit(1778039269.599:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.048567][ T28] audit: type=1326 audit(1778039269.599:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.107242][ T28] audit: type=1326 audit(1778039269.609:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.165558][ T28] audit: type=1326 audit(1778039269.609:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.306838][ T28] audit: type=1326 audit(1778039269.609:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.334998][ T28] audit: type=1326 audit(1778039269.619:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.843151][ T28] audit: type=1326 audit(1778039269.619:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 360.981151][ T8403] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1221'. [ 361.140106][ T28] audit: type=1326 audit(1778039269.619:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.5.1216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8b1cdd9 code=0x7ffc0000 [ 361.565378][ T8385] syz.0.1219 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 361.583100][ T8385] CPU: 1 UID: 0 PID: 8385 Comm: syz.0.1219 Tainted: G W syzkaller #0 PREEMPT(full) [ 361.583137][ T8385] Tainted: [W]=WARN [ 361.583144][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.583157][ T8385] Call Trace: [ 361.583164][ T8385] [ 361.583173][ T8385] __dump_stack+0x1d/0x30 [ 361.583202][ T8385] dump_stack_lvl+0x95/0xd0 [ 361.583280][ T8385] dump_stack+0x15/0x1b [ 361.583304][ T8385] dump_header+0x80/0x240 [ 361.583340][ T8385] oom_kill_process+0x295/0x350 [ 361.583373][ T8385] out_of_memory+0x97d/0xb80 [ 361.583428][ T8385] try_charge_memcg+0x62f/0xa10 [ 361.583476][ T8385] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 361.583523][ T8385] __alloc_frozen_pages_noprof+0x18a/0x350 [ 361.583554][ T8385] alloc_pages_mpol+0xb3/0x260 [ 361.583579][ T8385] alloc_pages_noprof+0x8f/0x140 [ 361.583608][ T8385] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 361.583646][ T8385] __kvmalloc_node_noprof+0x3d4/0x640 [ 361.583698][ T8385] ? futex_hash_allocate+0x190/0x9a0 [ 361.583729][ T8385] ? futex_hash_allocate+0x190/0x9a0 [ 361.583791][ T8385] futex_hash_allocate+0x190/0x9a0 [ 361.583881][ T8385] ? cap_task_prctl+0x13f/0x6b0 [ 361.583909][ T8385] futex_hash_prctl+0xd8/0xf0 [ 361.584014][ T8385] __se_sys_prctl+0x4f4/0x1400 [ 361.584042][ T8385] __x64_sys_prctl+0x67/0x80 [ 361.584067][ T8385] x64_sys_call+0x2533/0x3020 [ 361.584218][ T8385] do_syscall_64+0x12c/0x3b0 [ 361.584252][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.584277][ T8385] RIP: 0033:0x7fbebdb0cdd9 [ 361.584294][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.584312][ T8385] RSP: 002b:00007fbebc55f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 361.584487][ T8385] RAX: ffffffffffffffda RBX: 00007fbebdd85fa0 RCX: 00007fbebdb0cdd9 [ 361.584505][ T8385] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 361.584522][ T8385] RBP: 00007fbebdba2d69 R08: 0000000000000000 R09: 0000000000000000 [ 361.584537][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.584580][ T8385] R13: 00007fbebdd86038 R14: 00007fbebdd85fa0 R15: 00007ffd67141928 [ 361.584599][ T8385] [ 361.584656][ T8385] memory: usage 307200kB, limit 307200kB, failcnt 497 [ 361.826127][ T8385] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 361.834893][ T8385] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 361.842462][ T8385] Memory cgroup stats for /syz0: [ 361.842838][ T8385] cache 8192 [ 361.851485][ T8385] rss 0 [ 361.854276][ T8385] shmem 0 [ 361.857294][ T8385] mapped_file 0 [ 361.861084][ T8385] dirty 0 [ 361.864155][ T8385] writeback 0 [ 361.867598][ T8385] workingset_refault_anon 144 [ 361.872749][ T8385] workingset_refault_file 2266 [ 361.877969][ T8385] swap 712704 [ 361.881599][ T8385] swapcached 1847296 [ 361.885567][ T8385] pgpgin 367112 [ 361.889186][ T8385] pgpgout 367105 [ 361.893211][ T8385] pgfault 256733 [ 361.896776][ T8385] pgmajfault 111 [ 361.900666][ T8385] inactive_anon 0 [ 361.904373][ T8385] active_anon 0 [ 361.907839][ T8385] inactive_file 20480 [ 361.912457][ T8385] active_file 8192 [ 361.916370][ T8385] unevictable 0 [ 361.919960][ T8385] hierarchical_memory_limit 314572800 [ 361.926303][ T8385] hierarchical_memsw_limit 9223372036854771712 [ 361.934940][ T8385] total_cache 8192 [ 361.938868][ T8385] total_rss 0 [ 361.942370][ T8385] total_shmem 0 [ 361.945868][ T8385] total_mapped_file 0 [ 361.950325][ T8385] total_dirty 0 [ 361.953909][ T8385] total_writeback 0 [ 361.957719][ T8385] total_workingset_refault_anon 144 [ 361.963535][ T8385] total_workingset_refault_file 2266 [ 361.969379][ T8385] total_swap 712704 [ 361.973919][ T8385] total_swapcached 1847296 [ 361.978627][ T8385] total_pgpgin 367112 [ 361.983018][ T8385] total_pgpgout 367105 [ 361.987801][ T8385] total_pgfault 256733 [ 361.992187][ T8385] total_pgmajfault 111 [ 361.996288][ T8385] total_inactive_anon 0 [ 362.000648][ T8385] total_active_anon 0 [ 362.004679][ T8385] total_inactive_file 20480 [ 362.009244][ T8385] total_active_file 8192 [ 362.013928][ T8385] total_unevictable 0 [ 362.017940][ T8385] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1219,pid=8383,uid=0 [ 362.033118][ T8385] Memory cgroup out of memory: Killed process 8383 (syz.0.1219) total-vm:94036kB, anon-rss:1236kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 364.818609][ T8428] xt_hashlimit: size too large, truncated to 1048576 [ 364.855775][ T8431] loop3: detected capacity change from 0 to 128 [ 364.997617][ T8431] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.069693][ T8431] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.692101][ T8441] loop6: detected capacity change from 0 to 512 [ 365.756483][ T8441] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.900787][ T8453] loop5: detected capacity change from 0 to 512 [ 365.957703][ T8453] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.969446][ T8453] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 365.984899][ T8441] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.1234: corrupted xattr entries [ 366.021306][ T8441] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 366.030004][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 366.045661][ C0] EXT4-fs (loop6): initial error at time 1778039275: xattr_find_entry:337: inode 15 [ 366.055518][ C0] EXT4-fs (loop6): last error at time 1778039275: xattr_find_entry:337: inode 15 [ 366.060945][ T8441] EXT4-fs (loop6): 1 truncate cleaned up [ 366.200958][ T8441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.813093][ T7636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.828683][ T8467] program syz.2.1241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.945445][ T8471] xt_hashlimit: size too large, truncated to 1048576 [ 368.076144][ T8485] loop2: detected capacity change from 0 to 512 [ 368.137930][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.200034][ T8485] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.252718][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 368.252737][ T28] audit: type=1400 audit(1778039277.839:1542): avc: denied { append } for pid=8488 comm="syz.3.1247" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 368.392201][ T8496] loop3: detected capacity change from 0 to 1024 [ 368.463595][ T8496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 368.501546][ T8496] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.606693][ T28] audit: type=1400 audit(1778039277.869:1543): avc: denied { write } for pid=8484 comm="syz.2.1246" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 368.660907][ T8504] loop6: detected capacity change from 0 to 512 [ 368.675844][ T8504] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.685909][ T8504] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 368.719524][ T8501] FAULT_INJECTION: forcing a failure. [ 368.719524][ T8501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.732935][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.3.1248 Tainted: G W syzkaller #0 PREEMPT(full) [ 368.732987][ T8501] Tainted: [W]=WARN [ 368.732995][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.733009][ T8501] Call Trace: [ 368.733018][ T8501] [ 368.733028][ T8501] __dump_stack+0x1d/0x30 [ 368.733089][ T8501] dump_stack_lvl+0x95/0xd0 [ 368.733186][ T8501] dump_stack+0x15/0x1b [ 368.733208][ T8501] should_fail_ex+0x263/0x280 [ 368.733240][ T8501] should_fail+0xb/0x20 [ 368.733276][ T8501] should_fail_usercopy+0x1a/0x20 [ 368.733387][ T8501] _copy_from_iter+0xcf/0xea0 [ 368.733456][ T8501] ? __alloc_skb+0x4f6/0x690 [ 368.733494][ T8501] ? __alloc_skb+0x200/0x690 [ 368.733534][ T8501] netlink_sendmsg+0x4ae/0x6f0 [ 368.733627][ T8501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.733660][ T8501] ____sys_sendmsg+0x563/0x5b0 [ 368.733721][ T8501] ___sys_sendmsg+0x195/0x1e0 [ 368.733759][ T8501] __x64_sys_sendmsg+0xd4/0x160 [ 368.733843][ T8501] x64_sys_call+0x194c/0x3020 [ 368.733871][ T8501] do_syscall_64+0x12c/0x3b0 [ 368.733902][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.734003][ T8501] RIP: 0033:0x7f05932bcdd9 [ 368.734023][ T8501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.734045][ T8501] RSP: 002b:00007f0591cee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.734070][ T8501] RAX: ffffffffffffffda RBX: 00007f0593536090 RCX: 00007f05932bcdd9 [ 368.734088][ T8501] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000009 [ 368.734104][ T8501] RBP: 00007f0591cee090 R08: 0000000000000000 R09: 0000000000000000 [ 368.734159][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.734174][ T8501] R13: 00007f0593536128 R14: 00007f0593536090 R15: 00007fffe3cfe0a8 [ 368.734203][ T8501] [ 369.200072][ T8510] atomic_op ffff88814ff6ad28 conn xmit_atomic 0000000000000000 [ 369.422169][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 369.451018][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.655299][ T8519] loop3: detected capacity change from 0 to 512 [ 369.699856][ T8519] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 369.735433][ T8519] EXT4-fs (loop3): invalid journal inode [ 369.767345][ T8521] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1256'. [ 369.808278][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 369.836969][ T8520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.885010][ T8520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.934218][ T8540] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1258'. [ 369.978805][ T8530] loop3: detected capacity change from 0 to 1024 [ 369.988018][ T8541] loop5: detected capacity change from 0 to 512 [ 369.999678][ T8535] loop6: detected capacity change from 0 to 1764 [ 370.013736][ T8530] EXT4-fs: Ignoring removed bh option [ 370.019762][ T8541] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 370.042723][ T8541] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 370.072641][ T8530] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 370.083576][ T8530] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.132717][ T8530] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.1259: iget: special inode unallocated [ 370.156247][ T8530] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 370.158067][ T8530] EXT4-fs (loop3): Remounting filesystem read-only [ 370.167850][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 370.167901][ C1] EXT4-fs (loop3): initial error at time 1778039279: __ext4_fill_super:5596: inode 2 [ 370.168049][ C1] EXT4-fs (loop3): last error at time 1778039279: __ext4_fill_super:5596: inode 2 [ 370.202996][ T8530] EXT4-fs (loop3): get root inode failed [ 370.209624][ T8530] EXT4-fs (loop3): mount failed [ 370.213224][ T8550] sctp: [Deprecated]: syz.5.1264 (pid 8550) Use of int in maxseg socket option. [ 370.213224][ T8550] Use struct sctp_assoc_value instead [ 370.238128][ T28] audit: type=1400 audit(1778039279.819:1544): avc: denied { ioctl } for pid=8549 comm="syz.5.1264" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22279 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 370.500447][ T8561] loop3: detected capacity change from 0 to 512 [ 370.514891][ T8561] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.638776][ T8567] loop6: detected capacity change from 0 to 2048 [ 370.736079][ T8564] loop2: detected capacity change from 0 to 512 [ 370.789071][ T8564] EXT4-fs: Ignoring removed oldalloc option [ 370.804114][ T8568] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1270'. [ 370.891951][ T8575] usb usb7: check_ctrlrecip: process 8575 (syz.0.1271) requesting ep 01 but needs 81 [ 370.922133][ T8575] usb usb7: usbfs: process 8575 (syz.0.1271) did not claim interface 0 before use [ 370.936891][ T8576] EXT4-fs: Ignoring removed bh option [ 370.950477][ T28] audit: type=1400 audit(1778039280.519:1545): avc: denied { remount } for pid=8560 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 370.990314][ T8576] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 371.005813][ T8576] EXT4-fs (loop3): re-mounted 00800000-0000-0000-0000-000000000000. [ 371.499640][ T8567] EXT4-fs warning (device loop6): read_mmp_block:111: Error -117 while reading MMP block 15 [ 371.531901][ T8564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.546959][ T8576] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.1268: Bad quota inum: 2, type: 1 [ 371.751612][ T8576] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 371.817263][ T8564] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1269: iget: bad i_size value: 38620345925642 [ 372.066090][ T8564] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 372.069888][ T8564] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1269: couldn't read orphan inode 15 (err -117) [ 372.091321][ T8564] loop2: lost filesystem error report for type 5 error -117 [ 372.093568][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 372.109269][ C0] EXT4-fs (loop2): initial error at time 1778039281: ext4_orphan_get:1397: inode 15 [ 372.118803][ C0] EXT4-fs (loop2): last error at time 1778039281: ext4_orphan_get:1402 [ 372.139541][ T8564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.205008][ T8591] usb usb7: check_ctrlrecip: process 8591 (syz.0.1275) requesting ep 01 but needs 81 [ 372.226003][ T8561] EXT4-fs: Ignoring removed bh option [ 372.231953][ T8561] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 372.241670][ T8561] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 372.257151][ T28] audit: type=1400 audit(1778039281.809:1546): avc: denied { map } for pid=8560 comm="syz.3.1268" path="pipe:[1587]" dev="pipefs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 372.285420][ T8591] usb usb7: usbfs: process 8591 (syz.0.1275) did not claim interface 0 before use [ 372.321076][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'. [ 372.351715][ T28] audit: type=1400 audit(1778039281.809:1547): avc: denied { execute } for pid=8560 comm="syz.3.1268" path="pipe:[1587]" dev="pipefs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 372.426213][ T8561] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.1268: Bad quota inum: 2, type: 1 [ 372.458156][ T8561] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 372.521030][ T28] audit: type=1400 audit(1778039281.889:1548): avc: denied { write } for pid=8563 comm="syz.2.1269" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.547405][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.568620][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.587719][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 372.605224][ T3296] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 372.609366][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 372.626257][ T8584] loop5: detected capacity change from 0 to 256 [ 372.666680][ T8600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'. [ 372.701248][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'. [ 372.731415][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.741988][ T28] audit: type=1400 audit(1778039282.329:1549): avc: denied { bind } for pid=8606 comm="syz.3.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.916509][ T8622] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1282'. [ 372.953216][ T8621] loop5: detected capacity change from 0 to 512 [ 372.988644][ T8621] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 373.002175][ T8621] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 373.139344][ T8633] loop5: detected capacity change from 0 to 512 [ 373.153631][ T8633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.167313][ T8633] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.180356][ T28] audit: type=1400 audit(1778039282.759:1550): avc: denied { write } for pid=8632 comm="syz.5.1289" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.239561][ T8634] loop3: detected capacity change from 0 to 1764 [ 373.286378][ T28] audit: type=1400 audit(1778039282.869:1551): avc: denied { map } for pid=8632 comm="syz.5.1289" path="socket:[22420]" dev="sockfs" ino=22420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 373.311563][ T28] audit: type=1400 audit(1778039282.869:1552): avc: denied { read } for pid=8632 comm="syz.5.1289" path="socket:[22420]" dev="sockfs" ino=22420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 373.547303][ T8636] ================================================================== [ 373.555447][ T8636] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 373.563474][ T8636] [ 373.565837][ T8636] write to 0xffff8881005b0eb4 of 4 bytes by task 8633 on cpu 0: [ 373.573571][ T8636] xas_set_mark+0x12b/0x140 [ 373.578126][ T8636] __folio_start_writeback+0x17b/0x370 [ 373.583715][ T8636] ext4_bio_write_folio+0x5a6/0xa20 [ 373.588953][ T8636] mpage_process_page_bufs+0x4a1/0x620 [ 373.594622][ T8636] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 373.600743][ T8636] ext4_do_writepages+0x6fe/0x2770 [ 373.605987][ T8636] ext4_writepages+0x18f/0x320 [ 373.610805][ T8636] do_writepages+0x1c6/0x310 [ 373.615428][ T8636] file_write_and_wait_range+0x178/0x2f0 [ 373.621107][ T8636] mmb_fsync_noflush+0x48/0x140 [ 373.626034][ T8636] ext4_sync_file+0x1f1/0x6b0 [ 373.631066][ T8636] vfs_fsync_range+0xc5/0xe0 [ 373.635965][ T8636] ext4_buffered_write_iter+0x447/0x4c0 [ 373.641562][ T8636] ext4_file_write_iter+0x380/0xfa0 [ 373.646809][ T8636] iter_file_splice_write+0x6c4/0xa80 [ 373.652227][ T8636] direct_splice_actor+0x156/0x2a0 [ 373.657853][ T8636] splice_direct_to_actor+0x311/0x670 [ 373.663285][ T8636] do_splice_direct+0x119/0x1a0 [ 373.668197][ T8636] do_sendfile+0x382/0x650 [ 373.672652][ T8636] __x64_sys_sendfile64+0x105/0x150 [ 373.678084][ T8636] x64_sys_call+0x2dc4/0x3020 [ 373.683061][ T8636] do_syscall_64+0x12c/0x3b0 [ 373.687694][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.693712][ T8636] [ 373.696062][ T8636] read to 0xffff8881005b0eb4 of 4 bytes by task 8636 on cpu 1: [ 373.703631][ T8636] file_write_and_wait_range+0x130/0x2f0 [ 373.709406][ T8636] mmb_fsync_noflush+0x48/0x140 [ 373.714295][ T8636] ext4_sync_file+0x1f1/0x6b0 [ 373.719017][ T8636] vfs_fsync_range+0xc5/0xe0 [ 373.723629][ T8636] ext4_buffered_write_iter+0x447/0x4c0 [ 373.729231][ T8636] ext4_file_write_iter+0x380/0xfa0 [ 373.734465][ T8636] iter_file_splice_write+0x6c4/0xa80 [ 373.740664][ T8636] direct_splice_actor+0x156/0x2a0 [ 373.745815][ T8636] splice_direct_to_actor+0x311/0x670 [ 373.751313][ T8636] do_splice_direct+0x119/0x1a0 [ 373.756457][ T8636] do_sendfile+0x382/0x650 [ 373.760901][ T8636] __x64_sys_sendfile64+0x105/0x150 [ 373.766155][ T8636] x64_sys_call+0x2dc4/0x3020 [ 373.771052][ T8636] do_syscall_64+0x12c/0x3b0 [ 373.775738][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.781645][ T8636] [ 373.784079][ T8636] value changed: 0x0a000021 -> 0x04000021 [ 373.789988][ T8636] [ 373.792322][ T8636] Reported by Kernel Concurrency Sanitizer on: [ 373.798485][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.5.1289 Tainted: G W syzkaller #0 PREEMPT(full) [ 373.809514][ T8636] Tainted: [W]=WARN [ 373.813501][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.824208][ T8636] ================================================================== [ 373.879575][ T6545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.