last executing test programs: 5m32.493098895s ago: executing program 32 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 4m41.115694995s ago: executing program 33 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_OKEY={0x8, 0x5, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 4m22.691079385s ago: executing program 34 (id=642): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair(0x25, 0x1, 0x3c1, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0xc03e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0), &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x7, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000640)=ANY=[@ANYRES16=r5], &(0x7f0000000180), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp6\x00') bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x64, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x589}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0xd0}, 0x280408c1) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/230, 0xe6}], 0x1, 0x400b, 0x1ffffffc) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m10.873465544s ago: executing program 5 (id=734): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 4m9.578614064s ago: executing program 5 (id=736): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000200)={0x4, 0x25, 0xa9e4}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000840)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',session=0x000000000000005f,map=acorn,hide,check=relaxed,nocompress,mode=0x0000000000010001,session=0x0000000000000035,nojoliet,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c001628df148dd2fbe1cd8bb18c73f985f366218fcd63ec7610e068b84af139f891c3edb11b243b86c25901357de998389d9d3ad0fbb7d51fd0687732cbc7f5e09ba859cdfe480b258f92e75f0a2bdefd8e0a8b640ba6a17023d86be7907e3c8043f11179ad57c67737a161fe7a5ac2360cd1d2a310f6aecb270a8d09a64c33eceea7bf813c51178bd4c21f258628dbf23cf5482d63117ab4885e5fea458626414cebdda66282425f0ad3594c816c"], 0x0, 0x691, &(0x7f0000000f00)="$eJzs3V1vFOf1APCzBAvLf/1R1VYIIUIm0EogEbO7Do6s3HS7HtuTrHdWM+sIrlIU7AhhkhZSqXAFN2krtR8it/0Q7SeKets7qp3dJQt+WYcQL6G/3yqZZ3fOzHNmvMzRY89LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRa6/W641adLLu1o3kYO3VIt88ZP54ff96bnJIvxG1wX8xPx9nhx+d/eV3s88M/ncxzg/fnY/5wWQ+Hv3fmZ99+IuTJ8bLH5LQsXjw8NHdW7u72/dnnciMrKfdrMyzzdZ6mmRlnqwsL9evbayVyVrWScubZT/dTNpF2urnRXK5fSVprKwsJenizXyru77a6qTjDz94r1mvLycfLfbSVlHm3WsfLZbtjazTybrrVcxg9vzou1F8nPWTftraTJKdO7vbS9OSHAQ1jhLUnBbUrDebjUaz2Vi+vnL9g3r95J4P6i+IPRGz/9IyW6/w6A0/zIlR/Y9OZNGNrbgRyb6vdqxGEXlsHjB/ZFz/f30tHbYe79/vZP0fV/mz380+F1X9vzB8d+Gg+n9ALsf3ehAP41HcjVuxG7uxHfdnntHxvtYjjW5kUUYeWWxGK9af/Qzzx0msxHIsRz0+jY1YizKSWDuZRSfSKONmlNGPtPpGtaOINFrRjzyKSOJytONKJNGIlViJpUgijcW4GXlsRTfWYzVa1Vp24k6135cOyfFZUOMoQc1DgtR/vq/5PZ+86kM4vLSn4/oPAAAAvLFq1W/fB+P/uXi7aq1lnbQ+67QAAACAV6j6y//5wWRu0Ho7asb/AAAA8KapVdfY1SJiId4ZtsZXQo1/CTA34xQBAACAH6j6+/+FwWRh0HonanvG/wAAAMBP3F+m3mN/vneq9s9/R1HM1Z70bvyqdq81iGvde2u4XDX5z9OhQbu/dq52erSSarJ8cvSunZ6vje5++ewmmKOTC77dmZZH7dAEJh2cQPwt3h3GvHt7OL09njPsZWEt66SL7bzzYSNardMn+umN/h+/uPOnqDb/r93N07XYubO7vfjZl7u3q1yeDNby5N7oBop77qO4Ty7jWV9V91uorrnYd4vnqgsxRv0uDPutT27/ieHiJ77H9n8dF4cxFxfi6amIWHh+++cHfTYWD9r6URaNKov55zodbfn/Hy2LS8OYS5cvDSf7ZNGclkVzcv+/1L44QhZL07JYOmIWg2/pflkAzMrOlCpU21v4X+JYezzV/eu4PIy5fK46sJ48t88RvT7tiF5/ybo+7usfcWUYc2UcfFCNHfT79xeq6jeDBb45sN+y06wNduFbX937fZx58PDRe3fu3fp8+/PtL5rNpeX6+/X69WbMVZsxmhySKQD/u6Y/Y2dqRO39KaPqnz87pWAxPosvYzdux9XqaoPqjIN917oQO7+J0WkIVydGrZUXRq0LE094uTplVLcw8aCXo8cuHcNPAgCOz8Updfgo9f/qlHH3wsQphVenjI4nazkA8ONIi29rC/0/14oi633aWFlptPobaVLk7Y+TIltdT5Os20+L9karu54mvSLv5+28M2h8kq2mZVJu9Xp50U/W8iLp5WV2o3ryezJ69HuZbra6/axd9jppq0yTdt7tt9r9ZDUr20lv67edrNxIi2rhspe2s7Ws3epneTcp862inS4mSZmmE4HZatrtZ2vZoNlNekW22SpuJp/kna3NNFlNy3aR9fr5cIXjvrLuWl5sVqtdnPXOBoDXxIOHj+7e2t3dvv8jNuLUrLcSAJg0UaUBAAAAAAAAAAAAAIDX1HFc//cGNv7wU951p16PNDRm0nj8u+G//GnBsz4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBe/w0AAP//UiVW8Q==") mmap(&(0x7f00005d1000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x2d640000) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x2e) unshare(0x64000600) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 4m9.141727584s ago: executing program 35 (id=737): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x10000007, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000500)='asymmetric\x00', &(0x7f0000000380)) 4m7.853740863s ago: executing program 5 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/4087, 0xff7}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) 4m7.354025935s ago: executing program 5 (id=747): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 4m7.043631991s ago: executing program 5 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xd, 0x80000000, 0x1, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a}, 0x28) 4m5.880456208s ago: executing program 5 (id=753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100020000000000140000f5ff000000000000f8feff7f000001ff01000000000000000000000000000100000000000400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000146c0000000000001400000000000000000000000000000000000000007f000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000005000000000000000100000000000000000000000000000006000000000000000010000000000000ffffffffffffffff0000000000000000000000000000008000000000020001062c00000000000000480003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 4m5.880223998s ago: executing program 36 (id=753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100020000000000140000f5ff000000000000f8feff7f000001ff01000000000000000000000000000100000000000400"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000146c0000000000001400000000000000000000000000000000000000007f000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000005000000000000000100000000000000000000000000000006000000000000000010000000000000ffffffffffffffff0000000000000000000000000000008000000000020001062c00000000000000480003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 3m7.741924013s ago: executing program 4 (id=1052): request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000300)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x80, 0xd, 0x0, 0x8, 0x0, 0x401f, 0x48193, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc, 0x1, @perf_config_ext={0x5, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0xc, 0x7ffa, 0x7fff, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000007c94ef56491ee54be34042074ed27c1c60477cef3e2", 0x1d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB="14000200697036677265746170300000000000001400020076657468315f746f", @ANYRES32=0x0, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x2004d015}, 0x24000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) 3m3.991616088s ago: executing program 4 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_create(0x200) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006e00), 0x0, 0x8040) getpid() close(r5) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.919192975s ago: executing program 4 (id=1073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0x1, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) 3m1.661998561s ago: executing program 4 (id=1074): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r5, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 3m1.539121034s ago: executing program 4 (id=1077): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r6 = gettid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000400)="dcef93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4015e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c000000000000", 0x98}) ptrace$setregset(0x4205, r7, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001000)=ANY=[@ANYBLOB="180200003c00200028bd7000ffdbdf25080000003c69383ffa86d80fca903ca6bba3f2e0822f8dbf49ab29266d3f62f5f5e6d9812827b80dfcce39e91aff9bd051355e7a2127183ebd1f45651a9881626d05636d075461518f93c0868e73f1faf26941eeb579ab73042927073daedf31f41319772f86a1a72fc7e85e54c05f6351114dd8938f117ad25ca5b448baa5994aa4cbe8a31e5bf4d753f2913e7f180f400ddefc13f303aca2ba1797b9a047435e5294e0c44f495156a341184087b708009600", @ANYRES32=r5, @ANYBLOB='\b\x00P\x00\x00\b\x00\x00\b\x00R\x00', @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800f800", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="0d000000627364e88b53b5bb7e9ef5ffff0000e94b7073000700"/42], 0x218}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x48) socket$inet6(0xa, 0x0, 0xff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000500)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000700)={[{@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@nouid32}]}, 0x1, 0x505, &(0x7f0000001f40)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) fdatasync(r9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x4f8, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x1, 0x4}, 0x0, 0x2d0, 0x2f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x19, 0x0, [{0x7fff, 0x3, 0x9, 0xf}, {0x5, 0x7, 0xc, 0xa349}, {0x9, 0x26, 0x0, 0x4}, {0x3, 0x5, 0x4, 0x5af}, {0xfffc, 0x7f, 0x5, 0x2}, {0x3, 0x2, 0x0, 0x10001}, {0x2, 0x7, 0x1, 0xb9f}, {0x5, 0x2, 0x6, 0xffffffff}, {0x3, 0x0, 0xf4, 0x8}, {0x0, 0xf1, 0xae, 0x4}, {0x84, 0x20, 0x9, 0x8}, {0x19a, 0x7, 0xf, 0x1d42}, {0x4, 0x10, 0x0, 0xb3}, {0x0, 0x7, 0x6}, {0xc88a, 0x38, 0xdf, 0x9}, {0x8, 0x5, 0x5, 0x6}, {0x80, 0x2, 0x6, 0x25e0}, {0xca7, 0x9, 0x2, 0x41}, {0x5, 0x9d, 0x7, 0x40}, {0x6, 0x1, 0x2, 0xe}, {0x5, 0x4, 0xa, 0x8117}, {0x9, 0xfa, 0x2, 0x4}, {0x6, 0x6, 0x3, 0x4}, {0x8, 0x5, 0x2}, {0x5, 0x9, 0x40, 0x10000}, {0x2, 0x9, 0x9, 0x8}, {0xfff, 0x80, 0x1b, 0xea2}, {0x4, 0x0, 0x5, 0x2}, {0xb41, 0xf8, 0x5, 0x101}, {0x3, 0xf, 0xc, 0x8}, {0x3, 0x9, 0xe6, 0x8}, {0x9, 0x8, 0xfa, 0x8}, {0x0, 0xa, 0xb2, 0x7ff}, {0x8, 0xfb, 0x40, 0xa094}, {0x3ff, 0x40}, {0x7, 0x9, 0x82, 0x196c00}, {0x6c8b, 0x3, 0x9, 0x2}, {0x8, 0x2, 0xa3, 0xb}, {0xe, 0x9, 0x1, 0x9}, {0x6, 0x5, 0x8, 0x100}, {0x81, 0x6a, 0x10, 0x4}, {0x4, 0x3, 0x9, 0x3}, {0x9, 0x6, 0x0, 0x200006}, {0xfff9, 0x1, 0xff, 0x9}, {0xff, 0xf, 0x89, 0xfffffff7}, {0x6, 0x9, 0x6, 0x2}, {0x7fff, 0x7, 0x5, 0x6}, {0x7, 0x5, 0xc, 0x7}, {0x0, 0x9, 0x8, 0x4}, {0x1, 0x9, 0x10, 0x2bec}, {0x9d, 0x0, 0x80, 0x3}, {0x3, 0x81, 0x9e, 0x9}, {0x5, 0x5, 0x5, 0x10}, {0x3ff, 0x4, 0x81}, {0x3f, 0x1, 0x1, 0x9}, {0x5dbc, 0x1, 0xd1, 0x5}, {0x5, 0x5, 0x9, 0x7}, {0x1, 0x3, 0xa1, 0x6a}, {0xe, 0x5, 0x3, 0x4}, {0xe, 0xf, 0x0, 0x3}, {0x0, 0x3b, 0x9, 0x40}, {0x1, 0x5, 0xd3}, {0x8, 0x5, 0x2, 0xe}, {0x6, 0x0, 0x6}], {0x1}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@loopback, @private=0xa010101, 0xffffffff, 0x0, 'veth1\x00', 'ipvlan0\x00', {}, {0xff}, 0x1, 0x0, 0x7b}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0xb, 0x5, 0x6, 0x6], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) 3m0.83392224s ago: executing program 4 (id=1081): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) readahead(r0, 0x4, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a5", 0x7}], 0x1) set_mempolicy_home_node(&(0x7f0000f4c000/0x3000)=nil, 0x3000, 0x7ff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @noop, @timestamp={0x44, 0x8, 0x80, 0x0, 0x0, [0x1]}, @cipso={0x86, 0x24, 0x3, [{0x5, 0x7, "02f4949a5c"}, {0x0, 0xe, "9d2025d5a6fa0602222a68ca"}, {0x0, 0x9, "222809c8ca7cab"}]}, @generic={0x89, 0xa, "34e1f9be2e508f90"}, @rr={0x7, 0x3, 0x61}, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x7, 0x7, "82ea4959be"}, @timestamp={0x44, 0x10, 0xd4, 0x0, 0x1, [0x1, 0x3, 0x7]}, @noop, @noop]}}}], 0xa0}, 0x804) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x670}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00c890}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) 3m0.83276846s ago: executing program 37 (id=1081): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) readahead(r0, 0x4, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xd6, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a5", 0x7}], 0x1) set_mempolicy_home_node(&(0x7f0000f4c000/0x3000)=nil, 0x3000, 0x7ff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @noop, @timestamp={0x44, 0x8, 0x80, 0x0, 0x0, [0x1]}, @cipso={0x86, 0x24, 0x3, [{0x5, 0x7, "02f4949a5c"}, {0x0, 0xe, "9d2025d5a6fa0602222a68ca"}, {0x0, 0x9, "222809c8ca7cab"}]}, @generic={0x89, 0xa, "34e1f9be2e508f90"}, @rr={0x7, 0x3, 0x61}, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x7, 0x7, "82ea4959be"}, @timestamp={0x44, 0x10, 0xd4, 0x0, 0x1, [0x1, 0x3, 0x7]}, @noop, @noop]}}}], 0xa0}, 0x804) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x670}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00c890}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) 2m32.368585009s ago: executing program 8 (id=1212): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r5, &(0x7f00000000c0)=""/55, 0x37) symlinkat(&(0x7f0000000180)='./file0\x00', r5, &(0x7f0000000340)='./file0\x00') 2m25.850908697s ago: executing program 8 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40d0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x4000) r4 = eventfd2(0xffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$eventfd(r4, &(0x7f0000000080)=0xffffffff00000000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) io_setup(0x8, &(0x7f0000000080)) 2m24.945189038s ago: executing program 8 (id=1243): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2}, 0x700) 2m24.83860377s ago: executing program 8 (id=1246): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 2m24.552454617s ago: executing program 8 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r2, 0xad, 0x1) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r3, 0x0, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) 2m24.551746227s ago: executing program 9 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x2a, 0x3a, 0x1, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4}]}}}}}}, 0x0) 2m24.518167867s ago: executing program 9 (id=1261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x8, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m24.190124185s ago: executing program 8 (id=1251): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m24.160891676s ago: executing program 38 (id=1251): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m23.778001054s ago: executing program 9 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x40000006}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc", 0x1) splice(r4, 0x0, r2, 0x0, 0x1, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "b73d36"}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040090) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x10802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/354], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f00000008c0)=""/129, 0x81}], 0x4}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000a40)=0x4) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}}, 0x20}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0xc4}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000000010003704000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="83040500000000006000128008000100677265005400028006000e000100000006000f000e0000000500160001000000060011004e230000060003008000000006000f000000000005001600010000000800040001"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x502d}) read$ptp(r1, &(0x7f00000011c0)=""/223, 0xdf) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@nobarrier}, {}]}, 0x1, 0x5b5, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2m22.420022055s ago: executing program 9 (id=1260): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 2m21.515220656s ago: executing program 9 (id=1265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x8, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m20.926054529s ago: executing program 9 (id=1266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000007bc0)=""/4087, 0xff7}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) 2m20.90996569s ago: executing program 39 (id=1266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000007bc0)=""/4087, 0xff7}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) 1m0.981501821s ago: executing program 0 (id=1830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x100000000000f68, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x32a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) close(0x3) preadv(0xffffffffffffffff, &(0x7f0000003d40)=[{0x0}], 0x1, 0x33, 0xf7) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa090000000000000000000000000000000000000000000000000000000000000000ae00"/483], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup\x00', 0x40, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r6}, 0x10) 1m0.378436315s ago: executing program 0 (id=1833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="000008000000030000000200000049"], 0xff04) 1m0.260609257s ago: executing program 0 (id=1835): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) 1m0.183922259s ago: executing program 0 (id=1837): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) mmap(&(0x7f0000101000/0x3000)=nil, 0x3000, 0x65521a9af56640f0, 0x12, r0, 0xeb9d000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, &(0x7f0000003700)={0x77359400}) r4 = socket$netlink(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffff7, 0x2ffffffff}, 0xc) 59.72084686s ago: executing program 0 (id=1843): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x6f2502) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xffffffffffff182e, 0x0, 0x0, 0x0, 0x7, 0x10, "fee8a2030000000000000096072000001ea89d68b7fb0000e60080b8785d95ffe800", "2809e8db0000000048224ad54afac11d875397bdb22d003c5240f45f819c01177d3d458ddc992861ace1ffffffffffffff04000000a6001000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x200]}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r6, 0x601, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) fstat(r0, &(0x7f0000000400)) fstat(r4, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001500)=0xe704, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x10, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c909cda49a11ff76e906b13a0c26ef2f2b18d4dcaffbc3200f99d6f328ccecaf9ec49aa55fb0063c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 59.570965313s ago: executing program 0 (id=1844): r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) 44.243734812s ago: executing program 40 (id=1844): r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) 7.107320158s ago: executing program 2 (id=2143): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000540)={@random="e90c610f2ca2", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x73}, @void, {@canfd={0xd, {{0x2, 0x0, 0x1, 0x1}, 0x19, 0x2, 0x0, 0x0, "335fa8aac58efa9224ad3d3d5b7584ea673969f73e0b3d8f274a5877de346e9e1c8a96d9baa44d5e04f14fbfe9640797f6712d00e1a53297b7520d6ae919226c"}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xa2, 0x0, &(0x7f0000000800)="7c4c93b7a8cc6d03e6e97600f93c4a14463d690d8cd1e69ec7a101b9670bed031f1aa95a940637e819b50cf5bd2b097cb56f4bdede2171ad0199c7795a99c7da11c4709dff162d382aebd4778b23150c36a193205a77f8b5363ab34973e038f3a8548767df87c4a778a9b3f580f029f94a0a44d011592bfdaea425aa6966eba27a02d8bfc1d939e24304b62400ee14a7498584d3b4ad55a264003e69be017e544b5b3b7b704d4dee904b78f6d00daf24", 0x0, 0x149c, 0x503, 0x0, 0x49, 0x0, 0x0, 0x7, 0xffff80fe, 0xffffff7f}, 0x50) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="e097566f5bec6446dd18bbb60123", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="40400c060a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r7, r8, 0x7, 0x0, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000200)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000240)=')%\x00', &(0x7f0000000280)='/\x00'], 0x0, 0x1}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r7, 0x4, r7}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000001c0)={0x8, 'wlan0\x00', {'veth0_virt_wifi\x00'}, 0x4}) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) syz_emit_ethernet(0x120b, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r14 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r14, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$kcm(r14, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xa41a1d7152b8b77c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cad70000000000001000000000020370a2d01000a000000140004000000ffff060005004e240000"], 0x3c}, 0x1, 0x0, 0x0, 0xa815}, 0x0) 6.893308643s ago: executing program 2 (id=2148): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240), 0x3, 0x572, &(0x7f00000006c0)="$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") socket$kcm(0x10, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r6, 0x96}, &(0x7f0000000180)=0xc) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 6.675600128s ago: executing program 2 (id=2151): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r3, &(0x7f0000000300)=""/61, 0x21) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x14) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzszzEKwlAQBND5SUzyKyuPYOV5rO09RRov4428h31EEhDtRYT3qt1hGdjwU6XP+dSWJDXJlHlY8vbzcNq8rTWpzb68gr6uQ5fcl4pnMiaZa7ZrScZcdk3tkiE53I7Xrz0GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/kEQAA//++CQiT") 5.73183006s ago: executing program 2 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x34) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone(0x6063100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e24, 0x0, @mcast1, 0x2}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000003c0)={0x3, {{0xa, 0x4e22, 0x4, @mcast1, 0x7ff}}, {{0xa, 0x4e21, 0x6, @remote, 0x9}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) open(0x0, 0x8000, 0x112) 5.26619881s ago: executing program 7 (id=2161): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x100000000000000}, 0x0) 5.211788012s ago: executing program 7 (id=2162): r0 = socket(0x400000000010, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xeb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 5.082512384s ago: executing program 7 (id=2165): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.926104328s ago: executing program 1 (id=2166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="080000000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f0000000080)=[{0xe, 0xfd, 0x0, 0xfd, @time={0x5, 0x1}, {0x3}, {0xe}, @connect}], 0x1c) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8058}, 0x20004804) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x0, @dev}}) 4.904493728s ago: executing program 7 (id=2167): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0xffffffff, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x303, 0xfffd, 0x0, 0xfffffff9, 0x0}) 4.553943997s ago: executing program 7 (id=2168): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 4.473085638s ago: executing program 1 (id=2169): syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0xf}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11e9000200"/20, @ANYRES32, @ANYBLOB="00000005ceea9af888c0894e415f440000000000000000000000000896f600edaf08d934075e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000035906faa00"/28], 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='q\x00\x00\x00\x00'], 0x5) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) writev(0xffffffffffffffff, &(0x7f0000002600), 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000d, 0x8000, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f00000002c0)=""/108, 0x6c) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) accept4$unix(r3, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) 4.438966619s ago: executing program 7 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r2, 0xad, 0x1) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r3, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x80}, 0x2, &(0x7f0000000c80)=[{&(0x7f00000000c0)=ANY=[], 0x38}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x44011}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="01803000000000fb019078ac1e0001ac1414aa0301907803240010450040000001ffff0001000700000000ffffffff1cac4f5a14a01ae1b7638da93a611493273db2b12ef21fd563251618f7f0b55550c019704c8b8a9205cc81c49a8842a4492b0e41af53f8019e514cee4cc1dbf865943c578f607de81ac349e0b788ef4869ba1041674c37d8d17c2851d9279d50f2"], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 4.355129811s ago: executing program 1 (id=2171): io_uring_enter(0xffffffffffffffff, 0x55, 0x84a23, 0xf, 0x0, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000060d000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) io_uring_setup(0x56c5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 3.275211986s ago: executing program 1 (id=2174): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xff8c) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) lseek(r4, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x401}) 2.66203403s ago: executing program 1 (id=2177): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.453707204s ago: executing program 1 (id=2178): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x28, 0x5, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'batadv0\x00', 0x1ff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x7bf, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x930, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0xb) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r8, 0x0, 0xdf, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) fcntl$setpipe(r9, 0x407, 0x100004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000a00)='V\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) 2.150889201s ago: executing program 3 (id=2180): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) writev(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = getpid() sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000400)=ANY=[@ANYBLOB="0271bd41", @ANYRES16, @ANYBLOB="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"], 0xa08}, 0x1, 0x0, 0x0, 0x45}, 0x4000014) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0xfffffffffffffff3], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 1.929808916s ago: executing program 3 (id=2181): semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8044, &(0x7f0000000080)={0xa, 0xe20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="a3109eeb7e79f6d732ea2cef6b3efe44de00c7620d8d2260a2a493e7c3596752304b2d856d9398c094c386ec4b1ad1c98044b5210eab3ee225f95e382d5949ff5e8cd06891597a2c4d1fb9552f4200e73eb153", 0x53, 0xc001, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@jqfmt_vfsv1}, {@grpid}, {@noauto_da_alloc}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01010100ff"], 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './bus\x00'}) 1.710757601s ago: executing program 3 (id=2182): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 1.513884456s ago: executing program 3 (id=2183): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) umount2(&(0x7f0000000080)='./file0\x00', 0xd) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xe}]}, 0x10) 1.465143917s ago: executing program 6 (id=2184): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x20}, {&(0x7f00000001c0)="9e91d91a92dc7c8f33658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.390122259s ago: executing program 3 (id=2185): io_uring_enter(0xffffffffffffffff, 0x55, 0x84a23, 0xf, 0x0, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000060d000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) io_uring_setup(0x56c5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.31541459s ago: executing program 6 (id=2186): r0 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xeb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 1.130187754s ago: executing program 6 (id=2187): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a18", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190126bd7000f5dbdf250a0819fd", @ANYRES32=r4, @ANYBLOB="1400010000000000000000000000000000ff000114000600000000409bc69d4d"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x213, &(0x7f0000001500)="$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") mkdirat(r6, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x1000000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 1.029982337s ago: executing program 6 (id=2188): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 821.960842ms ago: executing program 6 (id=2189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x40000006}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc", 0x1) splice(r4, 0x0, r2, 0x0, 0x1, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "b73d36"}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040090) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x10802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf5400000400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa8432400"/354], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f00000008c0)=""/129, 0x81}], 0x4}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000a40)=0x4) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}}, 0x20}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0xc4}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000000010003704000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="83040500000000006000128008000100677265005400028006000e000100000006000f000e0000000500160001000000060011004e230000060003008000000006000f000000000005001600010000000800040001"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x502d}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$ptp(r1, &(0x7f00000011c0)=""/223, 0xdf) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@nobarrier}, {}]}, 0x1, 0x5b5, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 392.487671ms ago: executing program 3 (id=2190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) recvmmsg(r5, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) 342.819303ms ago: executing program 2 (id=2191): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) writev(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000400)=ANY=[@ANYBLOB="0271bd41", @ANYRES16, @ANYBLOB="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"], 0xa08}, 0x1, 0x0, 0x0, 0x45}, 0x4000014) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0xfffffffffffffff3], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 209.955876ms ago: executing program 2 (id=2192): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x1010c1, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000001340)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x62, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c404, 0x689, 0x7, 0x6, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@data_journal}]}, 0x3, 0x447, &(0x7f0000000380)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40500000000000079db56843800e80f1e50000000000000950000000000000013323cd0e22f4cfa22ee82dc938f00000000000000003d59a9302d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0) sched_setscheduler(r2, 0x0, &(0x7f0000000280)=0x6) futex(&(0x7f0000000080)=0x1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180), 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8a1", 0x1e}, {&(0x7f0000000240)="0400000002e8010000000000007b5dc42dc424a935960b22545e25261e4c19a18320fe2c5d12573b5b031b2e8dcb62e8", 0x30}], 0x2) kernel console output (not intermixed with test programs): 01]" dev="sockfs" ino=28901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 309.165256][T10747] loop3: detected capacity change from 0 to 164 [ 309.189067][T10742] EXT4-fs (loop6): orphan cleanup on readonly fs [ 309.204895][T10747] iso9660: Unknown parameter '@' [ 309.219751][T10749] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1600'. [ 309.233255][T10742] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 309.276981][T10742] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 309.303145][T10742] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1598: bg 0: block 40: padding at end of block bitmap is not set [ 309.332879][T10742] loop6: lost filesystem error report for type 5 error -117 [ 309.333003][T10742] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 309.341032][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 309.341056][ C0] EXT4-fs (loop6): initial error at time 1784696599: ext4_validate_block_bitmap:441 [ 309.341077][ C0] EXT4-fs (loop6): last error at time 1784696599: ext4_validate_block_bitmap:441 [ 309.445246][T10752] atomic_op ffff888104a64528 conn xmit_atomic 0000000000000000 [ 309.583337][T10742] loop6: lost filesystem error report for type 5 error -117 [ 309.583551][T10742] EXT4-fs (loop6): 1 truncate cleaned up [ 309.614891][T10742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.662730][ T3385] IPVS: starting estimator thread 0... [ 309.738059][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1598'. [ 309.756470][T10769] IPVS: using max 1728 ests per chain, 86400 per kthread [ 309.782971][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1598'. [ 309.822692][T10774] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.1598: bad symlink. [ 309.920512][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.058029][T10778] loop3: detected capacity change from 0 to 1024 [ 310.070067][T10778] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1609: Failed to acquire dquot type 0 [ 310.081534][T10778] loop3: lost filesystem error report for type 5 error -117 [ 310.081902][T10778] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 310.089291][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 310.089314][ C0] EXT4-fs (loop3): initial error at time 1784696600: ext4_acquire_dquot:7041 [ 310.089340][ C0] EXT4-fs (loop3): last error at time 1784696600: ext4_acquire_dquot:7041 [ 310.121848][T10778] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 310.897014][T10778] EXT4-fs (loop3): 1 truncate cleaned up [ 310.991676][T10778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.083719][T10778] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1609: Failed to acquire dquot type 0 [ 311.228402][T10799] SELinux: policydb string SE does not match my string SE Linux [ 311.236763][T10799] SELinux: failed to load policy [ 311.322569][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.474729][T10792] infiniband syz1: set down [ 311.496711][T10792] infiniband syz1: added bond0 [ 311.585591][T10792] RDS/IB: syz1: added [ 311.604704][T10792] smc: adding ib device syz1 with port count 1 [ 311.647038][T10792] smc: ib device syz1 port 1 has no pnetid [ 311.793703][T10817] loop3: detected capacity change from 0 to 512 [ 311.862418][T10817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.922101][T10817] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.971923][T10817] EXT4-fs error (device loop3): ext4_nfs_get_inode:1578: inode #11: comm syz.3.1621: iget: checksum invalid [ 312.098950][T10817] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 312.219607][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.258954][T10825] __nla_validate_parse: 5 callbacks suppressed [ 312.258974][T10825] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1623'. [ 312.362084][T10827] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1624'. [ 312.615352][T10844] loop3: detected capacity change from 0 to 1764 [ 312.628866][T10849] FAULT_INJECTION: forcing a failure. [ 312.628866][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 312.654441][T10849] CPU: 0 UID: 0 PID: 10849 Comm: syz.2.1634 Not tainted syzkaller #0 PREEMPT(lazy) [ 312.654475][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 312.654492][T10849] Call Trace: [ 312.654510][T10849] [ 312.654517][T10849] __dump_stack+0x1d/0x30 [ 312.654539][T10849] dump_stack_lvl+0x95/0xd0 [ 312.654630][T10849] dump_stack+0x15/0x1b [ 312.654649][T10849] should_fail_ex+0x25e/0x270 [ 312.654682][T10849] should_failslab+0x8c/0xb0 [ 312.654710][T10849] __kvmalloc_node_noprof+0x15b/0x590 [ 312.654756][T10849] ? p9_fcall_init+0xd9/0x1e0 [ 312.654844][T10849] ? p9_fcall_init+0xd9/0x1e0 [ 312.654863][T10849] p9_fcall_init+0xd9/0x1e0 [ 312.654881][T10849] p9_client_prepare_req+0x220/0x620 [ 312.654912][T10849] p9_client_rpc+0xe3/0x900 [ 312.655033][T10849] ? xsk_poll+0x288/0x2b0 [ 312.655059][T10849] ? sock_poll+0x21c/0x240 [ 312.655086][T10849] ? p9_conn_create+0x2eb/0x320 [ 312.655108][T10849] p9_client_create+0x34d/0x760 [ 312.655295][T10849] ? should_failslab+0x8c/0xb0 [ 312.655325][T10849] v9fs_session_init+0x38/0x510 [ 312.655350][T10849] v9fs_get_tree+0x5c/0x5e0 [ 312.655412][T10849] vfs_get_tree+0x57/0x1d0 [ 312.655450][T10849] do_new_mount+0x288/0x8d0 [ 312.655476][T10849] ? security_capable+0x7b/0x90 [ 312.655503][T10849] path_mount+0x4ad/0xb90 [ 312.655527][T10849] __se_sys_mount+0x28c/0x2e0 [ 312.655668][T10849] ? fput+0x8f/0xc0 [ 312.655710][T10849] __x64_sys_mount+0x67/0x80 [ 312.655731][T10849] x64_sys_call+0x2d61/0x3020 [ 312.655845][T10849] do_syscall_64+0x136/0x3c0 [ 312.655866][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.655885][T10849] RIP: 0033:0x7f5261fade99 [ 312.655898][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.655979][T10849] RSP: 002b:00007f5260a07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.656002][T10849] RAX: ffffffffffffffda RBX: 00007f5262235fa0 RCX: 00007f5261fade99 [ 312.656018][T10849] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000 [ 312.656034][T10849] RBP: 00007f5260a07090 R08: 0000200000002780 R09: 0000000000000000 [ 312.656049][T10849] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000002 [ 312.656061][T10849] R13: 00007f5262236038 R14: 00007f5262235fa0 R15: 00007ffdf1d597a8 [ 312.656119][T10849] [ 312.918174][T10851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10851 comm=syz.6.1635 [ 313.070480][T10855] tmpfs: Bad value for 'mpol' [ 313.952329][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 313.952346][ T28] audit: type=1400 audit(1784696603.932:1754): avc: denied { create } for pid=10860 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 314.169897][T10865] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1639'. [ 314.880689][ T28] audit: type=1400 audit(1784696604.112:1755): avc: denied { sys_admin } for pid=10860 comm="syz.0.1638" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 314.923970][T10871] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 315.195574][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1645'. [ 315.338854][T10889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10889 comm=syz.2.1647 [ 316.146161][T10905] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1653'. [ 317.351814][T10929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10929 comm=syz.2.1658 [ 318.204617][T10938] loop6: detected capacity change from 0 to 512 [ 318.284480][T10938] msdos: Unknown parameter 'cTeck' [ 318.687423][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1664'. [ 318.786148][T10962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10962 comm=syz.6.1669 [ 318.867855][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 318.941374][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1670'. [ 318.955490][T10965] loop6: detected capacity change from 0 to 1024 [ 318.974093][T10965] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 318.985170][T10965] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 319.003960][T10965] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1670: Failed to acquire dquot type 0 [ 319.017738][T10965] loop6: lost filesystem error report for type 5 error -117 [ 319.017970][T10965] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 319.025491][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 319.025507][ C0] EXT4-fs (loop6): initial error at time 1784696609: ext4_acquire_dquot:7041 [ 319.025527][ C0] EXT4-fs (loop6): last error at time 1784696609: ext4_acquire_dquot:7041 [ 319.058851][T10965] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 319.083966][T10965] EXT4-fs (loop6): 1 truncate cleaned up [ 319.094574][T10965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.109718][T10965] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 319.118841][ T28] audit: type=1400 audit(1784696609.092:1756): avc: denied { write } for pid=10964 comm="syz.6.1670" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.140620][T10965] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 319.150080][T10965] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1670: Failed to acquire dquot type 0 [ 319.521991][ T28] audit: type=1400 audit(1784696609.502:1757): avc: denied { write } for pid=10987 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.566493][T10991] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 319.583183][T10990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1676'. [ 319.642743][T10991] loop1: detected capacity change from 0 to 128 [ 319.694850][T10991] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.712295][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.722555][T10991] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.875937][ T28] audit: type=1400 audit(1784696609.852:1758): avc: denied { write } for pid=10988 comm="syz.1.1676" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.916987][T11003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11003 comm=syz.6.1680 [ 319.942387][T11005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1681'. [ 320.084169][ T28] audit: type=1400 audit(1784696610.062:1759): avc: denied { write } for pid=10988 comm="syz.1.1676" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.113726][ T28] audit: type=1400 audit(1784696610.092:1760): avc: denied { write } for pid=11006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.141472][ T28] audit: type=1400 audit(1784696610.122:1761): avc: denied { write } for pid=11028 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.400471][ T8138] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.708131][T11035] loop1: detected capacity change from 0 to 512 [ 320.740295][T11035] msdos: Unknown parameter 'cTeck' [ 320.769314][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1689'. [ 320.800019][T11044] loop6: detected capacity change from 0 to 1024 [ 320.846419][T11044] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1689: Failed to acquire dquot type 0 [ 320.917098][T11044] loop6: lost filesystem error report for type 5 error -117 [ 320.917445][T11044] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 320.939294][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 320.939330][ C0] EXT4-fs (loop6): initial error at time 1784696610: ext4_acquire_dquot:7041 [ 320.939353][ C0] EXT4-fs (loop6): last error at time 1784696610: ext4_acquire_dquot:7041 [ 320.981310][T11057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11057 comm=syz.0.1692 [ 321.038806][T11044] EXT4-fs (loop6): 1 truncate cleaned up [ 321.061227][T11044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.118819][T11044] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1689: Failed to acquire dquot type 0 [ 321.134701][T11063] loop3: detected capacity change from 0 to 256 [ 321.504619][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.772229][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 322.179221][T11129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11129 comm=syz.1.1703 [ 322.501250][T11138] loop3: detected capacity change from 0 to 512 [ 322.564955][T11138] msdos: Unknown parameter 'cTeck' [ 322.992456][T11197] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1717'. [ 323.120984][T11206] tipc: Enabling of bearer rejected, failed to enable media [ 323.398895][T11203] loop3: detected capacity change from 0 to 1024 [ 323.433628][T11203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.555716][T11203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.635452][T11228] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1728'. [ 324.013909][T11245] syzkaller0: entered promiscuous mode [ 324.019589][T11245] syzkaller0: entered allmulticast mode [ 324.041704][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.175698][T11253] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1734'. [ 324.423322][T11266] lo speed is unknown, defaulting to 1000 [ 324.430580][T11266] lo speed is unknown, defaulting to 1000 [ 324.438996][T11266] lo speed is unknown, defaulting to 1000 [ 324.533456][T11266] infiniband sz1: set active [ 324.551711][T11266] infiniband sz1: added lo [ 324.608072][T11266] RDS/IB: sz1: added [ 324.612161][T11266] smc: adding ib device sz1 with port count 1 [ 324.621747][T11266] smc: ib device sz1 port 1 has no pnetid [ 324.629560][ T4107] lo speed is unknown, defaulting to 1000 [ 324.636406][T11266] lo speed is unknown, defaulting to 1000 [ 324.643667][ T4107] lo speed is unknown, defaulting to 1000 [ 324.702603][T11266] lo speed is unknown, defaulting to 1000 [ 324.784820][T11266] lo speed is unknown, defaulting to 1000 [ 324.849496][T11266] lo speed is unknown, defaulting to 1000 [ 324.890948][T11266] lo speed is unknown, defaulting to 1000 [ 325.020407][T11275] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1744'. [ 325.021629][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 325.021686][ T28] audit: type=1400 audit(1784696615.002:1799): avc: denied { name_bind } for pid=11274 comm="syz.2.1744" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 325.423343][ T28] audit: type=1400 audit(1784696615.392:1800): avc: denied { write } for pid=11281 comm="syz.3.1746" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 325.473600][ T28] audit: type=1400 audit(1784696615.392:1801): avc: denied { setattr } for pid=11281 comm="syz.3.1746" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 325.936013][T11290] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1748'. [ 326.158851][T11301] sz1: rxe_newlink: already configured on lo [ 326.317744][T11305] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1754'. [ 326.687283][T11312] netlink: 'syz.6.1757': attribute type 12 has an invalid length. [ 326.856490][T11325] FAULT_INJECTION: forcing a failure. [ 326.856490][T11325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.864999][T11319] loop1: detected capacity change from 0 to 1024 [ 326.881723][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.6.1760 Not tainted syzkaller #0 PREEMPT(lazy) [ 326.881760][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 326.881777][T11325] Call Trace: [ 326.881786][T11325] [ 326.881832][T11325] __dump_stack+0x1d/0x30 [ 326.881902][T11325] dump_stack_lvl+0x95/0xd0 [ 326.881925][T11325] dump_stack+0x15/0x1b [ 326.881950][T11325] should_fail_ex+0x25e/0x270 [ 326.881983][T11325] should_fail+0xb/0x20 [ 326.882016][T11325] should_fail_usercopy+0x1a/0x20 [ 326.882126][T11325] _copy_from_iter+0xcc/0xe70 [ 326.882166][T11325] ? should_failslab+0x8c/0xb0 [ 326.882189][T11325] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 326.882214][T11325] ? security_inode_alloc+0x37/0x100 [ 326.882291][T11325] ? __rcu_read_unlock+0x4e/0x70 [ 326.882322][T11325] ping_common_sendmsg+0x9f/0x230 [ 326.882348][T11325] ping_v6_sendmsg+0xd9/0xc20 [ 326.882409][T11325] ? avc_has_perm+0x101/0x190 [ 326.882451][T11325] ? _raw_spin_unlock_bh+0x18/0x20 [ 326.882478][T11325] ? release_sock+0x10c/0x180 [ 326.882557][T11325] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 326.882627][T11325] inet_sendmsg+0xc5/0xd0 [ 326.882654][T11325] ? __pfx_inet_sendmsg+0x10/0x10 [ 326.882768][T11325] ____sys_sendmsg+0x4e8/0x580 [ 326.882808][T11325] ___sys_sendmsg+0x195/0x1e0 [ 326.882858][T11325] __x64_sys_sendmsg+0xd4/0x160 [ 326.882950][T11325] x64_sys_call+0x194c/0x3020 [ 326.882997][T11325] do_syscall_64+0x136/0x3c0 [ 326.883027][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.883129][T11325] RIP: 0033:0x7fd4fd70de99 [ 326.883146][T11325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.883210][T11325] RSP: 002b:00007fd4fc167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.883233][T11325] RAX: ffffffffffffffda RBX: 00007fd4fd995fa0 RCX: 00007fd4fd70de99 [ 326.883249][T11325] RDX: 0000000000000800 RSI: 0000200000000880 RDI: 0000000000000003 [ 326.883266][T11325] RBP: 00007fd4fc167090 R08: 0000000000000000 R09: 0000000000000000 [ 326.883281][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.883313][T11325] R13: 00007fd4fd996038 R14: 00007fd4fd995fa0 R15: 00007ffffe5dd658 [ 326.883407][T11325] [ 327.126069][T11319] EXT4-fs: Ignoring removed bh option [ 327.159187][T11319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.175410][T11319] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.200492][ T28] audit: type=1400 audit(1784696617.172:1802): avc: denied { mount } for pid=11333 comm="syz.0.1763" name="/" dev="autofs" ino=30965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 327.246445][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.271911][T11341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1765'. [ 327.289423][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1765'. [ 327.307534][ T28] audit: type=1400 audit(1784696617.282:1803): avc: denied { getopt } for pid=11340 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.413446][ T28] audit: type=1400 audit(1784696617.392:1804): avc: denied { write } for pid=11344 comm="syz.1.1764" path="socket:[30989]" dev="sockfs" ino=30989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.500421][T11351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1769'. [ 329.179923][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1773'. [ 329.287031][T11378] loop6: detected capacity change from 0 to 1024 [ 329.338600][T11378] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 329.405739][T11378] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 329.458283][T11378] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1773: Failed to acquire dquot type 0 [ 329.508845][T11378] loop6: lost filesystem error report for type 5 error -117 [ 329.509198][T11378] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 329.516578][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 329.516600][ C1] EXT4-fs (loop6): initial error at time 1784696619: ext4_acquire_dquot:7041 [ 329.516622][ C1] EXT4-fs (loop6): last error at time 1784696619: ext4_acquire_dquot:7041 [ 329.548185][T11378] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 329.606336][T11378] EXT4-fs (loop6): 1 truncate cleaned up [ 329.612465][T11378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.642737][T11378] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 329.653907][ T28] audit: type=1400 audit(1784696619.622:1805): avc: denied { write } for pid=11365 comm="syz.6.1773" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.719728][T11378] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1773: Failed to acquire dquot type 0 [ 329.802425][T11391] IPVS: Error connecting to the multicast addr [ 329.841800][T11391] 9p: Bad value for 'rfdno' [ 330.077839][T11399] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.088071][T11399] block device autoloading is deprecated and will be removed. [ 330.414551][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 330.414567][ T28] audit: type=1400 audit(1784696619.912:1806): avc: denied { compute_member } for pid=11396 comm="syz.2.1780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 330.444223][T11406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1784'. [ 330.547090][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.583413][T11413] x_tables: unsorted entry at hook 1 [ 330.594969][ T28] audit: type=1400 audit(1784696620.562:1807): avc: denied { getopt } for pid=11407 comm="syz.3.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 330.715384][T11419] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1787'. [ 330.914403][T11432] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11432 comm=syz.1.1792 [ 330.943672][T11434] bridge_slave_1: left allmulticast mode [ 330.962159][T11434] bridge_slave_1: left promiscuous mode [ 330.982339][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.000884][T11434] bridge_slave_0: left allmulticast mode [ 331.014789][ T28] audit: type=1400 audit(1784696620.992:1808): avc: denied { mount } for pid=11433 comm="syz.0.1793" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 331.038754][T11434] bridge_slave_0: left promiscuous mode [ 331.044831][T11439] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1794'. [ 331.070538][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.109234][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1790'. [ 331.174951][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1797'. [ 332.002652][ T28] audit: type=1400 audit(1784696621.972:1809): avc: denied { name_bind } for pid=11468 comm="syz.0.1804" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 332.442498][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 332.476158][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1810'. [ 332.491306][T11485] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1811'. [ 332.528751][ T28] audit: type=1400 audit(1784696622.502:1810): avc: denied { connect } for pid=11480 comm="syz.1.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 332.598687][T11483] loop3: detected capacity change from 0 to 256 [ 332.610948][ T28] audit: type=1326 audit(1784696622.542:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.1.1809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 332.690306][ T28] audit: type=1326 audit(1784696622.542:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.1.1809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 332.951332][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'. [ 332.994653][ T28] audit: type=1400 audit(1784696622.972:1813): avc: denied { kexec_image_load } for pid=11508 comm="syz.3.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 333.026374][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1815'. [ 333.052599][T11511] rdma_rxe: rxe_newlink: failed to add syz_tun [ 333.127423][T11511] sit0: entered allmulticast mode [ 333.142128][ T28] audit: type=1400 audit(1784696623.122:1814): avc: denied { setopt } for pid=11517 comm="syz.0.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 333.200440][ T28] audit: type=1400 audit(1784696623.122:1815): avc: denied { read } for pid=11517 comm="syz.0.1821" path="socket:[31461]" dev="sockfs" ino=31461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 333.248831][T11520] loop1: detected capacity change from 0 to 1024 [ 333.272220][T11520] EXT4-fs: Ignoring removed oldalloc option [ 333.317480][T11520] EXT4-fs: Ignoring removed oldalloc option [ 333.333742][T11520] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 333.466699][T11520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.125634][T11516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 334.132372][T11516] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.140344][T11516] vhci_hcd vhci_hcd.0: Device attached [ 334.154579][T11520] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 334.161289][T11520] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 334.169123][T11520] vhci_hcd vhci_hcd.0: Device attached [ 334.375214][ T6990] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 334.456037][ T6990] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 334.479760][T11543] vhci_hcd: connection reset by peer [ 334.485535][ T1717] vhci_hcd vhci_hcd.1: stop threads [ 334.490974][ T1717] vhci_hcd vhci_hcd.1: release socket [ 334.511992][ T1717] vhci_hcd vhci_hcd.1: disconnect device [ 334.545497][T11545] vhci_hcd: connection closed [ 334.575454][ T68] vhci_hcd vhci_hcd.1: stop threads [ 334.585861][ T68] vhci_hcd vhci_hcd.1: release socket [ 334.594346][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 335.054090][T11578] loop6: detected capacity change from 0 to 256 [ 335.448174][T11587] sock: sock_timestamping_bind_phc: sock not bind to device [ 335.736918][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.779565][T11592] loop3: detected capacity change from 0 to 512 [ 336.005790][T11592] EXT4-fs: Ignoring removed nobh option [ 336.029800][T11592] EXT4-fs: Ignoring removed oldalloc option [ 336.128453][T11592] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 336.175890][T11592] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.1846: inode has both inline data and extents flags [ 336.225653][T11592] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 336.230604][T11592] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1846: couldn't read orphan inode 13 (err -117) [ 336.239828][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 336.239848][ C0] EXT4-fs (loop3): initial error at time 1784696626: ext4_orphan_get:1399: inode 13 [ 336.239878][ C0] EXT4-fs (loop3): last error at time 1784696626: ext4_orphan_get:1399: inode 13 [ 336.279695][T11592] loop3: lost filesystem error report for type 5 error -117 [ 336.285499][T11592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.320804][T11592] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 336.333968][T11600] __nla_validate_parse: 7 callbacks suppressed [ 336.333981][T11600] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1847'. [ 336.361640][T11592] FAULT_INJECTION: forcing a failure. [ 336.361640][T11592] name failslab, interval 1, probability 0, space 0, times 0 [ 336.375811][T11592] CPU: 0 UID: 0 PID: 11592 Comm: syz.3.1846 Not tainted syzkaller #0 PREEMPT(lazy) [ 336.375883][T11592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 336.375961][T11592] Call Trace: [ 336.375968][T11592] [ 336.375976][T11592] __dump_stack+0x1d/0x30 [ 336.376004][T11592] dump_stack_lvl+0x95/0xd0 [ 336.376030][T11592] dump_stack+0x15/0x1b [ 336.376125][T11592] should_fail_ex+0x25e/0x270 [ 336.376237][T11592] should_failslab+0x8c/0xb0 [ 336.376368][T11592] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 336.376392][T11592] ? alloc_empty_file+0x70/0x1e0 [ 336.376419][T11592] ? alloc_empty_file+0x70/0x1e0 [ 336.376457][T11592] alloc_empty_file+0x70/0x1e0 [ 336.376541][T11592] path_openat+0x54/0x2000 [ 336.376598][T11592] ? _parse_integer+0x27/0x40 [ 336.376671][T11592] ? kstrtoull+0x111/0x140 [ 336.376695][T11592] ? kstrtouint+0x76/0xc0 [ 336.376763][T11592] do_file_open+0x16c/0x290 [ 336.376823][T11592] do_sys_openat2+0xa0/0x130 [ 336.376885][T11592] __x64_sys_openat+0xf2/0x120 [ 336.376991][T11592] x64_sys_call+0x1e39/0x3020 [ 336.377016][T11592] do_syscall_64+0x136/0x3c0 [ 336.377047][T11592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.377098][T11592] RIP: 0033:0x7efc05b4de99 [ 336.377113][T11592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.377133][T11592] RSP: 002b:00007efc045a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.377201][T11592] RAX: ffffffffffffffda RBX: 00007efc05dd5fa0 RCX: 00007efc05b4de99 [ 336.377219][T11592] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 336.377233][T11592] RBP: 00007efc045a7090 R08: 0000000000000000 R09: 0000000000000000 [ 336.377244][T11592] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 336.377295][T11592] R13: 00007efc05dd6038 R14: 00007efc05dd5fa0 R15: 00007ffe7e477168 [ 336.377336][T11592] [ 336.645383][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.887085][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 338.176583][T11623] loop3: detected capacity change from 0 to 1024 [ 338.268453][T11623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 338.318588][T11623] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.375223][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 338.375238][ T28] audit: type=1400 audit(1784696628.352:1818): avc: denied { write } for pid=11622 comm="syz.3.1854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.403031][ T28] audit: type=1400 audit(1784696628.372:1819): avc: denied { map } for pid=11622 comm="syz.3.1854" path="/86/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.448422][T11623] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1854: bg 0: block 112: padding at end of block bitmap is not set [ 338.590238][ T28] audit: type=1400 audit(1784696628.432:1820): avc: denied { write } for pid=11622 comm="syz.3.1854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.639579][ T310] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 338.710509][ T310] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 338.772178][ T310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 338.772178][ T310] [ 338.824912][ T8946] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 338.871855][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.475437][ T6990] usb 3-1: enqueue for inactive port 0 [ 339.496340][ T6990] usb 3-1: enqueue for inactive port 0 [ 339.585524][ T6990] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 339.728080][T11633] loop1: detected capacity change from 0 to 512 [ 339.782913][T11633] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.857428][T11633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 339.890710][T11633] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 339.918102][T11633] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1856: attempt to clear invalid blocks 2 len 1 [ 339.956790][T11633] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 339.965308][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 339.981015][ C1] EXT4-fs (loop1): initial error at time 1784696629: ext4_clear_blocks:876: inode 13 [ 339.990565][ C1] EXT4-fs (loop1): last error at time 1784696629: ext4_clear_blocks:876: inode 13 [ 340.000113][T11633] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 340.055580][T11633] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1856: invalid indirect mapped block 1819239214 (level 0) [ 340.121056][T11633] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 340.121230][T11633] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1856: invalid indirect mapped block 1819239214 (level 1) [ 340.343014][T11633] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 340.346449][T11633] EXT4-fs (loop1): 1 truncate cleaned up [ 340.456417][T11633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.548106][T11633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.318253][T11637] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1857'. [ 341.419213][T11641] tipc: Disabling bearer [ 341.426942][T11641] tipc: Enabling of bearer rejected, failed to create discoverer [ 341.595246][T11649] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1864'. [ 341.790919][T11655] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1866'. [ 341.803264][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1868'. [ 341.842667][T11660] unsupported nlmsg_type 40 [ 342.078813][ T28] audit: type=1400 audit(1784696632.062:1821): avc: denied { listen } for pid=11672 comm="syz.2.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 342.198477][T11678] netlink: 'syz.2.1872': attribute type 44 has an invalid length. [ 342.235176][T11680] loop3: detected capacity change from 0 to 256 [ 342.411967][T11678] lo speed is unknown, defaulting to 1000 [ 342.469772][T11687] loop6: detected capacity change from 0 to 512 [ 342.517614][T11687] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 342.568589][T11687] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -ENXIO [ 342.658109][T11687] loop6: detected capacity change from 0 to 512 [ 342.691628][T11687] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 342.752322][T11689] loop3: detected capacity change from 0 to 1024 [ 342.804888][T11689] EXT4-fs: Ignoring removed oldalloc option [ 342.828127][T11689] EXT4-fs: Ignoring removed oldalloc option [ 342.875834][T11689] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 342.878776][ T28] audit: type=1400 audit(1784696632.862:1822): avc: denied { append } for pid=11695 comm="syz.2.1881" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.913347][T11687] loop6: detected capacity change from 0 to 1024 [ 342.952137][T11687] ext4: Unknown parameter 'nouser_xattr' [ 342.954623][T11689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.192568][T11696] lo speed is unknown, defaulting to 1000 [ 343.240834][T11689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 343.247528][T11689] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.276953][T11705] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 343.283646][T11705] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.311659][ T28] audit: type=1400 audit(1784696633.292:1823): avc: denied { write } for pid=11688 comm="syz.3.1879" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.337221][T11705] vhci_hcd vhci_hcd.0: Device attached [ 343.424642][T11689] vhci_hcd vhci_hcd.0: Device attached [ 343.457772][T11706] vhci_hcd: connection closed [ 343.458132][ T310] vhci_hcd vhci_hcd.3: stop threads [ 343.478310][T11704] vhci_hcd: connection closed [ 343.521366][ T310] vhci_hcd vhci_hcd.3: release socket [ 343.585299][ T6990] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 343.609820][ T310] vhci_hcd vhci_hcd.3: disconnect device [ 343.645348][ T6990] usb 7-2: new low-speed USB device number 3 using vhci_hcd [ 343.672692][ T310] vhci_hcd vhci_hcd.3: stop threads [ 343.694195][ T6990] usb 7-2: enqueue for inactive port 1 [ 343.717959][ T310] vhci_hcd vhci_hcd.3: release socket [ 343.743181][ T6990] usb 7-2: enqueue for inactive port 1 [ 343.768613][ T310] vhci_hcd vhci_hcd.3: disconnect device [ 343.797568][ T6990] usb 7-2: enqueue for inactive port 1 [ 343.905297][ T6990] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 344.155572][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.644481][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 344.776903][T11729] loop3: detected capacity change from 0 to 128 [ 344.876635][T11729] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.895460][T11729] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.000533][ T8946] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.210771][ T28] audit: type=1400 audit(1784696635.192:1824): avc: denied { ioctl } for pid=11733 comm="syz.3.1890" path="/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 345.250795][T11732] loop6: detected capacity change from 0 to 2048 [ 345.298838][T11732] loop6: p3 p4 < > [ 345.302851][T11732] loop6: p3 start 11362048 is beyond EOD, truncated [ 345.314336][ T28] audit: type=1400 audit(1784696635.292:1825): avc: denied { map } for pid=11733 comm="syz.3.1890" path="socket:[32809]" dev="sockfs" ino=32809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 345.599247][ T28] audit: type=1400 audit(1784696635.582:1826): avc: denied { accept } for pid=11753 comm="syz.1.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 345.724464][T11763] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1903'. [ 345.889968][T11773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11773 comm=syz.1.1907 [ 345.959391][T11775] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1908'. [ 346.287934][ T28] audit: type=1400 audit(1784696636.202:1827): avc: denied { write } for pid=11760 comm="syz.6.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 347.284111][T11782] loop3: detected capacity change from 0 to 512 [ 347.422582][T11796] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1917'. [ 347.575368][T11800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11800 comm=syz.2.1918 [ 347.616335][T11782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.698155][T11782] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.737253][T11811] syz_tun: entered allmulticast mode [ 347.779527][T11782] Quota error (device loop3): do_check_range: Getting block 4128768 out of range 0-5 [ 347.820324][T11816] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1923'. [ 347.830503][T11807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'. [ 348.185104][T11828] loop1: detected capacity change from 0 to 256 [ 348.383819][T11832] random: crng reseeded on system resumption [ 348.384746][ T28] audit: type=1400 audit(1784696638.362:1828): avc: denied { write } for pid=11831 comm="syz.1.1928" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.426919][ T28] audit: type=1400 audit(1784696638.362:1829): avc: denied { open } for pid=11831 comm="syz.1.1928" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.459428][T11834] loop6: detected capacity change from 0 to 764 [ 348.526449][T11834] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.593367][ T28] audit: type=1400 audit(1784696638.572:1830): avc: denied { firmware_load } for pid=11831 comm="syz.1.1928" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 348.777822][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.800287][ T28] audit: type=1400 audit(1784696638.782:1831): avc: denied { ioctl } for pid=11831 comm="syz.1.1928" path="socket:[32409]" dev="sockfs" ino=32409 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 349.390664][T11851] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1934'. [ 349.626655][ T28] audit: type=1400 audit(1784696639.602:1832): avc: denied { mount } for pid=11850 comm="syz.6.1934" name="/" dev="ramfs" ino=33084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 349.739249][T11857] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1935'. [ 349.838780][T11858] loop6: detected capacity change from 0 to 512 [ 349.892793][T11858] EXT4-fs: Ignoring removed nobh option [ 349.925426][T11858] EXT4-fs: Ignoring removed oldalloc option [ 349.950515][T11858] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 349.973357][T11858] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.1936: inode has both inline data and extents flags [ 349.995437][T11865] loop1: detected capacity change from 0 to 256 [ 350.014829][T11858] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 350.015092][T11858] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1936: couldn't read orphan inode 13 (err -117) [ 350.024370][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 350.024393][ C0] EXT4-fs (loop6): initial error at time 1784696639: ext4_orphan_get:1399: inode 13 [ 350.024423][ C0] EXT4-fs (loop6): last error at time 1784696639: ext4_orphan_get:1399: inode 13 [ 350.167222][T11858] loop6: lost filesystem error report for type 5 error -117 [ 350.167740][T11858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.804300][T11856] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 350.816069][T11858] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 350.830064][T11856] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1936'. [ 350.917985][T11856] EXT4-fs warning (device loop6): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 351.036907][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.117091][T11891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11891 comm=syz.3.1944 [ 351.433521][T11883] lo speed is unknown, defaulting to 1000 [ 351.675697][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.682932][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.690838][T11883] bridge_slave_0: entered allmulticast mode [ 351.698684][T11883] bridge_slave_0: entered promiscuous mode [ 351.710644][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.718437][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.725944][T11883] bridge_slave_1: entered allmulticast mode [ 351.733196][T11883] bridge_slave_1: entered promiscuous mode [ 351.787559][T11883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.798049][T11883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.818570][T11883] team0: Port device team_slave_0 added [ 351.825548][T11883] team0: Port device team_slave_1 added [ 351.842264][T11883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.849352][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.891510][T11883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.903056][T11883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.910233][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.936590][T11883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.967213][T11883] hsr_slave_0: entered promiscuous mode [ 351.973405][T11883] hsr_slave_1: entered promiscuous mode [ 351.979500][T11883] debugfs: 'hsr0' already exists in 'hsr' [ 351.985451][T11883] Cannot create hsr debugfs directory [ 353.051135][ T28] audit: type=1326 audit(1784696642.982:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.085503][ T28] audit: type=1326 audit(1784696642.982:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.112413][ T28] audit: type=1326 audit(1784696642.982:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.113235][T11930] FAULT_INJECTION: forcing a failure. [ 353.113235][T11930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.141467][ T28] audit: type=1326 audit(1784696642.982:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.178765][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz.6.1952 Not tainted syzkaller #0 PREEMPT(lazy) [ 353.178825][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 353.178846][T11930] Call Trace: [ 353.178852][T11930] [ 353.178859][T11930] __dump_stack+0x1d/0x30 [ 353.178915][T11930] dump_stack_lvl+0x95/0xd0 [ 353.178940][T11930] dump_stack+0x15/0x1b [ 353.178980][T11930] should_fail_ex+0x25e/0x270 [ 353.179018][T11930] should_fail+0xb/0x20 [ 353.179079][T11930] should_fail_usercopy+0x1a/0x20 [ 353.179107][T11930] _copy_from_user+0x1c/0xb0 [ 353.179126][T11930] ___sys_sendmsg+0xc1/0x1e0 [ 353.179265][T11930] __x64_sys_sendmsg+0xd4/0x160 [ 353.179375][T11930] x64_sys_call+0x194c/0x3020 [ 353.179407][T11930] do_syscall_64+0x136/0x3c0 [ 353.179458][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.179487][T11930] RIP: 0033:0x7fd4fd70de99 [ 353.179508][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.179532][T11930] RSP: 002b:00007fd4fc167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.179598][T11930] RAX: ffffffffffffffda RBX: 00007fd4fd995fa0 RCX: 00007fd4fd70de99 [ 353.179647][T11930] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 353.179671][T11930] RBP: 00007fd4fc167090 R08: 0000000000000000 R09: 0000000000000000 [ 353.179688][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.179703][T11930] R13: 00007fd4fd996038 R14: 00007fd4fd995fa0 R15: 00007ffffe5dd658 [ 353.179725][T11930] [ 353.346462][ T28] audit: type=1326 audit(1784696642.992:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.383276][ T28] audit: type=1326 audit(1784696643.002:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.429343][T11934] loop3: detected capacity change from 0 to 128 [ 353.433279][T11941] loop6: detected capacity change from 0 to 128 [ 353.448732][ T28] audit: type=1326 audit(1784696643.012:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.476584][ T5360] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 353.476686][ T28] audit: type=1326 audit(1784696643.012:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.543624][T11941] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.563715][T11934] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.583562][T11941] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.588866][ T28] audit: type=1326 audit(1784696643.002:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.597851][T11946] netlink: 'syz.2.1955': attribute type 8 has an invalid length. [ 353.619762][ T28] audit: type=1326 audit(1784696643.012:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.1.1949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 353.658256][T11934] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.682833][T11941] FAULT_INJECTION: forcing a failure. [ 353.682833][T11941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.708406][T11941] CPU: 1 UID: 0 PID: 11941 Comm: syz.6.1954 Not tainted syzkaller #0 PREEMPT(lazy) [ 353.708554][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 353.708565][T11941] Call Trace: [ 353.708572][T11941] [ 353.708581][T11941] __dump_stack+0x1d/0x30 [ 353.708608][T11941] dump_stack_lvl+0x95/0xd0 [ 353.708765][T11941] dump_stack+0x15/0x1b [ 353.708794][T11941] should_fail_ex+0x25e/0x270 [ 353.708824][T11941] should_fail_alloc_page+0xf2/0x100 [ 353.708851][T11941] __alloc_frozen_pages_noprof+0x108/0x350 [ 353.708931][T11941] alloc_pages_mpol+0xa9/0x1d0 [ 353.708968][T11941] folio_alloc_noprof+0x96/0x150 [ 353.709024][T11941] filemap_alloc_folio_noprof+0x92/0x220 [ 353.709067][T11941] __filemap_get_folio_mpol+0x2a0/0x840 [ 353.709152][T11941] ext4_load_tail_bh+0x4e/0x330 [ 353.709190][T11941] ? ext4_block_zero_range+0x6d/0x710 [ 353.709222][T11941] ext4_block_zero_range+0x7e/0x710 [ 353.709334][T11941] ext4_zero_partial_blocks+0x169/0x180 [ 353.709370][T11941] ext4_punch_hole+0x1db/0x700 [ 353.709400][T11941] ? file_update_time_flags+0x261/0x2e0 [ 353.709443][T11941] ext4_fallocate+0x30b/0x320 [ 353.709519][T11941] vfs_fallocate+0x3ac/0x400 [ 353.709548][T11941] __x64_sys_fallocate+0x7a/0xd0 [ 353.709621][T11941] x64_sys_call+0x298e/0x3020 [ 353.709652][T11941] do_syscall_64+0x136/0x3c0 [ 353.709682][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.709725][T11941] RIP: 0033:0x7fd4fd70de99 [ 353.709746][T11941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.709822][T11941] RSP: 002b:00007fd4fc167028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 353.709847][T11941] RAX: ffffffffffffffda RBX: 00007fd4fd995fa0 RCX: 00007fd4fd70de99 [ 353.709864][T11941] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 353.709924][T11941] RBP: 00007fd4fc167090 R08: 0000000000000000 R09: 0000000000000000 [ 353.709940][T11941] R10: 000000000000e89d R11: 0000000000000246 R12: 0000000000000001 [ 353.709956][T11941] R13: 00007fd4fd996038 R14: 00007fd4fd995fa0 R15: 00007ffffe5dd658 [ 353.709978][T11941] [ 353.999014][ T8998] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.068285][ T8946] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.193898][T11973] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1961'. [ 354.227987][ T49] smc: removing ib device syz1 [ 354.238377][ T5360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.446746][ T5360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.456894][ T5360] bond0 (unregistering): Released all slaves [ 354.480443][ T5360] bond1 (unregistering): Released all slaves [ 354.518010][ T5360] bond2 (unregistering): Released all slaves [ 354.556867][ T5360] bond3 (unregistering): Released all slaves [ 354.591929][ T5360] bond4 (unregistering): Released all slaves [ 354.632053][ T5360] bond5 (unregistering): Released all slaves [ 354.669923][ T5360] bond6 (unregistering): Released all slaves [ 354.705753][T11963] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 355.102078][T11980] pim6reg: entered allmulticast mode [ 355.197214][T11986] loop1: detected capacity change from 0 to 256 [ 355.231512][T11981] pim6reg: left allmulticast mode [ 355.554391][T11883] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 355.584665][T11883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.625120][T11883] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 355.671963][T11883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.709819][T11883] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 355.763763][T11883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.804416][T11883] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 355.882593][T11883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.904303][T12009] netlink: 463 bytes leftover after parsing attributes in process `syz.3.1964'. [ 356.096871][T11883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.171144][T11883] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.201765][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.208931][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.255225][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.262409][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.276324][ T849] IPVS: starting estimator thread 0... [ 356.375575][T12043] IPVS: using max 2256 ests per chain, 112800 per kthread [ 356.412735][ T5360] hsr_slave_0: left promiscuous mode [ 356.422453][T12037] loop3: detected capacity change from 0 to 512 [ 356.431170][ T5360] hsr_slave_1: left promiscuous mode [ 356.445916][T12058] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1971'. [ 356.455351][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.470646][ T5360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.540368][T12037] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: comm syz.3.1968: inode #1792: comm syz.3.1968: iget: illegal inode # [ 356.582077][T12037] loop3: lost filesystem error report for type 5 error -117 [ 356.582521][ T5360] team0 (unregistering): Port device team_slave_1 removed [ 356.599243][T12037] EXT4-fs (loop3): Remounting filesystem read-only [ 356.607053][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 356.607203][ C1] EXT4-fs (loop3): initial error at time 1784696646: ext4_get_journal_inode:5900 [ 356.607533][ C1] EXT4-fs (loop3): last error at time 1784696646: ext4_get_journal_inode:5900 [ 356.641001][T12037] EXT4-fs (loop3): no journal found [ 356.649775][T12037] EXT4-fs (loop3): can't get journal size [ 356.656800][ T5360] team0 (unregistering): Port device team_slave_0 removed [ 356.694144][T12037] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 356.709085][T12056] loop1: detected capacity change from 0 to 512 [ 356.711885][T12037] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 356.762402][T12056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.777940][T12037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.823137][T12056] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1972: iget: bad i_size value: 38620345925642 [ 356.877013][T12056] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 356.879159][T12056] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1972: couldn't read orphan inode 15 (err -117) [ 356.888569][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 356.888660][ C1] EXT4-fs (loop1): initial error at time 1784696646: ext4_orphan_get:1399: inode 15 [ 356.888808][ C1] EXT4-fs (loop1): last error at time 1784696646: ext4_orphan_get:1399: inode 15 [ 356.928408][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.003790][T12056] loop1: lost filesystem error report for type 5 error -117 [ 357.014043][T12056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.334306][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1977'. [ 357.361693][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1977'. [ 357.376422][T12062] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1972: bg 0: block 5: invalid block bitmap [ 357.411957][T12104] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 357.433668][T12062] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 357.468590][ T5360] IPVS: stop unused estimator thread 0... [ 357.514924][T12062] EXT4-fs (loop1): This should not happen!! Data will be lost [ 357.514924][T12062] [ 357.597641][T12062] EXT4-fs (loop1): Total free blocks count 0 [ 357.642095][T12062] EXT4-fs (loop1): Free/Dirty block details [ 357.670604][T12104] loop6: detected capacity change from 0 to 164 [ 357.685186][T12062] EXT4-fs (loop1): free_blocks=0 [ 357.753951][T12104] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 357.766757][T12062] EXT4-fs (loop1): dirty_blocks=112 [ 357.783152][T12062] EXT4-fs (loop1): Block reservation details [ 357.844029][T12062] EXT4-fs (loop1): i_reserved_data_blocks=112 [ 358.012393][T12116] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1979'. [ 358.133591][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 358.133605][ T28] audit: type=1400 audit(1784696648.112:1926): avc: denied { append } for pid=12119 comm="syz.6.1981" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 358.184766][ T8138] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 358.212722][T11883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.233522][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.318697][ T28] audit: type=1400 audit(1784696648.302:1927): avc: denied { write } for pid=12102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.422416][ T28] audit: type=1400 audit(1784696648.402:1928): avc: denied { write } for pid=12131 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.070034][T12145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1986'. [ 359.079267][T12138] loop3: detected capacity change from 0 to 512 [ 359.088113][T12146] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1982'. [ 359.094457][T12138] msdos: Unknown parameter 'cTeck' [ 359.107936][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.161683][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.173144][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.234969][ T310] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.260784][ T310] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.299679][ T5360] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.322169][ T28] audit: type=1400 audit(1784696649.302:1929): avc: denied { ioctl } for pid=12155 comm="syz.1.1989" path="socket:[33365]" dev="sockfs" ino=33365 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 359.360455][ T5360] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.415575][ T28] audit: type=1400 audit(1784696649.392:1930): avc: denied { append } for pid=12169 comm="syz.2.1992" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 359.440521][ T4107] kernel read not supported for file /1364/timerslack_ns (pid: 4107 comm: kworker/1:5) [ 359.555445][ T28] audit: type=1400 audit(1784696649.532:1931): avc: denied { write } for pid=12150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.615587][T11883] veth0_vlan: entered promiscuous mode [ 359.639899][T11883] veth1_vlan: entered promiscuous mode [ 359.646065][ T28] audit: type=1400 audit(1784696649.612:1932): avc: denied { write } for pid=12203 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.668790][T11883] veth0_macvtap: entered promiscuous mode [ 359.696029][T11883] veth1_macvtap: entered promiscuous mode [ 359.704985][T12207] loop1: detected capacity change from 0 to 512 [ 359.711529][T11883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.714306][T11883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.743581][ T310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.759281][T12206] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 359.780744][ T310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.798041][T12202] loop6: detected capacity change from 0 to 512 [ 359.818999][T12207] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1997: iget: bad extended attribute block 1 [ 359.857029][T12202] msdos: Unknown parameter 'cTeck' [ 359.876789][T12207] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 359.883430][T12207] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1997: couldn't read orphan inode 15 (err -117) [ 359.883756][ T310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.892696][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 359.892717][ C1] EXT4-fs (loop1): initial error at time 1784696649: ext4_orphan_get:1399: inode 15 [ 359.892757][ C1] EXT4-fs (loop1): last error at time 1784696649: ext4_orphan_get:1399: inode 15 [ 359.906857][T12207] loop1: lost filesystem error report for type 5 error -117 [ 359.940854][ T310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.959158][T12207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.992367][T12198] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 13: comm syz.1.1997: lblock 0 mapped to illegal pblock 13 (length 1) [ 360.006657][ T28] audit: type=1400 audit(1784696649.972:1933): avc: denied { write } for pid=12196 comm="syz.1.1997" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.090167][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.100023][ T28] audit: type=1400 audit(1784696650.082:1934): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.192864][ T28] audit: type=1400 audit(1784696650.162:1935): avc: denied { read } for pid=12231 comm="syz.7.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.296472][T12226] loop6: detected capacity change from 0 to 256 [ 360.334010][T12242] loop7: detected capacity change from 0 to 512 [ 360.341027][T12242] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 360.357368][T12242] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 360.384752][T12226] loop6: detected capacity change from 0 to 512 [ 360.385302][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 360.397604][ C1] EXT4-fs (loop7): initial error at time 1784696650: ext4_mb_generate_buddy:1317 [ 360.406778][ C1] EXT4-fs (loop7): last error at time 1784696650: ext4_mb_generate_buddy:1317 [ 360.497279][T12242] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 360.544199][T12242] EXT4-fs (loop7): 1 truncate cleaned up [ 360.551711][T12242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.638429][T12226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.662997][T12226] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.780271][T12251] 8021q: adding VLAN 0 to HW filter on device eth0 [ 360.791332][T12251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.801176][T12251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 360.810625][T12251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 360.879278][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.941434][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 361.041488][T11883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.233059][T12270] loop3: detected capacity change from 0 to 512 [ 361.288378][T12270] msdos: Unknown parameter 'cTeck' [ 361.504694][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 361.552433][T12298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 361.624586][T12298] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 361.667272][T12307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12307 comm=syz.2.2016 [ 361.683292][T12300] loop3: detected capacity change from 0 to 512 [ 361.705073][T12300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.766462][T12300] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2014: iget: bad i_size value: 38620345925642 [ 361.788267][T12301] syzkaller0: entered promiscuous mode [ 361.795292][T12301] syzkaller0: entered allmulticast mode [ 361.811657][T12300] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.811893][T12300] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2014: couldn't read orphan inode 15 (err -117) [ 361.821149][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 361.821165][ C0] EXT4-fs (loop3): initial error at time 1784696651: ext4_orphan_get:1399: inode 15 [ 361.821190][ C0] EXT4-fs (loop3): last error at time 1784696651: ext4_orphan_get:1399: inode 15 [ 361.975913][T12300] loop3: lost filesystem error report for type 5 error -117 [ 362.013556][T12326] loop1: detected capacity change from 0 to 256 [ 362.030609][T12300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.047980][T12326] netlink: 'syz.1.2020': attribute type 21 has an invalid length. [ 362.084666][T12326] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2020'. [ 362.116015][T12326] netlink: 'syz.1.2020': attribute type 4 has an invalid length. [ 362.137381][T12326] netlink: 'syz.1.2020': attribute type 5 has an invalid length. [ 362.181923][T12326] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2020'. [ 362.275324][T12300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2014: bg 0: block 5: invalid block bitmap [ 362.315087][T12300] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28 [ 362.374308][T12300] EXT4-fs (loop3): This should not happen!! Data will be lost [ 362.374308][T12300] [ 362.396408][T12300] EXT4-fs (loop3): Total free blocks count 0 [ 362.413542][T12300] EXT4-fs (loop3): Free/Dirty block details [ 362.438610][T12300] EXT4-fs (loop3): free_blocks=0 [ 362.467714][T12300] EXT4-fs (loop3): dirty_blocks=160 [ 362.473085][T12300] EXT4-fs (loop3): Block reservation details [ 362.488588][T12300] EXT4-fs (loop3): i_reserved_data_blocks=160 [ 362.566527][T12334] loop7: detected capacity change from 0 to 8192 [ 362.878543][T12337] FAULT_INJECTION: forcing a failure. [ 362.878543][T12337] name failslab, interval 1, probability 0, space 0, times 0 [ 362.903940][T12337] CPU: 0 UID: 0 PID: 12337 Comm: syz.1.2023 Not tainted syzkaller #0 PREEMPT(lazy) [ 362.904032][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 362.904046][T12337] Call Trace: [ 362.904055][T12337] [ 362.904065][T12337] __dump_stack+0x1d/0x30 [ 362.904155][T12337] dump_stack_lvl+0x95/0xd0 [ 362.904189][T12337] dump_stack+0x15/0x1b [ 362.904268][T12337] should_fail_ex+0x25e/0x270 [ 362.904297][T12337] should_failslab+0x8c/0xb0 [ 362.904320][T12337] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 362.904342][T12337] ? radix_tree_node_alloc+0x8a/0x1f0 [ 362.904439][T12337] ? radix_tree_node_alloc+0x8a/0x1f0 [ 362.904464][T12337] radix_tree_node_alloc+0x8a/0x1f0 [ 362.904492][T12337] idr_get_free+0x1fc/0x560 [ 362.904539][T12337] idr_alloc_u32+0xe9/0x1a0 [ 362.904621][T12337] u32_change+0x9af/0x13d0 [ 362.904735][T12337] ? memcmp+0x5e/0x90 [ 362.904760][T12337] tc_new_tfilter+0xf74/0x1170 [ 362.904786][T12337] ? __rcu_read_unlock+0x4e/0x70 [ 362.904831][T12337] ? __pfx_tc_new_tfilter+0x10/0x10 [ 362.904885][T12337] rtnetlink_rcv_msg+0x64b/0x720 [ 362.904916][T12337] netlink_rcv_skb+0x11e/0x220 [ 362.905010][T12337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.905037][T12337] rtnetlink_rcv+0x1c/0x30 [ 362.905057][T12337] netlink_unicast+0x5a7/0x680 [ 362.905112][T12337] netlink_sendmsg+0x5be/0x6f0 [ 362.905140][T12337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.905169][T12337] ____sys_sendmsg+0x532/0x580 [ 362.905238][T12337] ___sys_sendmsg+0x195/0x1e0 [ 362.905291][T12337] __x64_sys_sendmsg+0xd4/0x160 [ 362.905327][T12337] x64_sys_call+0x194c/0x3020 [ 362.905362][T12337] do_syscall_64+0x136/0x3c0 [ 362.905393][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.905417][T12337] RIP: 0033:0x7f0b3d12de99 [ 362.905436][T12337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.905461][T12337] RSP: 002b:00007f0b3bb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.905528][T12337] RAX: ffffffffffffffda RBX: 00007f0b3d3b5fa0 RCX: 00007f0b3d12de99 [ 362.905542][T12337] RDX: 000000000000c040 RSI: 0000200000000300 RDI: 0000000000000005 [ 362.905558][T12337] RBP: 00007f0b3bb87090 R08: 0000000000000000 R09: 0000000000000000 [ 362.905575][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.905588][T12337] R13: 00007f0b3d3b6038 R14: 00007f0b3d3b5fa0 R15: 00007ffc66ade068 [ 362.905637][T12337] [ 363.194246][ T8946] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 363.220244][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.262026][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 363.463851][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 363.463866][ T28] audit: type=1400 audit(1784696653.442:1946): avc: denied { write } for pid=12350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.613250][T12344] msdos: Unknown parameter 'cTeck' [ 363.622587][ T28] audit: type=1400 audit(1784696653.602:1947): avc: denied { write } for pid=12365 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.726786][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 364.003775][ T28] audit: type=1400 audit(1784696653.982:1948): avc: denied { write } for pid=12371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.065677][T12393] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2034'. [ 364.092746][ T28] audit: type=1400 audit(1784696654.062:1949): avc: denied { write } for pid=12389 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.166768][ T28] audit: type=1326 audit(1784696654.122:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.2.2035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 364.210962][ T28] audit: type=1326 audit(1784696654.122:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.2.2035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 364.244289][ T28] audit: type=1326 audit(1784696654.122:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.2.2035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 364.273988][ T28] audit: type=1326 audit(1784696654.122:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.2.2035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 364.300493][ T28] audit: type=1326 audit(1784696654.122:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.2.2035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 364.326906][ T28] audit: type=1326 audit(1784696654.122:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.2.2035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 365.126946][T12440] netlink: 'syz.7.2040': attribute type 21 has an invalid length. [ 365.167379][T12440] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.192855][T12440] IPv6: Can't replace route, no match found [ 365.323775][T12447] set_capacity_and_notify: 1 callbacks suppressed [ 365.323796][T12447] loop7: detected capacity change from 0 to 1024 [ 365.346960][T12447] EXT4-fs: Ignoring removed nobh option [ 365.377653][T12447] EXT4-fs: Ignoring removed bh option [ 365.410376][T12447] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 365.452043][T12447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 365.491291][T12447] System zones: 0-1, 3-12 [ 365.545067][T12447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.561402][T12460] loop6: detected capacity change from 0 to 512 [ 365.580557][T12460] msdos: Unknown parameter 'cTeck' [ 366.157586][T12480] loop1: detected capacity change from 0 to 512 [ 366.173256][T12480] EXT4-fs: Ignoring removed orlov option [ 367.006105][T12480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 368.153130][T12485] bridge_slave_0: left allmulticast mode [ 368.164329][T11883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.975704][T12485] bridge_slave_0: left promiscuous mode [ 368.988024][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.012031][T12485] bridge_slave_1: left allmulticast mode [ 369.237083][T12485] bridge_slave_1: left promiscuous mode [ 369.268597][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.762180][T12480] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2045: invalid indirect mapped block 32768 (level 2) [ 369.776450][T12480] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 369.785763][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 369.802073][ C1] EXT4-fs (loop1): initial error at time 1784696659: ext4_free_branches:1023: inode 16 [ 369.813587][ C1] EXT4-fs (loop1): last error at time 1784696659: ext4_free_branches:1023: inode 16 [ 369.832369][T12480] EXT4-fs (loop1): 1 orphan inode deleted [ 369.838734][T12480] EXT4-fs (loop1): 1 truncate cleaned up [ 369.853196][T12480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.983610][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.046597][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 370.046665][ T28] audit: type=1400 audit(1784696659.982:2049): avc: denied { write } for pid=12488 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.158029][T12499] loop1: detected capacity change from 0 to 128 [ 370.169867][ T28] audit: type=1400 audit(1784696660.152:2050): avc: denied { setopt } for pid=12490 comm="syz.2.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 370.199500][T12485] bond0: (slave bond_slave_0): Releasing backup interface [ 370.317698][ T28] audit: type=1400 audit(1784696660.152:2051): avc: denied { accept } for pid=12490 comm="syz.2.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 370.341990][T12485] bond0: (slave bond_slave_1): Releasing backup interface [ 370.402844][T12485] team0: Port device team_slave_0 removed [ 370.412704][T12485] team0: Port device team_slave_1 removed [ 370.420395][T12485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.428597][T12485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.469640][T12485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.488129][T12507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2052'. [ 370.508195][T12485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.536658][T12485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.734821][T12512] loop7: detected capacity change from 0 to 512 [ 370.785457][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 370.844598][T12512] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.984608][T12512] EXT4-fs (loop7): orphan cleanup on readonly fs [ 371.145073][T12510] loop1: detected capacity change from 0 to 512 [ 371.190038][T12512] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 371.289698][T12512] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2051: attempt to clear invalid blocks 2 len 1 [ 371.325186][T12510] msdos: Unknown parameter 'cTeck' [ 371.417336][T12512] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 371.425272][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 371.440896][ C0] EXT4-fs (loop7): initial error at time 1784696661: ext4_clear_blocks:876: inode 13 [ 371.450463][ C0] EXT4-fs (loop7): last error at time 1784696661: ext4_clear_blocks:876: inode 13 [ 371.464132][T12512] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 371.548195][T12512] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2051: invalid indirect mapped block 1819239214 (level 0) [ 371.622042][T12512] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 371.632170][T12542] loop1: detected capacity change from 0 to 256 [ 371.649352][T12512] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2051: invalid indirect mapped block 1819239214 (level 1) [ 371.663452][T12512] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 371.664456][T12512] EXT4-fs (loop7): 1 truncate cleaned up [ 371.863862][T12512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.986151][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 372.011145][T12512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.572095][ T28] audit: type=1400 audit(1784696661.602:2052): avc: denied { write } for pid=12520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.599275][ T28] audit: type=1400 audit(1784696661.882:2053): avc: denied { write } for pid=12548 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.621598][ T28] audit: type=1400 audit(1784696661.892:2054): avc: denied { accept } for pid=12538 comm="syz.1.2058" lport=47283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.714961][T12564] loop6: detected capacity change from 0 to 512 [ 372.724098][T12564] EXT4-fs: dax option not supported [ 372.773579][ T28] audit: type=1400 audit(1784696662.752:2055): avc: denied { ioctl } for pid=12563 comm="syz.6.2061" path="socket:[34959]" dev="sockfs" ino=34959 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.826995][T12566] loop1: detected capacity change from 0 to 512 [ 372.863288][ T28] audit: type=1400 audit(1784696662.802:2056): avc: denied { getopt } for pid=12565 comm="syz.1.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 372.874955][T12566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.918809][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2063'. [ 372.944666][T12566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.979715][T12566] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.021587][T12573] xt_hashlimit: size too large, truncated to 1048576 [ 373.099017][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.564522][T12589] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2069'. [ 373.629903][T12591] loop6: detected capacity change from 0 to 512 [ 373.643177][T12591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.665909][T12591] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 373.675946][T12591] EXT4-fs (loop6): 1 truncate cleaned up [ 373.682142][T12591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.736052][T12591] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2070'. [ 373.767057][ T28] audit: type=1400 audit(1784696663.752:2057): avc: denied { ioctl } for pid=12590 comm="syz.6.2070" path="socket:[35022]" dev="sockfs" ino=35022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.858923][ T28] audit: type=1400 audit(1784696663.772:2058): avc: denied { getopt } for pid=12590 comm="syz.6.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.975307][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.977671][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2074'. [ 375.112709][T12610] loop1: detected capacity change from 0 to 512 [ 375.139572][T12610] EXT4-fs: Ignoring removed nobh option [ 375.183179][T12610] EXT4-fs: Ignoring removed oldalloc option [ 375.215393][T12610] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 375.247164][T12610] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.2075: inode has both inline data and extents flags [ 375.306480][T12610] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 375.306715][T12610] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2075: couldn't read orphan inode 13 (err -117) [ 375.316035][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 375.316050][ C0] EXT4-fs (loop1): initial error at time 1784696665: ext4_orphan_get:1399: inode 13 [ 375.316074][ C0] EXT4-fs (loop1): last error at time 1784696665: ext4_orphan_get:1399: inode 13 [ 375.504958][T12610] loop1: lost filesystem error report for type 5 error -117 [ 375.505900][T12610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.600487][T12610] EXT4-fs warning (device loop1): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 375.680662][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.862917][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2077'. [ 375.874997][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2076'. [ 375.916883][T12616] loop6: detected capacity change from 0 to 256 [ 375.927788][T12613] loop1: detected capacity change from 0 to 1024 [ 375.959635][T12613] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 375.976172][T12613] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 376.006257][T12613] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2076: Failed to acquire dquot type 0 [ 376.068896][T12613] loop1: lost filesystem error report for type 5 error -117 [ 376.069271][T12613] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, [ 376.076646][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 376.076682][ C0] EXT4-fs (loop1): initial error at time 1784696666: ext4_acquire_dquot:7041 [ 376.076727][ C0] EXT4-fs (loop1): last error at time 1784696666: ext4_acquire_dquot:7041 [ 376.108757][T12613] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 376.169856][T12613] EXT4-fs (loop1): 1 truncate cleaned up [ 376.199108][T12613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.252913][T12613] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 376.253174][ T28] audit: type=1400 audit(1784696666.232:2059): avc: denied { write } for pid=12612 comm="syz.1.2076" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.268366][T12613] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 376.330043][T12613] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2076: Failed to acquire dquot type 0 [ 376.366526][T12624] team0: Port device dummy0 removed [ 376.372050][T12624] bridge_slave_0: left allmulticast mode [ 376.387883][T12624] bridge_slave_0: left promiscuous mode [ 376.402508][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.421740][T12624] bridge_slave_1: left allmulticast mode [ 376.427559][T12624] bridge_slave_1: left promiscuous mode [ 376.434846][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.460636][T12624] bond0: (slave bond_slave_0): Releasing backup interface [ 376.475361][T12624] bond0: (slave bond_slave_1): Releasing backup interface [ 376.492924][T12624] team0: Port device team_slave_0 removed [ 376.505553][T12624] team0: Port device team_slave_1 removed [ 376.511517][T12624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.520721][T12624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.529888][T12624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.609887][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.764864][T12651] loop6: detected capacity change from 0 to 512 [ 377.876562][T12651] msdos: Unknown parameter 'cTeck' [ 378.282497][T12661] loop1: detected capacity change from 0 to 512 [ 378.314365][T12664] SELinux: Context › is not valid (left unmapped). [ 378.321787][ T28] audit: type=1400 audit(1784696668.292:2060): avc: denied { mac_admin } for pid=12663 comm="syz.7.2093" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.390191][T12661] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 378.444049][ T28] audit: type=1400 audit(1784696668.352:2061): avc: denied { create } for pid=12663 comm="syz.7.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 378.528340][T12661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 378.557951][T12661] System zones: 1-12 [ 378.569430][T12661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 378.589919][T12661] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2091: attempt to clear invalid blocks 1024 len 1 [ 378.609496][T12670] loop7: detected capacity change from 0 to 512 [ 378.659666][T12661] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 378.660005][T12661] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2091: bg 0: block 361: padding at end of block bitmap is not set [ 378.669222][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 378.669236][ C0] EXT4-fs (loop1): initial error at time 1784696668: ext4_clear_blocks:876: inode 11 [ 378.669263][ C0] EXT4-fs (loop1): last error at time 1784696668: ext4_clear_blocks:876: inode 11 [ 378.818017][T12661] loop1: lost filesystem error report for type 5 error -117 [ 378.818230][T12661] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 378.872377][T12661] loop1: lost filesystem error report for type 5 error -117 [ 378.872680][T12661] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2091: invalid indirect mapped block 1811939328 (level 0) [ 378.939349][T12661] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 378.939514][T12661] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2091: invalid indirect mapped block 2 (level 2) [ 379.015801][T12661] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.016144][T12661] EXT4-fs (loop1): 1 truncate cleaned up [ 379.035887][T12661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 379.082066][T12661] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 5: comm syz.1.2091: lblock 0 mapped to illegal pblock 5 (length 1) [ 379.106435][T12661] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.2091: error -EUCLEAN reading directory block [ 379.126856][T12679] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2097'. [ 379.137629][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 379.156115][T12679] loop6: detected capacity change from 0 to 512 [ 379.172947][ T28] audit: type=1326 audit(1784696669.152:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.2.2095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 379.217442][T12679] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.2097: corrupted in-inode xattr: e_value size too large [ 379.231634][T12679] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 379.232418][T12679] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2097: couldn't read orphan inode 15 (err -117) [ 379.239147][ T28] audit: type=1326 audit(1784696669.152:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.2.2095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 379.241601][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 379.285340][ C1] EXT4-fs (loop6): initial error at time 1784696669: ext4_iget_extra_inode:5180: inode 15 [ 379.295303][ C1] EXT4-fs (loop6): last error at time 1784696669: ext4_iget_extra_inode:5180: inode 15 [ 379.304988][T12679] loop6: lost filesystem error report for type 5 error -117 [ 379.305147][ T28] audit: type=1326 audit(1784696669.152:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.2.2095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5261fade99 code=0x7ffc0000 [ 379.342254][T12679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.379637][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 379.395524][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2099'. [ 379.409263][T12685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12685 comm=syz.3.2099 [ 379.473705][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.493205][T12692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 379.682947][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2100'. [ 379.704590][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 380.492855][T12688] loop1: detected capacity change from 0 to 1024 [ 380.787253][T12688] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2100: Failed to acquire dquot type 0 [ 380.799324][T12688] loop1: lost filesystem error report for type 5 error -117 [ 380.799674][T12688] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, [ 380.807046][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 380.807068][ C0] EXT4-fs (loop1): initial error at time 1784696670: ext4_acquire_dquot:7041 [ 380.807095][ C0] EXT4-fs (loop1): last error at time 1784696670: ext4_acquire_dquot:7041 [ 380.839108][T12688] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 381.262185][T12688] EXT4-fs (loop1): 1 truncate cleaned up [ 381.269134][T12688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.289427][T12688] __quota_error: 22 callbacks suppressed [ 381.289445][T12688] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 381.304510][ T28] audit: type=1400 audit(1784696671.272:2085): avc: denied { write } for pid=12687 comm="syz.1.2100" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.444067][T12688] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 381.453814][T12688] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2100: Failed to acquire dquot type 0 [ 381.744408][T12711] FAULT_INJECTION: forcing a failure. [ 381.744408][T12711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.758058][T12711] CPU: 1 UID: 0 PID: 12711 Comm: syz.2.2106 Not tainted syzkaller #0 PREEMPT(lazy) [ 381.758087][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 381.758103][T12711] Call Trace: [ 381.758111][T12711] [ 381.758167][T12711] __dump_stack+0x1d/0x30 [ 381.758238][T12711] dump_stack_lvl+0x95/0xd0 [ 381.758270][T12711] dump_stack+0x15/0x1b [ 381.758366][T12711] should_fail_ex+0x25e/0x270 [ 381.758404][T12711] should_fail+0xb/0x20 [ 381.758457][T12711] should_fail_usercopy+0x1a/0x20 [ 381.758560][T12711] _copy_to_user+0x20/0xa0 [ 381.758618][T12711] simple_read_from_buffer+0xb5/0x130 [ 381.758679][T12711] proc_fail_nth_read+0x10e/0x150 [ 381.758724][T12711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.758746][T12711] vfs_read+0x18e/0x7c0 [ 381.758767][T12711] ? __rcu_read_unlock+0x4e/0x70 [ 381.758812][T12711] ? __fget_files+0x184/0x1c0 [ 381.758842][T12711] ? mutex_lock+0x57/0x90 [ 381.758877][T12711] ksys_read+0xdc/0x1a0 [ 381.758897][T12711] __x64_sys_read+0x40/0x50 [ 381.758916][T12711] x64_sys_call+0x2886/0x3020 [ 381.759018][T12711] do_syscall_64+0x136/0x3c0 [ 381.759105][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.759127][T12711] RIP: 0033:0x7f5261f6e6ce [ 381.759142][T12711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.759196][T12711] RSP: 002b:00007f52609e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.759234][T12711] RAX: ffffffffffffffda RBX: 00007f52609e66c0 RCX: 00007f5261f6e6ce [ 381.759251][T12711] RDX: 000000000000000f RSI: 00007f52609e60a0 RDI: 0000000000000005 [ 381.759272][T12711] RBP: 00007f52609e6090 R08: 0000000000000000 R09: 0000000000000000 [ 381.759288][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.759303][T12711] R13: 00007f5262236128 R14: 00007f5262236090 R15: 00007ffdf1d597a8 [ 381.759348][T12711] [ 382.008682][ T8138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.033575][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2108'. [ 382.344255][T12719] FAULT_INJECTION: forcing a failure. [ 382.344255][T12719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.427809][T12719] CPU: 1 UID: 0 PID: 12719 Comm: syz.6.2110 Not tainted syzkaller #0 PREEMPT(lazy) [ 382.427907][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 382.427921][T12719] Call Trace: [ 382.427928][T12719] [ 382.427936][T12719] __dump_stack+0x1d/0x30 [ 382.427958][T12719] dump_stack_lvl+0x95/0xd0 [ 382.427979][T12719] dump_stack+0x15/0x1b [ 382.428002][T12719] should_fail_ex+0x25e/0x270 [ 382.428124][T12719] should_fail+0xb/0x20 [ 382.428159][T12719] should_fail_usercopy+0x1a/0x20 [ 382.428194][T12719] _copy_from_user+0x1c/0xb0 [ 382.428266][T12719] kstrtouint_from_user+0x69/0xf0 [ 382.428306][T12719] ? 0xffffffff81000000 [ 382.428325][T12719] ? avc_policy_seqno+0x15/0x30 [ 382.428410][T12719] proc_fail_nth_write+0x50/0x160 [ 382.428440][T12719] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 382.428467][T12719] vfs_write+0x252/0x990 [ 382.428505][T12719] ? __fget_files+0x184/0x1c0 [ 382.428552][T12719] ? mutex_lock+0x57/0x90 [ 382.428588][T12719] ksys_write+0xdc/0x1a0 [ 382.428669][T12719] __x64_sys_write+0x40/0x50 [ 382.428689][T12719] x64_sys_call+0x27e1/0x3020 [ 382.428760][T12719] do_syscall_64+0x136/0x3c0 [ 382.428785][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.428847][T12719] RIP: 0033:0x7fd4fd6ce6ce [ 382.428866][T12719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.428886][T12719] RSP: 002b:00007fd4fc166fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.428938][T12719] RAX: ffffffffffffffda RBX: 00007fd4fc1676c0 RCX: 00007fd4fd6ce6ce [ 382.428957][T12719] RDX: 0000000000000001 RSI: 00007fd4fc1670a0 RDI: 0000000000000004 [ 382.428971][T12719] RBP: 00007fd4fc167090 R08: 0000000000000000 R09: 0000000000000000 [ 382.429001][T12719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.429013][T12719] R13: 00007fd4fd996038 R14: 00007fd4fd995fa0 R15: 00007ffffe5dd658 [ 382.429037][T12719] [ 382.551279][ T28] audit: type=1400 audit(1784696672.532:2086): avc: denied { setopt } for pid=12722 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.551327][ T28] audit: type=1400 audit(1784696672.532:2087): avc: denied { listen } for pid=12722 comm="syz.3.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.552852][ T28] audit: type=1400 audit(1784696672.532:2088): avc: denied { read } for pid=12722 comm="syz.3.2112" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 382.579678][T12726] loop6: detected capacity change from 0 to 1024 [ 382.588300][T12726] EXT4-fs: Ignoring removed orlov option [ 382.608085][T12726] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 382.620297][ T28] audit: type=1400 audit(1784696672.602:2089): avc: denied { read } for pid=12720 comm="syz.1.2111" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 384.102895][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 385.619560][T12775] loop6: detected capacity change from 0 to 512 [ 385.632174][ T28] audit: type=1400 audit(1784696675.612:2090): avc: denied { write } for pid=12747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.704623][T12781] netlink: 'syz.7.2126': attribute type 4 has an invalid length. [ 385.792147][ T28] audit: type=1400 audit(1784696675.772:2091): avc: denied { write } for pid=12783 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.874947][T12775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.952906][T12775] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.981427][T12785] loop7: detected capacity change from 0 to 8192 [ 386.006803][ T28] audit: type=1400 audit(1784696675.992:2092): avc: denied { write } for pid=12737 comm="syz.6.2115" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.030698][T12775] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 386.078018][T12785] loop7: p1 p2 p3 [ 386.086907][T12775] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2115: corrupted inode contents [ 386.115009][T12806] FAULT_INJECTION: forcing a failure. [ 386.115009][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.150820][T12775] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.2115: mark_inode_dirty error [ 386.177157][T12806] CPU: 1 UID: 0 PID: 12806 Comm: syz.3.2132 Not tainted syzkaller #0 PREEMPT(lazy) [ 386.177253][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 386.177270][T12806] Call Trace: [ 386.177277][T12806] [ 386.177286][T12806] __dump_stack+0x1d/0x30 [ 386.177310][T12806] dump_stack_lvl+0x95/0xd0 [ 386.177395][T12806] dump_stack+0x15/0x1b [ 386.177416][T12806] should_fail_ex+0x25e/0x270 [ 386.177443][T12806] should_fail+0xb/0x20 [ 386.177537][T12806] should_fail_usercopy+0x1a/0x20 [ 386.177596][T12806] _copy_from_iter+0xcc/0xe70 [ 386.177634][T12806] ? __alloc_skb+0x511/0x6f0 [ 386.177664][T12806] ? __alloc_skb+0x205/0x6f0 [ 386.177699][T12806] netlink_sendmsg+0x4a4/0x6f0 [ 386.177734][T12806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.177768][T12806] ____sys_sendmsg+0x532/0x580 [ 386.177812][T12806] ___sys_sendmsg+0x195/0x1e0 [ 386.177875][T12806] __x64_sys_sendmsg+0xd4/0x160 [ 386.177987][T12806] x64_sys_call+0x194c/0x3020 [ 386.178017][T12806] do_syscall_64+0x136/0x3c0 [ 386.178115][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.178137][T12806] RIP: 0033:0x7efc05b4de99 [ 386.178156][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.178178][T12806] RSP: 002b:00007efc045a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.178203][T12806] RAX: ffffffffffffffda RBX: 00007efc05dd5fa0 RCX: 00007efc05b4de99 [ 386.178221][T12806] RDX: 0000000000040004 RSI: 0000200000000d80 RDI: 0000000000000003 [ 386.178298][T12806] RBP: 00007efc045a7090 R08: 0000000000000000 R09: 0000000000000000 [ 386.178331][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.178347][T12806] R13: 00007efc05dd6038 R14: 00007efc05dd5fa0 R15: 00007ffe7e477168 [ 386.178371][T12806] [ 386.438357][T12775] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2115: corrupted inode contents [ 386.451486][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 386.451538][ T28] audit: type=1400 audit(1784696676.162:2095): avc: denied { write } for pid=12795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.503290][T12820] loop3: detected capacity change from 0 to 128 [ 386.519453][ T8604] udevd[8604]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 386.551658][T12820] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 386.571870][ T8742] udevd[8742]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 386.572530][ T8743] udevd[8743]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 386.605838][T12820] FAT-fs (loop3): Filesystem has been set read-only [ 386.612680][T12775] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2115: mark_inode_dirty error [ 386.631965][T12823] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 386.642461][ T28] audit: type=1400 audit(1784696676.382:2096): avc: denied { write } for pid=12816 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.688061][T12775] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2115: corrupted inode contents [ 386.775084][T12775] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2115: mark_inode_dirty error [ 386.927783][T12775] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.2115: corrupted inode contents [ 386.958491][ T28] audit: type=1400 audit(1784696676.942:2097): avc: granted { setsecparam } for pid=12836 comm="syz.2.2139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 387.029710][T12840] bridge_slave_0: left allmulticast mode [ 387.057466][T12840] bridge_slave_0: left promiscuous mode [ 387.080364][T12775] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.2115: mark_inode_dirty error [ 387.093165][T12840] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.124844][ T28] audit: type=1400 audit(1784696677.102:2098): avc: denied { write } for pid=12824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.153969][T12840] bridge_slave_1: left allmulticast mode [ 387.170006][T12840] bridge_slave_1: left promiscuous mode [ 387.189685][T12840] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.204931][T12775] EXT4-fs error (device loop6) in ext4_setattr:6172: Corrupt filesystem [ 387.232468][T12840] bond0: (slave bond_slave_0): Releasing backup interface [ 387.240416][ T28] audit: type=1400 audit(1784696677.172:2099): avc: denied { write } for pid=12853 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.280597][T12840] bond0: (slave bond_slave_1): Releasing backup interface [ 387.317211][T12840] team0: Port device team_slave_0 removed [ 387.344223][T12840] team0: Port device team_slave_1 removed [ 387.358928][T12840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.375368][T12840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.421949][T12840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.441222][T12840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.599333][T12840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.983615][T12865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.054689][ T28] audit: type=1400 audit(1784696678.022:2100): avc: denied { write } for pid=12858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.124940][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 388.142018][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2143'. [ 388.157589][ T28] audit: type=1400 audit(1784696678.102:2101): avc: denied { write } for pid=12878 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.188930][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 388.232328][T12880] bridge1: port 1(erspan0) entered blocking state [ 388.245466][T12880] bridge1: port 1(erspan0) entered disabled state [ 388.252634][T12880] erspan0: entered allmulticast mode [ 388.260461][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.271929][T12880] erspan0: entered promiscuous mode [ 388.365953][T12880] bridge1: port 1(erspan0) entered blocking state [ 388.372515][T12880] bridge1: port 1(erspan0) entered forwarding state [ 388.544703][T12900] netlink: 'syz.7.2152': attribute type 13 has an invalid length. [ 388.572668][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2152'. [ 388.598157][T12900] netlink: 'syz.7.2152': attribute type 13 has an invalid length. [ 388.606440][ T5351] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.624220][ T5351] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.645287][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2152'. [ 388.656642][ T5351] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.676925][ T5351] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.699203][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2152'. [ 388.719728][T12905] lo speed is unknown, defaulting to 1000 [ 388.886370][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 389.146369][T12920] loop7: detected capacity change from 0 to 256 [ 389.519514][T12931] FAULT_INJECTION: forcing a failure. [ 389.519514][T12931] name failslab, interval 1, probability 0, space 0, times 0 [ 389.560941][T12931] CPU: 1 UID: 0 PID: 12931 Comm: syz.7.2159 Not tainted syzkaller #0 PREEMPT(lazy) [ 389.560975][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 389.561056][T12931] Call Trace: [ 389.561065][T12931] [ 389.561074][T12931] __dump_stack+0x1d/0x30 [ 389.561103][T12931] dump_stack_lvl+0x95/0xd0 [ 389.561129][T12931] dump_stack+0x15/0x1b [ 389.561181][T12931] should_fail_ex+0x25e/0x270 [ 389.561216][T12931] should_failslab+0x8c/0xb0 [ 389.561304][T12931] __kmalloc_noprof+0xd4/0x4a0 [ 389.561331][T12931] ? bpf_test_init+0x86/0x130 [ 389.561357][T12931] ? bpf_test_init+0x86/0x130 [ 389.561395][T12931] bpf_test_init+0x86/0x130 [ 389.561447][T12931] bpf_prog_test_run_flow_dissector+0x12c/0x360 [ 389.561485][T12931] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 389.561518][T12931] bpf_prog_test_run+0x208/0x340 [ 389.561621][T12931] __sys_bpf+0x8da/0xc30 [ 389.561668][T12931] ? vfs_write+0x780/0x990 [ 389.561694][T12931] __x64_sys_bpf+0x69/0x80 [ 389.561793][T12931] x64_sys_call+0x10cb/0x3020 [ 389.561886][T12931] do_syscall_64+0x136/0x3c0 [ 389.561909][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.561998][T12931] RIP: 0033:0x7f8e83ecde99 [ 389.562018][T12931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.562042][T12931] RSP: 002b:00007f8e82927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.562066][T12931] RAX: ffffffffffffffda RBX: 00007f8e84155fa0 RCX: 00007f8e83ecde99 [ 389.562083][T12931] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 389.562159][T12931] RBP: 00007f8e82927090 R08: 0000000000000000 R09: 0000000000000000 [ 389.562173][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.562185][T12931] R13: 00007f8e84156038 R14: 00007f8e84155fa0 R15: 00007ffe3bc925a8 [ 389.562269][T12931] [ 389.947510][T12939] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 390.605161][T12954] loop7: detected capacity change from 0 to 256 [ 391.864993][ T28] audit: type=1326 audit(1784696681.842:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 391.944377][ T28] audit: type=1326 audit(1784696681.842:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.005906][ T28] audit: type=1326 audit(1784696681.882:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.076811][ T28] audit: type=1326 audit(1784696681.882:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.124258][ T28] audit: type=1326 audit(1784696681.882:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.169658][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2176'. [ 392.195911][ T28] audit: type=1326 audit(1784696681.882:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.222622][T12977] loop3: detected capacity change from 0 to 1024 [ 392.247930][T12977] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 392.265540][T12977] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 392.285333][ T28] audit: type=1326 audit(1784696681.882:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.289454][T12977] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2176: Failed to acquire dquot type 0 [ 392.313000][ T28] audit: type=1326 audit(1784696681.882:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.1.2174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b3d12de99 code=0x7ffc0000 [ 392.348895][T12977] loop3: lost filesystem error report for type 5 error -117 [ 392.350167][T12977] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 392.357646][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 392.357665][ C0] EXT4-fs (loop3): initial error at time 1784696682: ext4_acquire_dquot:7041 [ 392.357694][ C0] EXT4-fs (loop3): last error at time 1784696682: ext4_acquire_dquot:7041 [ 392.389737][T12977] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 392.409172][T12977] EXT4-fs (loop3): 1 truncate cleaned up [ 392.416323][T12977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.433865][T12977] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2176: Failed to acquire dquot type 0 [ 392.908810][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.018062][T12990] can0: slcan on ptm0. [ 393.239790][T13001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2181'. [ 393.256102][T13001] loop3: detected capacity change from 0 to 512 [ 393.270183][T13001] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2181: corrupted in-inode xattr: e_value size too large [ 393.284293][T13001] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 393.285194][T13001] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2181: couldn't read orphan inode 15 (err -117) [ 393.306217][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 393.306239][ C1] EXT4-fs (loop3): initial error at time 1784696683: ext4_iget_extra_inode:5180: inode 15 [ 393.306294][ C1] EXT4-fs (loop3): last error at time 1784696683: ext4_iget_extra_inode:5180: inode 15 [ 393.332370][T13001] loop3: lost filesystem error report for type 5 error -117 [ 393.334376][T13001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.413610][ T8946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.505909][T13011] loop3: detected capacity change from 0 to 256 [ 393.856614][T12985] can0 (unregistered): slcan off ptm0. [ 394.031592][T13039] loop6: detected capacity change from 0 to 256 [ 394.383391][T13054] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2189'. [ 394.401126][T13054] loop6: detected capacity change from 0 to 1024 [ 394.419711][T13054] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2189: Failed to acquire dquot type 0 [ 394.440440][T13054] loop6: lost filesystem error report for type 5 error -117 [ 394.440731][T13054] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 394.448153][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 394.448174][ C0] EXT4-fs (loop6): initial error at time 1784696684: ext4_acquire_dquot:7041 [ 394.448192][ C0] EXT4-fs (loop6): last error at time 1784696684: ext4_acquire_dquot:7041 [ 394.480314][T13054] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 394.493302][T13054] EXT4-fs (loop6): 1 truncate cleaned up [ 394.500221][T13054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.522059][T13054] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2189: Failed to acquire dquot type 0 [ 395.120372][ T8998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.130887][ T8998] ================================================================== [ 395.139012][ T8998] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 395.146579][ T8998] [ 395.148934][ T8998] read-write to 0xffff888237d26528 of 1 bytes by task 13069 on cpu 1: [ 395.157101][ T8998] folio_add_lru+0xa4/0x250 [ 395.161637][ T8998] folio_add_lru_vma+0x49/0x70 [ 395.166442][ T8998] do_wp_page+0x13a5/0x2030 [ 395.170991][ T8998] handle_mm_fault+0x8bc/0x2da0 [ 395.175901][ T8998] do_user_addr_fault+0x402/0x1060 [ 395.181063][ T8998] exc_page_fault+0x62/0xa0 [ 395.185606][ T8998] asm_exc_page_fault+0x26/0x30 [ 395.190476][ T8998] rep_movs_alternative+0x4a/0xa0 [ 395.195549][ T8998] _copy_to_iter+0x141/0xea0 [ 395.200168][ T8998] __skb_datagram_iter+0xc6/0x680 [ 395.205243][ T8998] skb_copy_datagram_iter+0x3f/0xf0 [ 395.210585][ T8998] unix_stream_read_actor+0x43/0x70 [ 395.215826][ T8998] unix_stream_read_generic+0x6e9/0x15f0 [ 395.221494][ T8998] unix_stream_recvmsg+0xfc/0x130 [ 395.226563][ T8998] sock_recvmsg+0xf5/0x120 [ 395.231003][ T8998] ____sys_recvmsg+0xf5/0x280 [ 395.235726][ T8998] ___sys_recvmsg+0x11f/0x3a0 [ 395.240456][ T8998] __x64_sys_recvmsg+0xd1/0x160 [ 395.245350][ T8998] x64_sys_call+0x2b1a/0x3020 [ 395.250070][ T8998] do_syscall_64+0x136/0x3c0 [ 395.254690][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.260620][ T8998] [ 395.262963][ T8998] read to 0xffff888237d26528 of 1 bytes by task 8998 on cpu 0: [ 395.270552][ T8998] __lru_add_drain_all+0x17e/0x450 [ 395.275707][ T8998] lru_add_drain_all+0x10/0x20 [ 395.280508][ T8998] invalidate_bdev+0x47/0x70 [ 395.285125][ T8998] ext4_put_super+0x614/0x7c0 [ 395.289827][ T8998] generic_shutdown_super+0xee/0x220 [ 395.295146][ T8998] kill_block_super+0x2a/0x70 [ 395.299846][ T8998] ext4_kill_sb+0x42/0x80 [ 395.304218][ T8998] deactivate_locked_super+0x75/0x1c0 [ 395.309625][ T8998] deactivate_super+0x97/0xa0 [ 395.314341][ T8998] cleanup_mnt+0x2c3/0x340 [ 395.318798][ T8998] __cleanup_mnt+0x19/0x20 [ 395.323255][ T8998] task_work_run+0x130/0x1a0 [ 395.327900][ T8998] exit_to_user_mode_loop+0x1e4/0x8c0 [ 395.333299][ T8998] do_syscall_64+0x23c/0x3c0 [ 395.337910][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.343824][ T8998] [ 395.346160][ T8998] value changed: 0x07 -> 0x0c [ 395.350849][ T8998] [ 395.353207][ T8998] Reported by Kernel Concurrency Sanitizer on: [ 395.359366][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 395.368870][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 395.378939][ T8998] ==================================================================