last executing test programs: 3m30.996952781s ago: executing program 32 (id=27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x68, "9405ad9a07b44369ae75edb08978cc917da4b1c044b9dc5b9e1649d74760277461c61b8004dbdbaabb061bf009124519365ecb1f3eef01e991670545f9967f82741ed99fb6a54465b56cb7e4ee39cf9d27803cebf9f8df65ae54aeaf1f2b13690e60e3183d2a889b"}, &(0x7f0000000140)=0x70) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000840)=0xffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000609000/0x4000)=nil) shmat(r4, &(0x7f0000ffa000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r5, 0x8000000000000002, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000880)=""/4096) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x121000, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0xa, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x7f, 0xe, 0xf, 0xff, 0x0, 0x6eb8, 0x100, 0x3ff, r6}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r1, 0x6, 0x20, 0x4, 0x9}, &(0x7f0000000280)=0x18) prctl$PR_SET_THP_DISABLE(0x29, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r7, 0xe4, "21514fa13d73f7b1284f4557bb492aefb5d9b482a562e2d6fc382b8070f95a5b0b8e855ddee8e4800bdf29dce1a7fd9aa1b0a2627f4946c6db93f160eb11c2213ab1b3cc45de881e9a2308ab23073470a0588cc893edef0110e5cf35fa058a80c0fad8747a0e1fd12c19e3b5e65c8619e04cf7888f6a7501d9e9e736b29e45bbfb4e9cf15252f4d6fdde79dd88d58c292aed9fd1751a5f0b5b12a0b29215027372006e49a352b48f0c35eb5edf6265f159f82c966b8ef80f1b8ed567db385b62bf08ba19545381c246df7dbbe2d809102189d236d0e166205429fde06bfea174a08d0b60"}, &(0x7f0000000400)=0xec) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x1, [0x4]}, 0xa) 3m6.636640262s ago: executing program 33 (id=319): sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0xf, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x400000, 0x10, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='attr/current\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f0000001480)='c', 0x1}], 0x1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x20080, 0x10) read(r2, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000300)) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r4 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r5, 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000140)={[{@nodioread_nolock}, {@lazytime}], [{@subj_user={'subj_user', 0x3d, ','}}, {@hash}, {@permit_directio}]}, 0xff, 0x501, &(0x7f00000015c0)="$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") bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 3m2.790798832s ago: executing program 34 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x1, @multicast}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_delroute={0x1c, 0x19, 0x2, 0x70bd28, 0x25dfdbff, {0x2, 0x14, 0x10, 0x2, 0x0, 0x2, 0x0, 0x9, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20042081}, 0x40080) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071128a00f52b0000bc201000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) socket$inet(0x2, 0xa, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x2, 0xff}}, 0x18) 2m54.726523s ago: executing program 35 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000200000a14000000"], 0x70}}, 0x0) 2m51.197630814s ago: executing program 36 (id=522): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x1e, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc000080) preadv2(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/16, 0x10}], 0x1, 0xfffffffd, 0x8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000770000002a00000095000000000000003671b0e8f037a1868f99042ed9ecfa89"], &(0x7f0000000680)='GPL\x00'}, 0x5d) mremap$dontunmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ff1000/0x3000)=nil) remap_file_pages(&(0x7f00009fb000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100000) 2m36.858636386s ago: executing program 37 (id=701): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xc26ebdf96313d519, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xfffffffffffffffc, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) unshare(0x6020400) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='aut', 0x3) (async) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r2) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000100000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100b4030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='cgroup\x00', 0xfffffffffffffffc, 0xffffffffffffff9c) fremovexattr(0xffffffffffffffff, &(0x7f0000002040)=@known='system.sockprotoname\x00') (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa30080, &(0x7f0000000500)={[{@usrquota}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@nolazytime}, {@minixdf}, {@orlov}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@resuid}], [{@obj_role={'obj_role', 0x3d, '|pu\t&0&&\t'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x5ad, &(0x7f0000000b80)="$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") (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b0001006272696467650000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000003c0)) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) 2m12.926529876s ago: executing program 38 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x102, 0x155) sendfile(r2, r2, 0x0, 0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x71d}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40883}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000240), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x4040) shutdown(r1, 0x1) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4c25, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x4008880) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0xc080}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 1m20.812879596s ago: executing program 39 (id=1853): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 32) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100283d7000fcdbdf250c"], 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) (async) r6 = gettid() tkill(r6, 0x2a) epoll_pwait(r2, 0x0, 0x0, 0xffff, 0x0, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001080072635cf95a6ed256d586a9", @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m4.315817799s ago: executing program 40 (id=2088): syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2f, 0x8, 0x0, 0x3, 0x0, 0x9, 0x601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x802}, 0x10e848, 0x1224, 0xfffff218, 0x5, 0x8, 0x20005, 0x4, 0x0, 0xfffffffd, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) accept(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x80) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x4, 0x7fff0000}]}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) close_range(r3, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 48.171207765s ago: executing program 7 (id=2298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) unshare(0x28000600) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4, r0}, 0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) close(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x80000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="01000000030000000000000000000000000000000000000000000020"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000000400)}, 0x100000046) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x80) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000001040)={0x87f, 0x6, 0x3, 0x80000000, 0xa9, 0x3}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="60020000", @ANYRES16=r11, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x8844}, 0x100000c0) 47.365871392s ago: executing program 7 (id=2304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x68, "9405ad9a07b44369ae75edb08978cc917da4b1c044b9dc5b9e1649d74760277461c61b8004dbdbaabb061bf009124519365ecb1f3eef01e991670545f9967f82741ed99fb6a54465b56cb7e4ee39cf9d27803cebf9f8df65ae54aeaf1f2b13690e60e3183d2a889b"}, &(0x7f0000000140)=0x70) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000840)=0xffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x6, 0x2, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r2 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000609000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r3, 0x8000000000000002, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000880)=""/4096) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x121000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r5, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x7f, 0xe, 0xf, 0xff, 0x0, 0x6eb8, 0x100, 0x3ff, r4}, 0x20) prctl$PR_SET_THP_DISABLE(0x29, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xe4, "21514fa13d73f7b1284f4557bb492aefb5d9b482a562e2d6fc382b8070f95a5b0b8e855ddee8e4800bdf29dce1a7fd9aa1b0a2627f4946c6db93f160eb11c2213ab1b3cc45de881e9a2308ab23073470a0588cc893edef0110e5cf35fa058a80c0fad8747a0e1fd12c19e3b5e65c8619e04cf7888f6a7501d9e9e736b29e45bbfb4e9cf15252f4d6fdde79dd88d58c292aed9fd1751a5f0b5b12a0b29215027372006e49a352b48f0c35eb5edf6265f159f82c966b8ef80f1b8ed567db385b62bf08ba19545381c246df7dbbe2d809102189d236d0e166205429fde06bfea174a08d0b60"}, &(0x7f0000000400)=0xec) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x1, [0x4]}, 0xa) 46.97786017s ago: executing program 7 (id=2314): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd1c, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x5, 0x100000000000000, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x3ff, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x100, 0x3, 0x8001, 0x8000000000000400, 0x680, 0xffffffffffffffff, 0x2000000000000008, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x5, 0x0, 0x14, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x1, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x3, 0xf, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x40, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x3fffffffc}, 0x800, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x93087100, 0x0, 0x0, 0x0, 0x0, 0x0) 46.672681135s ago: executing program 7 (id=2317): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x31, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 45.791303836s ago: executing program 7 (id=2323): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) perf_event_open(&(0x7f0000000040)={0x84dae32872f4b9c, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x46, 0x1ff}, 0x0, 0x10000, 0xe4f, 0x0, 0x0, 0x280000, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xfffffffffffffffe, r2, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x400, 0x800, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) fstat(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r7, 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000009c0)=0x0) getresgid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) getgroups(0x3, &(0x7f0000000ac0)=[0xee00, 0xee01, 0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\v\x00', @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08009dbc5282a00de3a1ac0c50e55d7faa792ec4f55750f989d1735952727816ef944598e371146cf012996ea7ceaec1b89224037a9e1e463fb0d996b3683f97fe2641534074fe8a9f5267751a1a748b010000000000", @ANYRES32=r13, @ANYBLOB="10000600000000002000040000000000"], 0x8c, 0x0) r14 = getgid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5b, 0x7d, 0xa, {{0x0, 0x46, 0xffff, 0x8, {0x2, 0x0, 0x5}, 0x20000000, 0x6, 0x9, 0x7, 0xb, '://\x8d\\*,+:\':', 0x2, '*\x80', 0x3, '{[]', 0x3, '}^*'}, 0x0, '', r7, r14, 0xee00}}, 0x5b) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 45.737225148s ago: executing program 2 (id=2324): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0xfca804a0, 0xd, 0x0, &(0x7f0000000580)="b7f122ab98d1db1b883e040000", 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0xa0042, 0x13) sendfile(r1, r1, &(0x7f0000000080)=0x9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f00000002c0), &(0x7f0000000380)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, 0xaf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x207aec1968a34487, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfdfffffffffffff, 0xffffffffffffffff, 0x2) setuid(0xee01) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, 0xee01, 0x0, 0x0, 0x0, 0x48, 0x800}, 0x9, 0x8, 0x40, 0xffffffff, 0x0, 0x0, 0x2}) shmctl$SHM_LOCK(r5, 0xb) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x800400) syz_open_dev$usbfs(&(0x7f0000000400), 0x20000007c, 0x2302) 45.429438593s ago: executing program 7 (id=2328): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000800006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae9135767"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c200000000450f000000640000022f9078ffffffff0000e97940ee880b00000000010008000d0086dd080088be000000001a02420301000000040000030800fbc1f34100022406500e0200000000000004000265110800655800000003"], 0x0) 45.418018093s ago: executing program 41 (id=2328): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c200000000450f000000640000022f9078ffffffff0000e97940ee880b00000000010008000d0086dd080088be000000001a02420301000000040000030800fbc1f34100022406500e0200000000000004000265110800655800000003"], 0x0) 44.990922233s ago: executing program 2 (id=2337): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0xd, &(0x7f0000000000)=0x0) memfd_create(&(0x7f0000000040)='\x00', 0x1) open(0x0, 0x10002, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x8d7, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x0, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c00"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@orlov}]}, 0x1, 0xb66, &(0x7f0000000c40)="$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") r3 = eventfd2(0x7fffffff, 0x80000) eventfd(0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, 0x0, 0x0, 0x9, 0x0, 0x1, r3}]) 44.339190034s ago: executing program 2 (id=2341): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x2) openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0) unlink(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000850, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 44.129066854s ago: executing program 2 (id=2343): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x31, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 43.755910981s ago: executing program 2 (id=2344): syz_clone(0xa100000, &(0x7f00000000c0)="c85abd56b78396686ad04e62242ddbbc07c38a95215eb03df817eb11ef05d1c89fde7b5148950fc9ad4f0083f90576a1656523ff68360683dd005bfe156e65e0e72a7b9d5a26ff3d1c0d789641d13c5dd0e984b0a3d2edd1e14887a33b1c2aa4aca5557786b0eb", 0x67, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="2f0690607d37e4b9c6ab775d172e61948db7b6056663f9") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef852506b41edcd3beef9757a601bee936390009c5bbd000000", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x50) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0x5, &(0x7f0000000240)={@loopback, @broadcast, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x1, 0x7a, 0x6b}, 0x3c) socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) 43.477483224s ago: executing program 2 (id=2347): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000030000000000000000400000181100", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3", 0xc4, 0x81, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x18, 0x3f9, 0x20, 0x70bd2d, 0x25dfdbfc, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20040001) shutdown(r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 43.453573375s ago: executing program 42 (id=2347): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x7, 0x0}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000030000000000000000400000181100", @ANYRESOCT=0x0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3", 0xc4, 0x81, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x18, 0x3f9, 0x20, 0x70bd2d, 0x25dfdbfc, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20040001) shutdown(r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r4 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 37.840510728s ago: executing program 5 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000007000000"], 0x60}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x80, 0x2, 0x40, {{0xe, 0x4, 0x1, 0x4, 0x38, 0x64, 0x0, 0x14, 0x29, 0x0, @loopback, @multicast2, {[@rr={0x7, 0xf, 0x18, [@multicast2, @local, @rand_addr=0x64010102]}, @end, @rr={0x7, 0x13, 0x31, [@loopback, @loopback, @remote, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@can_newroute={0xf4, 0x18, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x51e}, 0x8, 0x3, 0x0, 0x0, "805085f44fc2d69d"}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "6b0b26c5b94e31b9"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x6, 0x3, 0x0, 0x0, "8dfdfcffe14202bc"}, 0x4}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "62556a0af78541fb"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x6, 0x2, 0x0, 0x0, "42430bdd74cc7aa8"}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x1, 0x1}, 0x4, 0x7, 0x0, 0x0, "8ce651e9f7e6ea04"}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "339c581fb25f589b"}, 0x1}}, @CGW_SRC_IF={0x8, 0x9, r1}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "8a1e85d82a1612c6"}, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "46eb6a4fa2829f92"}, 0x9}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) socket$packet(0x11, 0x2, 0x300) 37.745384073s ago: executing program 5 (id=2423): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_delrule={0x44, 0x21, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0xb4, 0x30, 0x7f, 0xb, 0x0, 0x0, 0x1, 0x20000}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61151800000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x842) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x28) accept4$inet(r6, 0x0, 0x0, 0x80000) shutdown(r6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x3, r5, 0x3, 0x80000}) exit(0x100000000000035) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) r8 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000340)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xb0\x1e\x1c%z\xe1\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb|\x11f\x14\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xef\xc7\xf4\n]\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xfe\xfb#\xd1\xae\xd8\x19\xea\xcb\x99\xbd\x0f]}z*\xb6\xba\xe9\xfd\xd2U)\x03Y\x9bq\x84\x1b\x88\x9dg\xbc)$\xe7\xf8\xa6\xf7\xe2R\xa2\xd9%\xaa\xd2\xc0\x15|g\xa9\\I\xd1\xb7\xd13\xaae&\\\n4\xb0/?', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 36.711534181s ago: executing program 5 (id=2448): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1862a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x72, 0xfdfeffff, 0x8, 0x10, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setpriority(0x2, 0x0, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x13, 0xfffffff5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x26]}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24424, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x106cc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x8000) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 36.542024019s ago: executing program 5 (id=2454): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 36.402161056s ago: executing program 5 (id=2456): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000009"], 0x50) 36.113789409s ago: executing program 5 (id=2459): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) 36.026572913s ago: executing program 43 (id=2459): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) 23.849029413s ago: executing program 1 (id=2629): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x31, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, 0x0) 21.701460524s ago: executing program 6 (id=2656): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f00001d7000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000160) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0xe0000526) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x20444, &(0x7f0000000000)={[{@grpjquota}, {@acl}]}, 0x1, 0x469, &(0x7f0000000880)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{}]}) r7 = dup(0xffffffffffffffff) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x1fd, 0x1, 0x0, 0xa}, 0x20) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 21.526660082s ago: executing program 1 (id=2632): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0xa888, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x97, 0x0, 0x5}]}}}], 0x38}, 0x0) 21.447726095s ago: executing program 1 (id=2660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7daa23f14926000000000000711019000000000089a3d4fffe00000095000000"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x14}, 0x94) 21.418140077s ago: executing program 1 (id=2661): mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x1000081, &(0x7f0000000400)={[{@size={'size', 0x3d, [0x30, 0x32, 0x30, 0x32, 0x78, 0x70]}}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) cachestat(r0, &(0x7f00000000c0)={0x1, 0x7}, &(0x7f0000000140), 0x0) close(r2) r3 = syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYBLOB="9ae7e581bd21f86e728ea237c28150853d56602c47d3e82643f540607a44c8ccace65b2f0aa84e86d95672dab516876f6eb8ce7302a3934153eac2113eb1de89c7a996cd18c4b20d58e7c669", @ANYRES32=r1], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f00000006c0), &(0x7f0000000740)=r2}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0xc, 0xb, 0x3, 0x0, 0x8, 0x40200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x1}, 0x2200, 0x75, 0x5, 0x3, 0x3890, 0x40, 0x2, 0x0, 0xfffffffd, 0x0, 0x11b}, r3, 0xd, r2, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001b80), &(0x7f0000001bc0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f00000000c0)}, 0x20) creat(&(0x7f0000000000)='./cgroup\x00', 0x132) 20.887845442s ago: executing program 6 (id=2667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffa], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 20.811520115s ago: executing program 6 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x20000080}, 0x896) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='%}\xa2\xbb\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x9]}, {0x200, 0xe, 0x8}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x81}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) (async) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x10}, 0x8000) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x1026, &(0x7f0000001d80)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x4, 0x1018, 0x64, 0xc5f0, 0xa, 0x67, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x4, 0xe0, 0x0, 0x1}]}}, "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"}}}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0xb8b413797f05204c}, 0x8081) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x20, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xdf41) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) (async) r9 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) (async) recvfrom(r1, &(0x7f0000000240)=""/92, 0x5c, 0x40010042, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80) 20.4936132s ago: executing program 6 (id=2671): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x31, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 20.486726811s ago: executing program 1 (id=2672): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./cgroup\x00', 0x80, 0x4) openat(r1, &(0x7f00000000c0)='./cgroup\x00', 0x280043, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) chdir(&(0x7f0000000540)='./cgroup\x00') unshare(0x22020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 20.107495478s ago: executing program 6 (id=2675): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0xe8}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getpid() syz_open_dev$usbmon(&(0x7f0000000300), 0x10000, 0x101002) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_config_ext={0xe6, 0x7}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) splice(r3, &(0x7f00000000c0)=0x7ffffffffffffffc, r2, 0x0, 0x5, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090000"], 0x28}}, 0x0) fsopen(&(0x7f0000000180)='gadgetfs\x00', 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f000000dbc0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f000000dd40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xf8, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x12}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4c77}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080}, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100000000600"/28], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x613, &(0x7f0000000180)="$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") setuid(0xee00) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0x40086604, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x4, 0x800) 19.250740519s ago: executing program 6 (id=2685): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x31, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 19.133758184s ago: executing program 44 (id=2685): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x31, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 15.835494378s ago: executing program 1 (id=2709): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2008}, 0x10ed08, 0x1224, 0x0, 0x9, 0x10000004, 0x4020005, 0x9, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffddf, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc, 0x7, {0xffffffe4}}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'wlan0\x00', {}, 0x6}) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = dup(r2) ioctl$TCXONC(r4, 0x540a, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r5 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 15.80216544s ago: executing program 45 (id=2709): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2008}, 0x10ed08, 0x1224, 0x0, 0x9, 0x10000004, 0x4020005, 0x9, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffddf, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc, 0x7, {0xffffffe4}}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'wlan0\x00', {}, 0x6}) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = dup(r2) ioctl$TCXONC(r4, 0x540a, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) r5 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.877277865s ago: executing program 8 (id=2855): r0 = socket$inet6_udp(0xa, 0x2, 0x0) chdir(&(0x7f00000000c0)='./sys\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x5e, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3a86dd6cf7011e00282b01fc000000000000000000000000000000ff020000000000000002000000000001"], 0x0) 2.76438233s ago: executing program 8 (id=2856): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x340, 0x2, 0x8f20, 0x7, 0x0, 0x808}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000619d0dc314f8e98640f4da000000000c0000000c00000007000000040000000000000604000000003030305f2e00"], &(0x7f0000000a40)=""/191, 0x2b, 0xbf, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write(0xffffffffffffffff, &(0x7f0000000080)="1400", 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @private2}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000300)={0x25bc, 0x8, [{0xc, 0x1}, {0x8}, {0x7}, {0xd, 0x1}, {0x6}, {0x8}, {0x1, 0x1}, {0xf}]}) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x10022, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRES64=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 2.763806891s ago: executing program 9 (id=2857): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = open$dir(&(0x7f0000000040)='./cgroup\x00', 0x80, 0x4) openat(r1, &(0x7f00000000c0)='./cgroup\x00', 0x280043, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) chdir(&(0x7f0000000540)='./cgroup\x00') unshare(0x22020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 2.628703027s ago: executing program 9 (id=2860): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x9b00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = socket(0x40000000015, 0x5, 0x710) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) acct(&(0x7f0000000040)='./tracing\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.442313295s ago: executing program 9 (id=2862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x88}}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)={0x0, 'team_slave_0\x00', {0x1}, 0x6}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x6, 0x14, 0x200, &(0x7f0000000200)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) 2.414055747s ago: executing program 0 (id=2863): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015000100fdffffff00000008021800fd", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000600)={@random="816c6003122a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x3a, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x3a, 0x0, @wg=@data={0x4, 0x7fffffff, 0x9, "e7e72cc8b224354bd29c2c5222ce0f9c4784339855658e68b4a027dec31572f34ab9"}}}}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000002740)=[{&(0x7f00000025c0)=""/165, 0xa5}], 0x1) lseek(0xffffffffffffffff, 0x2, 0x1) 2.249163535s ago: executing program 9 (id=2864): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x5, 0x400, 0x10007fff, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0xff, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) unshare(0x28000600) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x2000000000000091, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7f1da7791e6e0e8a265173ca082b65d210aa14f1368e8be0c9ed67e5cfcd5c76152057c2abf5bca68facf3a1", 0x2c}, {&(0x7f0000000040)="c4108620c104d45f6cd29d4c378087bb139add7b6947b8f6362f013d5361449b72463b9b43b818fab0657fed19e4acc39e0f1cc04332348fdeda23720394025323d58c6da154a5985b0878d5ab2e7d57879dbef4f94eb487e226b9b65720018075478b67c7bbf4ac17912e3706be2bf3aba5d2c39b21c92b80ac352bc55a2cd880de765e7e37bb8ac0628f1f36eaa8e93a530923e53eb2ef33938b16b71d779e742f6a8dd6db1e67423f7177f7220498f5796235de620449eef513c6c97084182ba18d03fd4a29d678ec2c730c242766ad409b7e93b22743cfdb0b1fd7255abdd93fc2478d", 0xe5}], 0x2, 0x0) 2.248547524s ago: executing program 3 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYBLOB, @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100, 0x0, 0x3000}, 0x2800804c) 2.221141165s ago: executing program 0 (id=2867): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x5e}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x1, 0x2, 0x401, 0x8001}, 0x0, 0x5, 0x10000002}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 2.017351515s ago: executing program 0 (id=2868): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8518}, 0x201, 0x6, 0x2000, 0x6, 0x10000800000, 0x44, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) 1.832860494s ago: executing program 0 (id=2869): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x3c8, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 1.503760539s ago: executing program 3 (id=2871): close(0xffffffffffffffff) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x2) symlink(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4000, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_setup(0x1b7b, 0x0) 1.502075679s ago: executing program 0 (id=2872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003704e0788cacb8f5655eedd90296", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012004e22000006000f"], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000081) unshare(0x26020480) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) truncate(0x0, 0x28) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0xfffffffd, 0x10000) getxattr(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)=@random={'osx.', 'nfs\x00'}, &(0x7f0000000440)=""/251, 0xfb) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) setsockopt$inet_buf(r2, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r3 = accept$inet(r2, 0x0, 0x0) read(r3, &(0x7f0000000100), 0x4) 1.453314352s ago: executing program 8 (id=2873): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x8, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x47b8, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff037e02000000003f420f00000000003bf81b05ff000000", 0x38, 0x0, 0x0, 0x2}]) 1.429433103s ago: executing program 3 (id=2874): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x8, &(0x7f0000000240)=0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)='6', 0x1}], 0x1}}], 0x2, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x40, 0x2, 0x4, 0x3, 0x6, 0x0, 0x4, 0x3, 0x6b, 0x4, 0x0, 0x6, 0xc7, 0x10}, 0xe) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x47b8, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff037e02000000003f420f00000000003bf81b05ff000000", 0x38, 0x0, 0x0, 0x2}]) 1.309308748s ago: executing program 4 (id=2876): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) socket$l2tp6(0xa, 0x2, 0x73) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000040)=@ll={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000003c0)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000140)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000280)="f76e14895b4c948e303e1fe34234a0", 0xf}], 0x3}, 0x44000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x24, 0x0, '.\x00'}}) 1.308280199s ago: executing program 8 (id=2877): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0xd, &(0x7f0000000000)=0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x1) r2 = open(0x0, 0x10002, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x8d7, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x0, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c00"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@orlov}]}, 0x1, 0xb66, &(0x7f0000000c40)="$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") r5 = eventfd2(0x7fffffff, 0x80000) eventfd(0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f0000000600)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0xfff, r1, &(0x7f0000000080)="67a388be3d73512188e940e7fb2fa28c783731d6546bd6cc05bedd53f4f5cadf89d040eaaf1eecf30bea1fe8f76c4674a81cd776e9d0d881426e78bca19264eef3bf7074071d1ae03785ddd806af02cfb0e7db90f339bf80d62665c9ad567235406a08f9751866c3afc63c5a307d8bc912fec8d880805f6e8c751136e86ff28ea47fe9de4666b3a00f7074991c723e8597db4d4757d487676501e692f8c001095796d096d10cc562c7e0c872afd772d928594d248ce1708a19e7a20daaece86767a75fc57a59ccb69b345fa2811a53546d9bb500f84f2e6b24d6689e93706f5a541b3e76d99d", 0xe6, 0x8000000000000000, 0x0, 0x2, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x2, r3, 0x0, 0x0, 0x9, 0x0, 0x1, r5}]) 1.221223472s ago: executing program 9 (id=2878): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040080) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xc0, 0x10, 0x401, 0x70bd26, 0xffc3, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffffff8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x6}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xffff7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x40009}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xc0}}, 0x0) 1.218118312s ago: executing program 3 (id=2879): kexec_load(0xfffffffffffffffc, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000001, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x2408c014) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x64, 0x66, 0x38, 0x32, 0x36, 0x64, 0x31, 0x31, 0x66, 0x66, 0x65, 0x50, 0x55, 0x62, 0x66]}, &(0x7f0000000800)={0x0, "06cda01f8fbe739abb8adeaa3a7832a93151ee33282852146832ae4c692fd0a9700964f3cf3a743bc7f13015cb8d9f12426a6e12cecac6459a4068797655633f", 0x1b}, 0x48, 0xfffffffffffffffa) keyctl$read(0xb, r1, &(0x7f0000000680)=""/187, 0xbb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0xa) 1.172899735s ago: executing program 4 (id=2880): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40430a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2e000000) 1.082385579s ago: executing program 3 (id=2881): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1, @perf_config_ext={0x7ff, 0x1}, 0x201043, 0x80000001, 0xfffffffc, 0x0, 0x102d, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0xd0000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x8, 0x2a, 0x9b}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r6}, 0x8) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/module/printk/parameters/time\x00', 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780), &(0x7f00000007c0)=ANY=[], 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 1.029306782s ago: executing program 4 (id=2882): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) mknod$loop(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x100, 0x0) sendto(r0, &(0x7f0000000400)="56fb3ba402cdb2fb8bf50b92725912bba25a6fcad2204159e3a8bb20eefdd6b22f55362f61f5050c36ccec891634b115a8a04b3d0a5c5f56aa8dabdd7db09d021f166795a874abe8c070127ac86287c36343d13d05bce97d5360c4c25a3c82e9196a8843ed13f4b7dbc92eaa46a4aa7701228177de32dc193beb21f85d454b877d1adc3e0e6f03553b656cdec81bb458bce9a55ae9b254d51ab156b5f1c99e73981c12ecc661da21fac11640468bcf303063388428dddabeaa35ec238d0c7264fe81ab4d012856dc0f13a75acac96a06fa97be7d34966596cd36c120468eb2b639dc353754c518358e228b50b27235", 0xef, 0x8004, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x0, 0x1, 0x4, 0x2}}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = gettid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r3, 0xbfffffffffffffff, r2, 0x1) getgid() (async) getgid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) socket(0x28, 0x0, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x2, 0x80, 0x30}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001340)={0x2, &(0x7f0000000080)=[{0x14, 0xb, 0xfd}, {0x16, 0x2, 0x0, 0x7ffffdbd}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001340)={0x2, &(0x7f0000000080)=[{0x14, 0xb, 0xfd}, {0x16, 0x2, 0x0, 0x7ffffdbd}]}) 873.106679ms ago: executing program 4 (id=2883): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x3c8, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 841.48408ms ago: executing program 3 (id=2884): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x340, 0x2, 0x8f20, 0x7, 0x0, 0x808}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000619d0dc314f8e98640f4da000000000c0000000c00000007000000040000000000000604000000003030305f2e00"], &(0x7f0000000a40)=""/191, 0x2b, 0xbf, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write(0xffffffffffffffff, &(0x7f0000000080)="1400", 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @private2}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000300)={0x25bc, 0x8, [{0xc, 0x1}, {0x8}, {0x7}, {0xd, 0x1}, {0x6}, {0x8}, {0x1, 0x1}, {0xf}]}) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}], 0x1, 0x10022, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRES64=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 768.819393ms ago: executing program 4 (id=2885): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) stat(&(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000280)=[0xee01]) chown(&(0x7f0000000180)='./dev\x00', r2, r3) write(r1, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000003f0000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 629.14433ms ago: executing program 4 (id=2886): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r3, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r3, &(0x7f0000000140)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede", 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r2, 0x3}}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x80, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, 0x3}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffffff8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x6}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e26, 0x6, @mcast2, 0xffffffba}, 0x1c) 335.189894ms ago: executing program 9 (id=2887): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r0, &(0x7f0000000200)=@alg, &(0x7f0000000300)=0x80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @private=0xa010100}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x174}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newtfilter={0x10c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x9}, {0xb, 0x2}, {0x300, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_NAME={0x24, 0x7, './sys/kernel/mm/lru_gen/enabled\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xfff3}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x7, 0x8, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x880}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0xc, 0x4, 0x1, 0x4e}, {0x4, 0xfc, 0x2f, 0x1}, {0x6, 0x41, 0xa, 0x3}, {0x4, 0x38, 0x50, 0x6}, {0x7ee6, 0x9, 0x6}, {0x1, 0x6, 0xf, 0x7fffffff}, {0xfffa, 0x9, 0x7, 0x80000004}]}}, @TCA_BPF_NAME={0xa, 0x7, './sys\x00'}, @TCA_BPF_NAME={0x24, 0x7, './sys/kernel/mm/lru_gen/enabled\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) open(&(0x7f0000000380)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1db042, 0x84) (async, rerun: 64) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0x0, 0x6c8) (rerun: 64) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x2404848c) 91.463696ms ago: executing program 8 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}, 0x1, 0x300}, 0x0) 991.78µs ago: executing program 0 (id=2889): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c4}, 0x44014) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x1, 0x9, 0xd75b}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000a80)={0xa, 0x4e20, 0x8001, @mcast1, 0x3}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac056502000000000001090224000100000000090400040203000000092102100001221800090581030800000005"], 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) semget(0x0, 0x2, 0x18) unshare(0x2040400) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x9, @private0, 0xe70}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 0s ago: executing program 8 (id=2890): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) (async) splice(r1, &(0x7f0000000100), r0, &(0x7f0000000140)=0xffffffff, 0x7fff, 0xc) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x800100000000, 0x6bec02) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000340)) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) (async, rerun: 64) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000140)="a77e9b0c734664b580d122216b980c964fb40ab1f2c9e7c334e7c697067fa430ccee9907f8118c8e1d62d40cdb3c7c7584da2903c37d7e909f5d47e36d94eae50fe0dcef0b7307deec35d9") (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xd, &(0x7f0000000180)={0x0, 0x3938700}) write(r3, &(0x7f0000000000)='3', 0x4e) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@md0, 0x0, 0x0) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000002c0)={@private2, 0x0}, &(0x7f0000000300)=0x14) (async, rerun: 32) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000a00), 0x4) (rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240)={0x10000f, 0x100070, 0x380000}, 0xfffffffffffffe86) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000540)={0x0, @rand_addr, @initdev}, &(0x7f0000000580)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x344, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-(#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbb7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd02a}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x04*\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/!,2.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8e9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "73dad491ceba14506ee07d16ae87ae6d550e2ad71ab79b2cdcdaee64cf4db9f52fe98f8e610f6cfb22d1bf3e5c3107e045e7bced588d58d2270501ef1675643cf01493a49ca57ffe0866286d02818fa4427a1bd46a679525e48bab8e757693476d57ba6a9a804af3ab007f6bc68f4e1c5cd2c87a092b96d1b253ba89b1e0284c98385495aa733c4931879cdaa6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6c, 0x4, "955baf2144bb56cb5d48bd95e1855671c2bf47770372a86ea0e4c0300638cb950f383f222bf14a17c55a51d953a5e7f20058d111c8cedbfbec715e1665c10385a556e4609180704f3c6c337d59dced25c409f0bdb1571c1d74e90ef7b595d09554be75ba6e42308a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6112}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$^)#^&\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/usb/hiddev#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x40}, 0x4040844) kernel console output (not intermixed with test programs): v0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.834312][T13697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.834327][T13697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.834350][T13697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.956202][T13697] hsr_slave_0: entered promiscuous mode [ 204.958265][T13697] hsr_slave_1: entered promiscuous mode [ 204.992637][ T29] audit: type=1400 audit(1790173651.185:3923): avc: denied { write } for pid=13788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.040337][T13814] loop5: detected capacity change from 0 to 1764 [ 205.041608][ T29] audit: type=1400 audit(1790173651.240:3924): avc: denied { mount } for pid=13811 comm="syz.5.2360" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 205.048729][ T29] audit: type=1400 audit(1790173651.240:3925): avc: denied { create } for pid=13813 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 205.087523][ T29] audit: type=1400 audit(1790173651.268:3926): avc: denied { watch } for pid=13811 comm="syz.5.2360" path="/494/file1/file1" dev="loop5" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 205.124502][ T29] audit: type=1400 audit(1790173651.314:3927): avc: denied { write } for pid=13817 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.128123][T13820] loop8: detected capacity change from 0 to 512 [ 205.172969][T13820] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.173034][T13820] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.185008][ T5636] IPVS: stop unused estimator thread 0... [ 205.254596][ T5683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.304781][T13590] veth0_vlan: entered promiscuous mode [ 205.313378][T13590] veth1_vlan: entered promiscuous mode [ 205.331929][T13842] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2364'. [ 205.338796][T13590] veth0_macvtap: entered promiscuous mode [ 205.343506][T13590] veth1_macvtap: entered promiscuous mode [ 205.356942][T13590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.362492][T13590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.384576][ T5578] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.384766][ T5578] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.385157][ T5578] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.385491][ T5578] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.477551][T13855] loop5: detected capacity change from 0 to 512 [ 205.478889][T13855] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.485263][T13855] EXT4-fs (loop5): 1 truncate cleaned up [ 205.485644][T13855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.492979][T13853] nfs4: Unknown parameter 'eo' [ 205.651908][ T3593] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.673525][T13882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2371'. [ 205.679844][T13885] loop5: detected capacity change from 0 to 164 [ 205.690220][T13885] isofs_fill_super: root inode is not a directory. Corrupted media? [ 205.743886][T13871] loop8: detected capacity change from 0 to 1024 [ 205.746871][T13871] EXT4-fs: Ignoring removed i_version option [ 205.761527][T13871] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.761954][T13871] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.769495][T13871] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 205.770027][T13871] EXT4-fs (loop8): orphan cleanup on readonly fs [ 205.774825][T13871] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.2369: Freeing blocks not in datazone - block = 0, count = 4096 [ 205.774931][T13871] loop8: lost filesystem error report for type 5 error -117 [ 205.775315][T13871] EXT4-fs (loop8): Remounting filesystem read-only [ 205.775454][T13871] EXT4-fs (loop8): 1 orphan inode deleted [ 205.788995][T13871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.881838][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2374'. [ 206.132035][T13921] raw_sendmsg: syz.5.2378 forgot to set AF_INET. Fix it! [ 206.389179][T13697] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 206.401197][T13697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.420080][T13697] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 206.437327][T13697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.440695][T13697] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.462535][T13697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.464607][T13697] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.486086][T13697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.524332][ T5683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.618399][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.618863][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.656067][T13697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.678771][T13697] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.683227][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.683293][ T5578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.697905][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.697951][ T5596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.774990][T13962] loop6: detected capacity change from 0 to 1024 [ 206.775456][T13962] EXT4-fs: Ignoring removed orlov option [ 206.804876][T13962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.863578][T13590] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.947300][T13984] ip6t_rt: unknown flags 1F [ 207.007680][T13991] loop8: detected capacity change from 0 to 164 [ 207.082507][T13697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.155594][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 207.340001][T13697] veth0_vlan: entered promiscuous mode [ 207.344074][T13697] veth1_vlan: entered promiscuous mode [ 207.369730][T13697] veth0_macvtap: entered promiscuous mode [ 207.372943][T13697] veth1_macvtap: entered promiscuous mode [ 207.393990][T13697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.397390][T13697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.416221][ T5596] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.476288][ T5636] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.476494][ T5636] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.476586][ T5636] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.661033][T14053] loop9: detected capacity change from 0 to 1024 [ 207.662293][T14053] EXT4-fs: Ignoring removed orlov option [ 207.687355][T14053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.771078][T13697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.854421][T14064] loop9: detected capacity change from 0 to 1024 [ 207.854824][T14064] EXT4-fs: dax option not supported [ 208.325661][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2402'. [ 208.464690][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2405'. [ 208.464852][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2405'. [ 208.543218][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2406'. [ 208.552683][T14147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.552763][T14147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.625232][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 208.641341][T14156] netlink: 'syz.9.2410': attribute type 11 has an invalid length. [ 208.832171][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 208.994700][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 208.994758][ T29] audit: type=1400 audit(1790173654.887:4012): avc: denied { write } for pid=14199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.033607][ T29] audit: type=1400 audit(1790173654.914:4013): avc: denied { write } for pid=14217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.037638][T14207] syz_tun: entered promiscuous mode [ 209.057033][T14207] syz_tun: left promiscuous mode [ 209.086556][T14220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 209.091366][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 209.121329][ T29] audit: type=1400 audit(1790173654.997:4014): avc: denied { read } for pid=14205 comm="syz.5.2423" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.148805][T14208] 9p: Bad value for 'rfdno' [ 209.227398][ T29] audit: type=1400 audit(1790173656.108:4015): avc: denied { create } for pid=14237 comm="syz.1.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.228598][ T29] audit: type=1400 audit(1790173656.108:4016): avc: denied { setopt } for pid=14237 comm="syz.1.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.228932][ T29] audit: type=1400 audit(1790173656.108:4017): avc: denied { ioctl } for pid=14237 comm="syz.1.2427" path="socket:[40163]" dev="sockfs" ino=40163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.229096][ T29] audit: type=1400 audit(1790173656.108:4018): avc: denied { bind } for pid=14237 comm="syz.1.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.328811][T14241] __nla_validate_parse: 6 callbacks suppressed [ 209.328836][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2428'. [ 209.354338][ T29] audit: type=1400 audit(1790173656.210:4019): avc: denied { write } for pid=14228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.390064][ T29] audit: type=1400 audit(1790173656.246:4020): avc: denied { write } for pid=14253 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.426721][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 209.434380][T14247] loop7: detected capacity change from 512 to 0 [ 209.509534][ T29] audit: type=1400 audit(1790173656.357:4021): avc: denied { setopt } for pid=14261 comm="syz.8.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.510683][T14262] netlink: 'syz.8.2433': attribute type 3 has an invalid length. [ 209.510697][T14262] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2433'. [ 209.592846][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2436'. [ 209.596311][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.596544][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.600018][T14270] veth1_to_team: entered promiscuous mode [ 209.607890][T14270] veth1_to_team: left promiscuous mode [ 209.643927][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2434'. [ 209.667483][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2436'. [ 209.670535][T14270] veth1_to_team: entered promiscuous mode [ 209.674672][T14270] veth1_to_team: left promiscuous mode [ 209.804933][T14303] loop6: detected capacity change from 0 to 512 [ 209.827043][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2441'. [ 209.882849][ T3387] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.921723][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2444'. [ 210.048218][T14344] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2448'. [ 210.075359][T14342] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2448'. [ 210.170162][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 210.213340][T14375] loop5: detected capacity change from 0 to 512 [ 210.228161][T14375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.230525][T14375] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.2454: corrupted in-inode xattr: invalid ea_ino [ 210.230556][T14375] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.230806][T14375] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2454: couldn't read orphan inode 15 (err -117) [ 210.230893][T14375] loop5: lost filesystem error report for type 5 error -117 [ 210.233447][T14375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.298631][ T3593] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 210.299509][ T3593] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 210.299760][ T3593] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 210.443230][ T3387] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.453772][T14381] syz_tun (unregistering): left allmulticast mode [ 210.462000][T14381] syz_tun (unregistering): left promiscuous mode [ 210.579297][T14381] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.617331][ T5636] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.617366][ T5636] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.738842][ T5636] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.738879][ T5636] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.796050][ T5636] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.796082][ T5636] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.871876][ T5636] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.871912][ T5636] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.052396][ T5636] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.052466][ T5636] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.083794][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.083936][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.142423][ T5636] bridge_slave_1: left allmulticast mode [ 211.142445][ T5636] bridge_slave_1: left promiscuous mode [ 211.142547][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.145296][ T5636] bridge_slave_0: left allmulticast mode [ 211.145314][ T5636] bridge_slave_0: left promiscuous mode [ 211.145438][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.229475][ T5636] ip6gretap0 (unregistering): left promiscuous mode [ 211.263954][T14481] loop6: detected capacity change from 0 to 1024 [ 211.272826][T14481] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 211.290550][ T5636] batman_adv: batadv0: Interface deactivated: macvtap1 [ 211.292410][T14481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.321449][T14394] FAULT_INJECTION: forcing a failure. [ 211.321449][T14394] name failslab, interval 1, probability 0, space 0, times 0 [ 211.321478][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.8.2457 Not tainted syzkaller #0 PREEMPT(lazy) [ 211.321576][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.321587][T14394] Call Trace: [ 211.321592][T14394] [ 211.321599][T14394] __dump_stack+0x1d/0x30 [ 211.321623][T14394] dump_stack_lvl+0x95/0xd0 [ 211.321683][T14394] dump_stack+0x15/0x1b [ 211.321700][T14394] should_fail_ex+0x262/0x280 [ 211.321722][T14394] ? __send_signal_locked+0x14d/0x750 [ 211.321868][T14394] should_failslab+0x8c/0xb0 [ 211.321895][T14394] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 211.322000][T14394] ? __send_signal_locked+0x14d/0x750 [ 211.322031][T14394] __send_signal_locked+0x14d/0x750 [ 211.322087][T14394] ? __rcu_read_unlock+0x33/0x70 [ 211.322161][T14394] do_notify_parent+0x55f/0x600 [ 211.322196][T14394] release_task+0x9bf/0xb90 [ 211.322226][T14394] do_exit+0xd79/0x1510 [ 211.322296][T14394] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 211.322328][T14394] do_group_exit+0xfe/0x140 [ 211.322429][T14394] ? get_signal+0xe00/0xf10 [ 211.322484][T14394] get_signal+0xe07/0xf10 [ 211.322570][T14394] arch_do_signal_or_restart+0x96/0x480 [ 211.322703][T14394] exit_to_user_mode_loop+0x15d/0x8c0 [ 211.322737][T14394] do_syscall_64+0x212/0x360 [ 211.322784][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.322808][T14394] RIP: 0033:0x7f912af4e159 [ 211.322901][T14394] Code: Unable to access opcode bytes at 0x7f912af4e12f. [ 211.322912][T14394] RSP: 002b:00007f91299860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 211.322933][T14394] RAX: fffffffffffffe00 RBX: 00007f912b1d6098 RCX: 00007f912af4e159 [ 211.323005][T14394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f912b1d6098 [ 211.323017][T14394] RBP: 00007f912b1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.323037][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.323049][T14394] R13: 00007f912b1d6128 R14: 00007fffd42dc7b0 R15: 00007fffd42dc898 [ 211.323069][T14394] [ 211.324590][ T5636] batman_adv: batadv0: Removing interface: macvtap1 [ 211.477260][T13590] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.563292][ T5636] bond0 (unregistering): Released all slaves [ 211.568994][ T5636] bond1 (unregistering): Released all slaves [ 211.576982][ T5636] bond2 (unregistering): Released all slaves [ 211.602486][ T5636] 0: left promiscuous mode [ 211.669956][ T5636] tipc: Left network mode [ 211.682862][ T5636] IPVS: stopping backup sync thread 9908 ... [ 211.727193][ T5636] hsr_slave_0: left promiscuous mode [ 211.727561][ T5636] hsr_slave_1: left promiscuous mode [ 211.727856][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.727869][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.762193][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.762208][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.794956][ T5636] veth1_macvtap: left promiscuous mode [ 211.794984][ T5636] veth0_macvtap: left promiscuous mode [ 211.816939][T14534] loop6: detected capacity change from 0 to 1024 [ 211.817557][T14534] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.817578][T14534] EXT4-fs (loop6): group descriptors corrupted! [ 211.890667][T14528] loop9: detected capacity change from 0 to 512 [ 211.910036][T14528] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.2474: iget: bad i_size value: 38620345925642 [ 211.910079][T14528] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.911659][T14528] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2474: couldn't read orphan inode 15 (err -117) [ 211.911787][T14528] loop9: lost filesystem error report for type 5 error -117 [ 211.941703][T14540] loop6: detected capacity change from 0 to 512 [ 211.945435][T14540] ext2: Invalid gid '0x00000000ffffffff' [ 211.968820][T14528] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.063076][ T5636] team0 (unregistering): Port device team_slave_1 removed [ 212.076649][ T5636] team0 (unregistering): Port device team_slave_0 removed [ 212.128642][T14549] loop6: detected capacity change from 0 to 8192 [ 212.238418][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.238449][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.238528][T14423] bridge_slave_0: entered allmulticast mode [ 212.238952][T14423] bridge_slave_0: entered promiscuous mode [ 212.240060][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.240166][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.240223][T14423] bridge_slave_1: entered allmulticast mode [ 212.240644][T14423] bridge_slave_1: entered promiscuous mode [ 212.281093][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.286820][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.334937][T14423] team0: Port device team_slave_0 added [ 212.339357][T14423] team0: Port device team_slave_1 added [ 212.392001][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.392018][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.392132][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.395822][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.395834][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.395862][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.468759][T14423] hsr_slave_0: entered promiscuous mode [ 212.475642][T14423] hsr_slave_1: entered promiscuous mode [ 212.475880][T14423] debugfs: 'hsr0' already exists in 'hsr' [ 212.475892][T14423] Cannot create hsr debugfs directory [ 212.595896][ T5636] IPVS: stop unused estimator thread 0... [ 212.719958][ T5636] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm kworker/u8:123: bg 0: block 5: invalid block bitmap [ 212.720187][ T5636] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 212.720212][ T5636] EXT4-fs (loop9): This should not happen!! Data will be lost [ 212.720212][ T5636] [ 212.720253][ T5636] EXT4-fs (loop9): Total free blocks count 0 [ 212.720267][ T5636] EXT4-fs (loop9): Free/Dirty block details [ 212.720360][ T5636] EXT4-fs (loop9): free_blocks=0 [ 212.720373][ T5636] EXT4-fs (loop9): dirty_blocks=2660 [ 212.720386][ T5636] EXT4-fs (loop9): Block reservation details [ 212.720397][ T5636] EXT4-fs (loop9): i_reserved_data_blocks=2660 [ 212.754385][ T5636] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 608 with error 28 [ 212.770503][T13697] EXT4-fs warning (device loop9): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 213.043152][T14613] syzkaller0: entered promiscuous mode [ 213.043169][T14613] syzkaller0: entered allmulticast mode [ 213.122555][T14621] tipc: Started in network mode [ 213.122660][T14621] tipc: Node identity d66e9db26beb, cluster identity 4711 [ 213.122696][T14621] tipc: Enabled bearer , priority 0 [ 213.126550][T14621] tipc: Resetting bearer [ 213.185608][T14423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.188334][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.188969][T14423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.217431][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.218129][T14423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.221726][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.222277][T14423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.225716][T14423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.309223][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.313470][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.330938][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.330968][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.334265][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.334297][ T5633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.418417][T14612] tipc: Resetting bearer [ 213.419970][T14612] tipc: Disabling bearer [ 213.456868][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 213.634533][T14623] loop6: detected capacity change from 0 to 4096 [ 213.640204][T14623] EXT4-fs: Ignoring removed orlov option [ 213.665718][T14623] EXT4-fs (loop6): invalid #clusters per group: 32768 [ 213.686231][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.843689][T14423] veth0_vlan: entered promiscuous mode [ 213.849091][T14423] veth1_vlan: entered promiscuous mode [ 213.851939][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 213.907397][T14423] veth0_macvtap: entered promiscuous mode [ 213.915482][T14423] veth1_macvtap: entered promiscuous mode [ 213.938717][T14423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.945966][T14423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.007218][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.008685][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.009043][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.009116][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.065780][T14716] hub 8-0:1.0: USB hub found [ 214.065841][T14716] hub 8-0:1.0: 8 ports detected [ 214.120388][T14732] loop0: detected capacity change from 0 to 1024 [ 214.120863][T14732] EXT4-fs: Ignoring removed orlov option [ 214.146058][T14732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.186950][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 214.224612][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.423408][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 214.423424][ T29] audit: type=1326 audit(1790173660.899:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.426218][ T29] audit: type=1326 audit(1790173660.899:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.426436][ T29] audit: type=1326 audit(1790173660.899:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.426640][ T29] audit: type=1326 audit(1790173660.899:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.426810][ T29] audit: type=1326 audit(1790173660.899:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.427071][ T29] audit: type=1326 audit(1790173660.899:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.427144][ T29] audit: type=1326 audit(1790173660.899:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.429122][ T29] audit: type=1326 audit(1790173660.899:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.429347][ T29] audit: type=1326 audit(1790173660.899:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.429527][ T29] audit: type=1326 audit(1790173660.899:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.1.2506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7ffc0000 [ 214.696899][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 214.910967][T14773] loop0: detected capacity change from 0 to 164 [ 214.930309][T14773] iso9660: Unknown parameter 'map8acorn' [ 215.054534][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 215.171203][T14823] ip_tables: iptables: counters copy to user failed while replacing table [ 215.199574][T14771] loop0: detected capacity change from 0 to 164 [ 215.205028][T14771] iso9660: Unknown parameter 'map8acorn' [ 215.409692][T14848] __nla_validate_parse: 6 callbacks suppressed [ 215.409708][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2524'. [ 215.538598][T14863] loop9: detected capacity change from 0 to 512 [ 215.544129][T14863] ext4: Bad value for 'commit' [ 215.682903][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 215.908732][T14908] msdos: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 215.956433][T14883] EXT4-fs: Ignoring removed orlov option [ 215.989934][T14883] EXT4-fs (loop0): invalid #clusters per group: 32768 [ 216.129667][T14928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 217.288441][T15013] netlink: 143932 bytes leftover after parsing attributes in process `syz.6.2547'. [ 217.307173][T15013] netlink: zone id is out of range [ 217.307193][T15013] netlink: zone id is out of range [ 217.307246][T15013] netlink: zone id is out of range [ 217.307281][T15013] netlink: zone id is out of range [ 217.307303][T15013] netlink: zone id is out of range [ 217.307347][T15013] netlink: zone id is out of range [ 217.307364][T15013] netlink: zone id is out of range [ 217.307379][T15013] netlink: zone id is out of range [ 217.307476][T15013] netlink: zone id is out of range [ 217.463523][T15023] set_capacity_and_notify: 2 callbacks suppressed [ 217.463542][T15023] loop6: detected capacity change from 0 to 2048 [ 217.885908][T15024] loop8: detected capacity change from 0 to 128 [ 217.909139][T15024] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 217.946111][T15024] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.948559][T15024] ext2 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.007100][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 218.049750][T15052] FAULT_INJECTION: forcing a failure. [ 218.049750][T15052] name failslab, interval 1, probability 0, space 0, times 0 [ 218.049780][T15052] CPU: 0 UID: 0 PID: 15052 Comm: syz.6.2556 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.049806][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.049819][T15052] Call Trace: [ 218.049826][T15052] [ 218.049912][T15052] __dump_stack+0x1d/0x30 [ 218.049945][T15052] dump_stack_lvl+0x95/0xd0 [ 218.049994][T15052] dump_stack+0x15/0x1b [ 218.050054][T15052] should_fail_ex+0x262/0x280 [ 218.050080][T15052] ? security_file_alloc+0x32/0xf0 [ 218.050164][T15052] should_failslab+0x8c/0xb0 [ 218.050195][T15052] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 218.050276][T15052] ? security_file_alloc+0x32/0xf0 [ 218.050309][T15052] security_file_alloc+0x32/0xf0 [ 218.050388][T15052] init_file+0x5b/0x1b0 [ 218.050489][T15052] alloc_empty_file+0x85/0x1e0 [ 218.050589][T15052] path_openat+0x50/0x10d0 [ 218.050620][T15052] ? kstrtouint+0x76/0xc0 [ 218.050653][T15052] do_file_open+0x16c/0x290 [ 218.050816][T15052] do_sys_openat2+0xa0/0x130 [ 218.050842][T15052] __x64_sys_openat+0xf2/0x120 [ 218.050868][T15052] x64_sys_call+0x1f72/0x2550 [ 218.050931][T15052] do_syscall_64+0x112/0x360 [ 218.050963][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.050983][T15052] RIP: 0033:0x7f5ed1f3e98e [ 218.051000][T15052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.051039][T15052] RSP: 002b:00007f5ed09d6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.051061][T15052] RAX: ffffffffffffffda RBX: 00007f5ed09d76c0 RCX: 00007f5ed1f3e98e [ 218.051077][T15052] RDX: 0000000000000002 RSI: 00007f5ed09d6f90 RDI: ffffffffffffff9c [ 218.051092][T15052] RBP: 00007f5ed09d7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.051106][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.051119][T15052] R13: 00007f5ed2206038 R14: 00007f5ed2205fa0 R15: 00007ffe80e66d68 [ 218.051255][T15052] [ 218.096443][ T5683] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.167274][T15060] syzkaller0: left promiscuous mode [ 218.167293][T15060] syzkaller0: left allmulticast mode [ 218.359272][T15075] loop0: detected capacity change from 0 to 512 [ 218.360901][T15075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 218.363020][T15075] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.2560: bad orphan inode 131083 [ 218.363042][T15075] loop0: lost filesystem error report for type 5 error -117 [ 218.364144][T15075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.526076][T15085] FAULT_INJECTION: forcing a failure. [ 218.526076][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 218.526101][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.8.2561 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.526129][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.526140][T15085] Call Trace: [ 218.526146][T15085] [ 218.526152][T15085] __dump_stack+0x1d/0x30 [ 218.526175][T15085] dump_stack_lvl+0x95/0xd0 [ 218.526195][T15085] dump_stack+0x15/0x1b [ 218.526213][T15085] should_fail_ex+0x262/0x280 [ 218.526235][T15085] ? anon_vma_fork+0xc7/0x300 [ 218.526268][T15085] should_failslab+0x8c/0xb0 [ 218.526298][T15085] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 218.526325][T15085] ? anon_vma_fork+0xc7/0x300 [ 218.526352][T15085] anon_vma_fork+0xc7/0x300 [ 218.526380][T15085] dup_mmap+0x547/0x10c0 [ 218.526402][T15085] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 218.526443][T15085] copy_mm+0xfa/0x340 [ 218.526465][T15085] copy_process+0x10ad/0x2340 [ 218.526497][T15085] kernel_clone+0x1c0/0x5f0 [ 218.526521][T15085] ? do_futex+0x391/0x460 [ 218.526552][T15085] __x64_sys_clone+0x143/0x180 [ 218.526584][T15085] x64_sys_call+0x2479/0x2550 [ 218.526610][T15085] do_syscall_64+0x112/0x360 [ 218.526644][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.526666][T15085] RIP: 0033:0x7f912af4e159 [ 218.526690][T15085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.526709][T15085] RSP: 002b:00007f91299a6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 218.526731][T15085] RAX: ffffffffffffffda RBX: 00007f912b1d5fa0 RCX: 00007f912af4e159 [ 218.526746][T15085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004400 [ 218.526759][T15085] RBP: 00007f912afe506b R08: 0000000000000000 R09: 0000000000000000 [ 218.526772][T15085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.526786][T15085] R13: 00007f912b1d6038 R14: 00007f912b1d5fa0 R15: 00007fffd42dc898 [ 218.526806][T15085] [ 218.561475][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.773725][T15097] loop0: detected capacity change from 0 to 512 [ 218.789392][T15097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.813973][T15097] FAULT_INJECTION: forcing a failure. [ 218.813973][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 218.813999][T15097] CPU: 0 UID: 0 PID: 15097 Comm: syz.0.2563 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.814031][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.814119][T15097] Call Trace: [ 218.814125][T15097] [ 218.814132][T15097] __dump_stack+0x1d/0x30 [ 218.814154][T15097] dump_stack_lvl+0x95/0xd0 [ 218.814173][T15097] dump_stack+0x15/0x1b [ 218.814194][T15097] should_fail_ex+0x262/0x280 [ 218.814255][T15097] should_failslab+0x8c/0xb0 [ 218.814286][T15097] __kvmalloc_node_noprof+0x168/0x5c0 [ 218.814316][T15097] ? vmemdup_user+0x2b/0xd0 [ 218.814465][T15097] ? vmemdup_user+0x2b/0xd0 [ 218.814489][T15097] ? should_fail_usercopy+0x1a/0x20 [ 218.814518][T15097] vmemdup_user+0x2b/0xd0 [ 218.814540][T15097] path_setxattrat+0x1b3/0x320 [ 218.814648][T15097] __x64_sys_lsetxattr+0x71/0x90 [ 218.814673][T15097] x64_sys_call+0x22c1/0x2550 [ 218.814700][T15097] do_syscall_64+0x112/0x360 [ 218.814809][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.814830][T15097] RIP: 0033:0x7fa02e5ce159 [ 218.814848][T15097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.814866][T15097] RSP: 002b:00007fa02d027028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 218.814889][T15097] RAX: ffffffffffffffda RBX: 00007fa02e855fa0 RCX: 00007fa02e5ce159 [ 218.814935][T15097] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 00002000000001c0 [ 218.814947][T15097] RBP: 00007fa02d027090 R08: 0000000000000000 R09: 0000000000000000 [ 218.814959][T15097] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 218.814970][T15097] R13: 00007fa02e856038 R14: 00007fa02e855fa0 R15: 00007ffefb563cf8 [ 218.815061][T15097] [ 218.917609][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.997037][T15110] team0: Device xfrm0 is of different type [ 219.210599][T15133] loop6: detected capacity change from 0 to 512 [ 219.233650][T15133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.233720][T15133] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.237720][T15132] loop0: detected capacity change from 0 to 1024 [ 219.245069][T15132] EXT4-fs: Ignoring removed orlov option [ 219.266292][T15132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.307032][T13590] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.307680][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.383601][T15154] loop0: detected capacity change from 0 to 8192 [ 219.424057][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 219.523916][T15171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2577'. [ 219.555453][T15168] loop9: detected capacity change from 0 to 164 [ 219.587090][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 219.691040][T15189] loop0: detected capacity change from 0 to 512 [ 219.717946][T15189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.718014][T15189] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.760468][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.795468][T15196] loop8: detected capacity change from 0 to 512 [ 219.815536][T15196] EXT4-fs error (device loop8): __ext4_iget:5592: inode #11: block 1: comm syz.8.2578: invalid block [ 219.815565][T15196] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.820665][T15196] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2578: couldn't read orphan inode 11 (err -117) [ 219.820751][T15196] loop8: lost filesystem error report for type 5 error -117 [ 219.821305][T15196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.834109][T15200] Invalid ELF header type: 2 != 1 [ 219.871163][T15205] FAULT_INJECTION: forcing a failure. [ 219.871163][T15205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.871258][T15205] CPU: 0 UID: 0 PID: 15205 Comm: syz.0.2588 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.871283][T15205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.871296][T15205] Call Trace: [ 219.871311][T15205] [ 219.871319][T15205] __dump_stack+0x1d/0x30 [ 219.871344][T15205] dump_stack_lvl+0x95/0xd0 [ 219.871366][T15205] dump_stack+0x15/0x1b [ 219.871387][T15205] should_fail_ex+0x262/0x280 [ 219.871413][T15205] should_fail+0xb/0x20 [ 219.871503][T15205] should_fail_usercopy+0x1a/0x20 [ 219.871563][T15205] _copy_from_user+0x1c/0xb0 [ 219.871590][T15205] __se_sys_openat2+0xcb/0x1f0 [ 219.871615][T15205] __x64_sys_openat2+0x55/0x70 [ 219.871664][T15205] x64_sys_call+0x196c/0x2550 [ 219.871688][T15205] do_syscall_64+0x112/0x360 [ 219.871737][T15205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.871760][T15205] RIP: 0033:0x7fa02e5ce159 [ 219.871777][T15205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.871795][T15205] RSP: 002b:00007fa02d027028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 219.871878][T15205] RAX: ffffffffffffffda RBX: 00007fa02e855fa0 RCX: 00007fa02e5ce159 [ 219.871892][T15205] RDX: 0000200000000380 RSI: 00002000000008c0 RDI: 0000000000000004 [ 219.871906][T15205] RBP: 00007fa02d027090 R08: 0000000000000000 R09: 0000000000000000 [ 219.871920][T15205] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 219.871932][T15205] R13: 00007fa02e856038 R14: 00007fa02e855fa0 R15: 00007ffefb563cf8 [ 219.871953][T15205] [ 220.006393][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 220.006409][ T29] audit: type=1400 audit(1790173666.050:4411): avc: denied { create } for pid=15208 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.007798][ T29] audit: type=1400 audit(1790173666.050:4412): avc: denied { bind } for pid=15208 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.013292][ T29] audit: type=1400 audit(1790173666.059:4413): avc: denied { setopt } for pid=15208 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 220.128697][ T29] audit: type=1400 audit(1790173666.170:4414): avc: denied { unmount } for pid=14423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 220.478943][T15239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.479003][T15239] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.509487][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 220.509831][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 220.510172][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 220.510427][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 221.087326][ T29] audit: type=1326 audit(1790173667.047:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.2594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54df8ce159 code=0x7fc00000 [ 221.262538][ T5683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.283193][T13590] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.325085][T15258] x_tables: duplicate underflow at hook 2 [ 221.363892][T15262] __nla_validate_parse: 29 callbacks suppressed [ 221.363922][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2600'. [ 221.393525][T15265] netlink: 'syz.0.2602': attribute type 21 has an invalid length. [ 221.393653][T15265] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2602'. [ 221.393807][T15265] netlink: 'syz.0.2602': attribute type 5 has an invalid length. [ 221.393829][T15265] netlink: 'syz.0.2602': attribute type 6 has an invalid length. [ 221.393862][T15265] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2602'. [ 221.435743][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 221.554461][ T29] audit: type=1400 audit(1790173667.481:4416): avc: denied { ioctl } for pid=15264 comm="syz.9.2603" path="socket:[43476]" dev="sockfs" ino=43476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.631035][ T5576] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.695778][T15287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.695883][T15287] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.754936][T15287] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 2147500033 (only 1 groups) [ 221.806834][ T29] audit: type=1400 audit(1790173667.702:4417): avc: denied { bind } for pid=15305 comm="syz.6.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.823977][T15304] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2614'. [ 221.832860][ T29] audit: type=1400 audit(1790173667.739:4418): avc: denied { create } for pid=15302 comm="syz.0.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.860735][ T29] audit: type=1400 audit(1790173667.757:4419): avc: denied { connect } for pid=15305 comm="syz.6.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.860842][ T29] audit: type=1400 audit(1790173667.757:4420): avc: denied { write } for pid=15305 comm="syz.6.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.160158][T15329] loop6: unable to read partition table [ 222.160186][T15329] loop6: partition table beyond EOD, truncated [ 222.160210][T15329] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 222.223600][ T2982] loop6: unable to read partition table [ 222.223710][ T2982] loop6: partition table beyond EOD, truncated [ 222.385793][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 222.577211][T15342] net_ratelimit: 3543 callbacks suppressed [ 222.577243][T15342] IPv6: addrconf: prefix option has invalid lifetime [ 222.577251][T15342] IPv6: addrconf: prefix option has invalid lifetime [ 222.582981][ T5683] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 222.584865][ T5683] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 222.585092][ T5683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 222.585185][ T5683] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 222.585331][ T5683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 222.585407][ T5683] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 222.585561][ T5683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 222.585852][ T5683] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 222.585886][ T5683] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.586042][ T5683] EXT4-fs warning (device loop8): ext4_evict_inode:288: xattr delete (err -117) [ 222.785129][T15336] EXT4-fs: Ignoring removed orlov option [ 222.787602][T15336] EXT4-fs (loop0): invalid #clusters per group: 32768 [ 222.940041][T15362] set_capacity_and_notify: 5 callbacks suppressed [ 222.940075][T15362] loop0: detected capacity change from 0 to 4096 [ 222.961733][T15362] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 222.961852][T15362] EXT4-fs (loop0): mount failed [ 223.061542][T15378] loop8: detected capacity change from 0 to 512 [ 223.357680][T15372] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.357713][T15372] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.357902][T15372] bridge_slave_0: entered allmulticast mode [ 223.358333][T15372] bridge_slave_0: entered promiscuous mode [ 223.359496][T15372] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.359522][T15372] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.359624][T15372] bridge_slave_1: entered allmulticast mode [ 223.360166][T15372] bridge_slave_1: entered promiscuous mode [ 223.371897][T15372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.372885][T15372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.383507][T15372] team0: Port device team_slave_0 added [ 223.384249][T15372] team0: Port device team_slave_1 added [ 223.394309][T15372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.394348][T15372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.394377][T15372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.395091][T15372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.395102][T15372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.395128][T15372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.413043][T15372] hsr_slave_0: entered promiscuous mode [ 223.413588][T15372] hsr_slave_1: entered promiscuous mode [ 223.413891][T15372] debugfs: 'hsr0' already exists in 'hsr' [ 223.413904][T15372] Cannot create hsr debugfs directory [ 223.539644][T15372] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.554536][T15419] netlink: 'syz.6.2637': attribute type 16 has an invalid length. [ 223.589510][T15372] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.592136][T15422] loop6: detected capacity change from 0 to 256 [ 223.594209][T15422] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.604384][T15422] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.641784][T15372] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.753842][T15372] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.833673][ T3619] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.880600][T15372] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.885067][T15372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.885543][T15372] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.891148][T15439] netlink: 'syz.0.2641': attribute type 10 has an invalid length. [ 223.909313][T15372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.910062][T15372] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.919668][T15372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.926433][T15439] team0: Device vxcan0 is of different type [ 223.932216][T15372] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.942271][T15372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.094134][T15372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.102276][T15372] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.120749][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.120785][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.145129][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.145156][ T5576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.166990][T15471] FAULT_INJECTION: forcing a failure. [ 224.166990][T15471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.167021][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz.0.2645 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.167046][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.167059][T15471] Call Trace: [ 224.167066][T15471] [ 224.167074][T15471] __dump_stack+0x1d/0x30 [ 224.167106][T15471] dump_stack_lvl+0x95/0xd0 [ 224.167129][T15471] dump_stack+0x15/0x1b [ 224.167150][T15471] should_fail_ex+0x262/0x280 [ 224.167193][T15471] should_fail+0xb/0x20 [ 224.167213][T15471] should_fail_usercopy+0x1a/0x20 [ 224.167238][T15471] _copy_from_user+0x1c/0xb0 [ 224.167289][T15471] do_tcp_getsockopt+0xc8/0x1bc0 [ 224.167322][T15471] ? do_dentry_open+0x612/0xa60 [ 224.167345][T15471] ? lockref_put_return+0xf7/0x130 [ 224.167405][T15471] ? __rcu_read_unlock+0x4e/0x70 [ 224.167435][T15471] ? avc_has_perm_noaudit+0xa3/0x120 [ 224.167461][T15471] ? avc_has_perm+0x101/0x190 [ 224.167489][T15471] tcp_getsockopt+0x6e/0xe0 [ 224.167530][T15471] sock_common_getsockopt+0x60/0x70 [ 224.167559][T15471] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 224.167587][T15471] do_sock_getsockopt+0x2f5/0x570 [ 224.167680][T15471] ? vfs_write+0x850/0x9a0 [ 224.167712][T15471] __x64_sys_getsockopt+0x11d/0x1a0 [ 224.167763][T15471] x64_sys_call+0x1032/0x2550 [ 224.167790][T15471] do_syscall_64+0x112/0x360 [ 224.167823][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.167918][T15471] RIP: 0033:0x7fa02e5ce159 [ 224.167935][T15471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.167954][T15471] RSP: 002b:00007fa02d027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 224.167982][T15471] RAX: ffffffffffffffda RBX: 00007fa02e855fa0 RCX: 00007fa02e5ce159 [ 224.168002][T15471] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 224.168013][T15471] RBP: 00007fa02d027090 R08: 0000200000000380 R09: 0000000000000000 [ 224.168024][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.168035][T15471] R13: 00007fa02e856038 R14: 00007fa02e855fa0 R15: 00007ffefb563cf8 [ 224.168088][T15471] [ 224.256823][T15476] loop8: detected capacity change from 0 to 512 [ 224.276741][T15476] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 224.278514][T15476] EXT4-fs (loop8): orphan cleanup on readonly fs [ 224.278644][T15476] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2646: inode #15: comm syz.8.2646: iget: illegal inode # [ 224.278669][T15476] loop8: lost filesystem error report for type 5 error -117 [ 224.278880][T15476] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2646: couldn't read orphan inode 15 (err -117) [ 224.278905][T15476] loop8: lost filesystem error report for type 5 error -117 [ 224.504412][T15505] loop9: detected capacity change from 0 to 512 [ 224.508560][T15505] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.508581][T15505] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 224.509186][T15505] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 224.510566][T15505] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 224.510597][T15505] System zones: 0-2, 18-18, 34-35 [ 224.729931][T15372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.784313][T15523] syzkaller0: mtu less than device minimum [ 224.790464][T15524] 9p: Bad value for 'wfdno' [ 224.790616][T15523] 9p: Bad value for 'wfdno' [ 224.883113][T15538] loop9: detected capacity change from 0 to 512 [ 224.912869][T15372] veth0_vlan: entered promiscuous mode [ 224.918117][T15538] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.920180][T15372] veth1_vlan: entered promiscuous mode [ 224.924124][T15538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 224.926412][T15538] EXT4-fs (loop9): orphan cleanup on readonly fs [ 224.935520][T15538] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.2655: Allocating blocks 41-42 which overlap fs metadata [ 224.935618][T15538] loop9: lost filesystem error report for type 5 error -117 [ 224.940250][T15538] EXT4-fs (loop9): Remounting filesystem read-only [ 224.940683][T15538] EXT4-fs (loop9): 1 truncate cleaned up [ 224.948493][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 224.948510][ C1] EXT4-fs (loop9): initial error at time 1790173670: ext4_mb_mark_diskspace_used:4223 [ 224.948532][ C1] EXT4-fs (loop9): last error at time 1790173670: ext4_mb_mark_diskspace_used:4223 [ 224.952579][T15538] EXT4-fs (loop9): pa ffff888107221b60: logic 1, phys. 41, len 23 [ 225.026096][T15372] veth0_macvtap: entered promiscuous mode [ 225.029127][T15372] veth1_macvtap: entered promiscuous mode [ 225.042191][T15372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.050679][T15372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.082712][ T5596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.082755][ T5596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.107841][ T5633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.133549][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.229330][T15558] loop8: detected capacity change from 0 to 256 [ 225.261969][T15563] tmpfs: Bad value for 'size' [ 225.269702][T15563] loop1: detected capacity change from 0 to 512 [ 225.283777][T15547] netlink: 'syz.6.2656': attribute type 2 has an invalid length. [ 225.283840][T15547] netlink: 119 bytes leftover after parsing attributes in process `syz.6.2656'. [ 225.305283][T15563] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.421955][T15547] loop6: detected capacity change from 0 to 512 [ 225.537465][T15575] loop8: detected capacity change from 0 to 1024 [ 225.537837][T15575] EXT4-fs: Ignoring removed orlov option [ 225.796641][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 225.796677][ T29] audit: type=1400 audit(1790173671.395:4453): avc: denied { mac_admin } for pid=15562 comm="syz.1.2661" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.796702][ T29] audit: type=1400 audit(1790173671.395:4454): avc: denied { relabelto } for pid=15562 comm="syz.1.2661" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 225.908527][T15588] netlink: 'syz.6.2669': attribute type 30 has an invalid length. [ 225.911790][ T29] audit: type=1400 audit(1790173671.496:4455): avc: denied { write } for pid=15562 comm="syz.1.2661" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 225.911835][ T29] audit: type=1400 audit(1790173671.496:4456): avc: denied { add_name } for pid=15562 comm="syz.1.2661" name="cgroup" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 225.998180][ T29] audit: type=1400 audit(1790173671.579:4457): avc: denied { write } for pid=15589 comm="syz.1.2661" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 226.069801][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2669'. [ 226.069823][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2669'. [ 226.069837][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2669'. [ 226.216248][ T29] audit: type=1400 audit(1790173671.773:4458): avc: denied { write } for pid=15372 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 226.216282][ T29] audit: type=1400 audit(1790173671.773:4459): avc: denied { remove_name } for pid=15372 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 226.222928][T15372] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 226.300576][T15372] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 226.341104][ T29] audit: type=1400 audit(1790173671.893:4460): avc: denied { setattr } for pid=15607 comm="syz.0.2673" name="NFC_LLCP" dev="sockfs" ino=45114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 226.341284][ T29] audit: type=1400 audit(1790173671.893:4461): avc: denied { bind } for pid=15607 comm="syz.0.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 226.343617][T15608] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.406082][T15608] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2671: corrupted in-inode xattr: invalid ea_ino [ 226.406133][T15608] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 226.408264][T15608] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2671: couldn't read orphan inode 15 (err -117) [ 226.408295][T15608] loop6: lost filesystem error report for type 5 error -117 [ 226.473667][ T29] audit: type=1400 audit(1790173672.013:4462): avc: denied { write } for pid=15607 comm="syz.0.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 226.593146][T13590] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 226.613141][T13590] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 226.613586][T13590] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 226.704192][T15622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.704332][T15622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.979908][ T5596] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.027189][ T5596] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.138574][T15640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15640 comm=syz.8.2682 [ 227.349571][ T5596] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.377642][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 227.402258][ T5596] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.577054][ T5596] bridge_slave_1: left allmulticast mode [ 227.577077][ T5596] bridge_slave_1: left promiscuous mode [ 227.577196][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.577972][ T5596] bridge_slave_0: left allmulticast mode [ 227.578079][ T5596] bridge_slave_0: left promiscuous mode [ 227.578210][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.732991][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.808017][T15662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=15662 comm=syz.0.2688 [ 228.379501][T15647] set_capacity_and_notify: 21 callbacks suppressed [ 228.379519][T15647] loop8: detected capacity change from 0 to 512 [ 228.425658][T15647] loop8: detected capacity change from 0 to 512 [ 228.472495][T15647] loop8: detected capacity change from 0 to 512 [ 228.519309][T15647] loop8: detected capacity change from 0 to 512 [ 228.566496][T15647] loop8: detected capacity change from 0 to 512 [ 228.607364][T15647] loop8: detected capacity change from 0 to 512 [ 228.650402][T15647] loop8: detected capacity change from 0 to 512 [ 228.754518][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.773555][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.778573][ T5596] bond0 (unregistering): Released all slaves [ 228.780205][ T5596] bond1 (unregistering): Released all slaves [ 228.842005][ T5596] hsr_slave_0: left promiscuous mode [ 228.844280][ T5596] hsr_slave_1: left promiscuous mode [ 228.844812][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.844828][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.846917][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.846931][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.857295][T15691] loop0: detected capacity change from 0 to 1024 [ 228.864145][ T5596] veth1_macvtap: left promiscuous mode [ 228.864473][T15691] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 228.865876][ T5596] veth0_macvtap: left promiscuous mode [ 228.865970][ T5596] veth1_vlan: left promiscuous mode [ 228.866046][ T5596] veth0_vlan: left promiscuous mode [ 228.884647][T15691] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.2691: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.884682][T15691] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.884825][T15691] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.2691: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.884859][T15691] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.884952][T15691] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.2691: Failed to acquire dquot type 0 [ 228.884976][T15691] loop0: lost filesystem error report for type 5 error -117 [ 228.885055][T15691] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 228.885114][T15691] loop0: lost filesystem error report for type 5 error -117 [ 228.885196][T15691] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.2691: mark_inode_dirty error [ 228.885216][T15691] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 228.885364][T15691] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 228.885402][T15691] EXT4-fs (loop0): 1 orphan inode deleted [ 228.885838][T15691] EXT4-fs mount: 12 callbacks suppressed [ 228.885850][T15691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.906051][ T5636] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:123: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.906209][ T5636] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.906372][ T5636] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:123: Failed to release dquot type 0 [ 228.906394][ T5636] loop0: lost filesystem error report for type 5 error -117 [ 229.015906][T15697] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 229.016022][T15697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.016086][T15697] vhci_hcd vhci_hcd.0: Device attached [ 229.020405][T15698] vhci_hcd: cannot find the pending unlink 4096 [ 229.022967][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.034886][ T5633] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:120: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.035068][ T5633] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 229.035490][ T5633] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:120: Failed to release dquot type 0 [ 229.035562][ T5633] loop0: lost filesystem error report for type 5 error -117 [ 229.039529][T14423] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.039558][T14423] loop0: lost filesystem error report for type 5 error -117 [ 229.039655][T14423] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 229.039734][T14423] loop0: lost filesystem error report for type 5 error -117 [ 229.040107][T14423] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 229.040130][T14423] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 229.040352][T14423] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.150115][T15705] loop0: detected capacity change from 0 to 1024 [ 229.158545][T15705] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.158572][T15705] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.158610][T15705] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.160364][T15705] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: inode #32: comm syz.0.2692: iget: special inode unallocated [ 229.160406][T15705] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 229.160554][T15705] EXT4-fs (loop0): no journal found [ 229.160567][T15705] EXT4-fs (loop0): can't get journal size [ 229.184318][T15705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.187862][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 229.206691][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 229.213159][T15701] loop8: detected capacity change from 0 to 2048 [ 229.228107][T11541] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 229.271897][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.292829][T11541] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 229.297118][T15701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.356206][T15713] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 229.449695][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 229.572496][T15698] vhci_hcd: connection reset by peer [ 229.572764][ T5633] vhci_hcd vhci_hcd.9: stop threads [ 229.572780][ T5633] vhci_hcd vhci_hcd.9: release socket [ 229.572799][ T5633] vhci_hcd vhci_hcd.9: disconnect device [ 229.712355][T15655] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.712389][T15655] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.712468][T15655] bridge_slave_0: entered allmulticast mode [ 229.713057][T15655] bridge_slave_0: entered promiscuous mode [ 229.730900][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 229.746638][ T5683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.756615][T15655] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.756644][T15655] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.756852][T15655] bridge_slave_1: entered allmulticast mode [ 229.767343][T15655] bridge_slave_1: entered promiscuous mode [ 229.787237][T15753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.787316][T15753] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.812156][T15655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.817923][T15655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.850063][T15655] team0: Port device team_slave_0 added [ 229.851109][T15655] team0: Port device team_slave_1 added [ 229.875563][T15655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.875577][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.875603][T15655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.875867][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.876213][T15655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.876225][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.876330][T15655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.944203][T15770] FAULT_INJECTION: forcing a failure. [ 229.944203][T15770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.944295][T15770] CPU: 1 UID: 0 PID: 15770 Comm: syz.8.2698 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.944320][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.944333][T15770] Call Trace: [ 229.944346][T15770] [ 229.944404][T15770] __dump_stack+0x1d/0x30 [ 229.944430][T15770] dump_stack_lvl+0x95/0xd0 [ 229.944452][T15770] dump_stack+0x15/0x1b [ 229.944473][T15770] should_fail_ex+0x262/0x280 [ 229.944595][T15770] should_fail+0xb/0x20 [ 229.944616][T15770] should_fail_usercopy+0x1a/0x20 [ 229.944641][T15770] _copy_to_user+0x20/0xa0 [ 229.944673][T15770] bpf_log_attr_finalize+0xa7/0x100 [ 229.944697][T15770] btf_new_fd+0x34a/0x670 [ 229.944718][T15770] bpf_btf_load+0x116/0x130 [ 229.944821][T15770] __sys_bpf+0xbce/0xc30 [ 229.944847][T15770] ? do_futex+0x390/0x460 [ 229.944880][T15770] __x64_sys_bpf+0x69/0x80 [ 229.944903][T15770] x64_sys_call+0xf26/0x2550 [ 229.945017][T15770] do_syscall_64+0x112/0x360 [ 229.945050][T15770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.945150][T15770] RIP: 0033:0x7f912af4e159 [ 229.945166][T15770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.945185][T15770] RSP: 002b:00007f91299a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.945206][T15770] RAX: ffffffffffffffda RBX: 00007f912b1d5fa0 RCX: 00007f912af4e159 [ 229.945256][T15770] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 229.945270][T15770] RBP: 00007f912afe506b R08: 0000000000000000 R09: 0000000000000000 [ 229.945284][T15770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.945296][T15770] R13: 00007f912b1d6038 R14: 00007f912b1d5fa0 R15: 00007fffd42dc898 [ 229.945317][T15770] [ 230.020794][T15776] EXT4-fs: Ignoring removed bh option [ 230.023323][T15776] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 230.035172][T15655] hsr_slave_0: entered promiscuous mode [ 230.035649][T15655] hsr_slave_1: entered promiscuous mode [ 230.035885][T15655] debugfs: 'hsr0' already exists in 'hsr' [ 230.035899][T15655] Cannot create hsr debugfs directory [ 230.047809][T15776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.082998][T15782] 9pnet_fd: Insufficient options for proto=fd [ 230.153373][T15785] netlink: 'syz.8.2701': attribute type 1 has an invalid length. [ 230.157947][T15788] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15788 comm=syz.8.2701 [ 230.217093][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2701'. [ 230.221040][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.241565][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2701'. [ 230.249733][T15785] bond2: entered promiscuous mode [ 230.249750][T15785] bond2: entered allmulticast mode [ 230.249879][T15785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.292137][T15786] erspan2: entered allmulticast mode [ 230.294695][T15786] bond2: (slave erspan2): making interface the new active one [ 230.294715][T15786] erspan2: entered promiscuous mode [ 230.297081][T15786] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 230.361166][T15795] bond2 (unregistering): (slave erspan2): Releasing active interface [ 230.361189][T15795] erspan2: left promiscuous mode [ 230.364410][T15795] bond2 (unregistering): Released all slaves [ 230.388077][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 230.393011][T15803] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.395268][T15803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.395472][T15803] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.402955][T15803] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.2703: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 230.402999][T15803] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.403527][T15803] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2703: couldn't read orphan inode 11 (err -117) [ 230.403552][T15803] fserror_report: 1 callbacks suppressed [ 230.403562][T15803] loop0: lost filesystem error report for type 5 error -117 [ 230.403967][T15803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.560725][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2705'. [ 230.560743][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2705'. [ 230.560765][T15805] netlink: 'syz.9.2705': attribute type 14 has an invalid length. [ 230.756151][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.770261][T15655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.782942][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.783440][T15655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.785862][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.791776][T15655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.806103][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.806744][T15655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.812065][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.828341][T15828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 230.828459][T15828] System zones: 1-12 [ 230.829668][T15828] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.2708: missing EA_INODE flag [ 230.829786][T15828] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 230.830104][T15828] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.2708: error while reading EA inode 12 err=-117 [ 230.830275][T15828] loop8: lost filesystem error report for type 5 error -117 [ 230.830731][T15828] EXT4-fs (loop8): 1 orphan inode deleted [ 230.834048][T15828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.845219][T15372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.957486][ T5633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.045478][T15655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.073921][T15655] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.090649][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.090686][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.096440][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.096474][ T5576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.113699][ T5683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.222101][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 231.222118][ T29] audit: type=1400 audit(1790173676.407:4536): avc: denied { write } for pid=15864 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.278516][T15856] ip6erspan0: entered allmulticast mode [ 231.292581][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.300310][ T5633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.315777][ T29] audit: type=1400 audit(1790173676.481:4537): avc: denied { getopt } for pid=15855 comm="syz.9.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.874108][ T29] audit: type=1400 audit(1790173677.007:4538): avc: denied { write } for pid=15874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.912005][ T29] audit: type=1400 audit(1790173677.035:4539): avc: denied { write } for pid=15902 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.044690][ T29] audit: type=1400 audit(1790173677.164:4540): avc: denied { write } for pid=15904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.052691][T15916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15916 comm=syz.9.2719 [ 232.102940][ T29] audit: type=1400 audit(1790173677.219:4541): avc: denied { write } for pid=15917 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.219368][T15655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.266280][ T5633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.346790][T15928] ip_tables: iptables: counters copy to user failed while replacing table [ 232.347213][ T5633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.412122][ T29] audit: type=1400 audit(1790173677.496:4542): avc: denied { read } for pid=15930 comm="syz.9.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.431895][ T29] audit: type=1400 audit(1790173677.505:4543): avc: denied { write } for pid=15930 comm="syz.9.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.501891][ T5633] bridge_slave_1: left allmulticast mode [ 232.501935][ T5633] bridge_slave_1: left promiscuous mode [ 232.502110][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.518761][ T5633] bridge_slave_0: left allmulticast mode [ 232.518783][ T5633] bridge_slave_0: left promiscuous mode [ 232.518895][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.535214][ T29] audit: type=1400 audit(1790173677.616:4544): avc: denied { write } for pid=15929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.581312][ T29] audit: type=1400 audit(1790173677.653:4545): avc: denied { write } for pid=15951 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.659613][ T5633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.680704][ T5633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.684667][ T5633] bond0 (unregistering): Released all slaves [ 232.705133][T15954] netlink: 'syz.8.2724': attribute type 1 has an invalid length. [ 232.746488][ T5633] hsr_slave_0: left promiscuous mode [ 232.746807][ T5633] hsr_slave_1: left promiscuous mode [ 232.747275][ T5633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.747289][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.747743][ T5633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.747758][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.767500][ T5633] veth1_macvtap: left promiscuous mode [ 232.767526][ T5633] veth0_macvtap: left promiscuous mode [ 232.767569][ T5633] veth1_vlan: left promiscuous mode [ 232.767666][ T5633] veth0_vlan: left promiscuous mode [ 232.967102][ T5633] team0 (unregistering): Port device team_slave_1 removed [ 232.971921][ T5633] team0 (unregistering): Port device team_slave_0 removed [ 233.055847][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.055876][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.056048][T15849] bridge_slave_0: entered allmulticast mode [ 233.056581][T15849] bridge_slave_0: entered promiscuous mode [ 233.060115][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.060148][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.060258][T15849] bridge_slave_1: entered allmulticast mode [ 233.060717][T15849] bridge_slave_1: entered promiscuous mode [ 233.061681][T15655] veth0_vlan: entered promiscuous mode [ 233.098321][T15655] veth1_vlan: entered promiscuous mode [ 233.101508][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.105727][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.152175][T15849] team0: Port device team_slave_0 added [ 233.154298][T15849] team0: Port device team_slave_1 added [ 233.192052][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.192069][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.192117][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.199115][T15655] veth0_macvtap: entered promiscuous mode [ 233.210788][T15655] veth1_macvtap: entered promiscuous mode [ 233.213503][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.213517][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.213542][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.231703][T15655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.330306][T15655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.345275][T16014] pimreg9: entered allmulticast mode [ 233.357236][T15849] hsr_slave_0: entered promiscuous mode [ 233.357664][T15849] hsr_slave_1: entered promiscuous mode [ 233.357888][T15849] debugfs: 'hsr0' already exists in 'hsr' [ 233.357901][T15849] Cannot create hsr debugfs directory [ 233.417148][T15989] EXT4-fs: inline encryption not supported [ 233.448981][T15989] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 233.468394][T15989] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.2728: lblock 2 mapped to illegal pblock 2 (length 1) [ 233.468441][T15989] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.468715][T15989] EXT4-fs (loop0): Remounting filesystem read-only [ 233.469018][T15989] EXT4-fs (loop0): 1 orphan inode deleted [ 233.471437][T15989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.564743][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.702761][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.702837][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.702953][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.703137][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.018142][T16065] sch_fq: defrate 0 ignored. [ 234.165125][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.165541][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.165684][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.286115][T16090] set_capacity_and_notify: 5 callbacks suppressed [ 234.286131][T16090] loop9: detected capacity change from 0 to 512 [ 234.314904][T16090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.314994][T16090] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.358797][T13697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.381235][T16061] infiniband syz1: set active [ 234.381256][T16061] infiniband syz1: added vcan0 [ 234.381537][ T3612] vcan0 speed is unknown, defaulting to 1000 [ 234.452336][T16061] RDS/IB: syz1: added [ 234.452400][T16061] smc: adding ib device syz1 with port count 1 [ 234.452480][T16061] smc: ib device syz1 port 1 has no pnetid [ 234.464770][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.466342][T11548] vcan0 speed is unknown, defaulting to 1000 [ 234.475175][T15849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.486475][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.487200][T15849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.501529][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 234.503796][T15849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.518896][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 234.519671][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.521330][T15849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.544716][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 234.610139][T16123] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2742'. [ 234.648130][T15849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.653462][T15849] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.673565][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.673602][ T5596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.702248][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.706368][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.706397][ T5582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.754230][T11541] usb 19-1: enqueue for inactive port 0 [ 234.754252][T11541] usb 19-1: enqueue for inactive port 0 [ 234.778988][T16061] vcan0 speed is unknown, defaulting to 1000 [ 234.803166][T16132] FAULT_INJECTION: forcing a failure. [ 234.803166][T16132] name failslab, interval 1, probability 0, space 0, times 0 [ 234.803287][T16132] CPU: 1 UID: 0 PID: 16132 Comm: syz.9.2745 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.803316][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.803331][T16132] Call Trace: [ 234.803339][T16132] [ 234.803348][T16132] __dump_stack+0x1d/0x30 [ 234.803464][T16132] dump_stack_lvl+0x95/0xd0 [ 234.803484][T16132] dump_stack+0x15/0x1b [ 234.803571][T16132] should_fail_ex+0x262/0x280 [ 234.803598][T16132] ? dup_fd+0x3a/0x530 [ 234.803628][T16132] should_failslab+0x8c/0xb0 [ 234.803655][T16132] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 234.803822][T16132] ? dup_fd+0x3a/0x530 [ 234.803844][T16132] dup_fd+0x3a/0x530 [ 234.803865][T16132] ? ksys_unshare+0x31/0x710 [ 234.803894][T16132] ksys_unshare+0x36c/0x710 [ 234.803962][T16132] __x64_sys_unshare+0x1f/0x30 [ 234.803991][T16132] x64_sys_call+0x1e33/0x2550 [ 234.804054][T16132] do_syscall_64+0x112/0x360 [ 234.804082][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.804106][T16132] RIP: 0033:0x7f470157e159 [ 234.804124][T16132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.804164][T16132] RSP: 002b:00007f46fffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 234.804183][T16132] RAX: ffffffffffffffda RBX: 00007f4701805fa0 RCX: 00007f470157e159 [ 234.804249][T16132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 234.804263][T16132] RBP: 00007f470161506b R08: 0000000000000000 R09: 0000000000000000 [ 234.804279][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.804293][T16132] R13: 00007f4701806038 R14: 00007f4701805fa0 R15: 00007ffcec1f8e18 [ 234.804314][T16132] [ 234.839136][T11541] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 234.971718][T16061] vcan0 speed is unknown, defaulting to 1000 [ 235.030283][T16150] loop9: detected capacity change from 0 to 512 [ 235.033306][T16150] EXT4-fs: inline encryption not supported [ 235.050227][T16150] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 235.050403][T16150] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2746: invalid indirect mapped block 2683928664 (level 1) [ 235.050467][T16150] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.050853][T16150] EXT4-fs (loop9): 1 truncate cleaned up [ 235.051289][T16150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.101432][T15849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.126574][T16061] vcan0 speed is unknown, defaulting to 1000 [ 235.340893][T15849] veth0_vlan: entered promiscuous mode [ 235.350262][T15849] veth1_vlan: entered promiscuous mode [ 235.370962][T15849] veth0_macvtap: entered promiscuous mode [ 235.375186][T15849] veth1_macvtap: entered promiscuous mode [ 235.390091][T15849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.395624][T15849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.413627][ T5582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.415300][T16188] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.2746: Invalid block bitmap block 3 in block_group 0 [ 235.423442][T16188] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.2746: Invalid block bitmap block 3 in block_group 0 [ 235.423677][T16188] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.2746: Invalid block bitmap block 3 in block_group 0 [ 235.456659][ T5582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.457546][ T5582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.457859][ T5582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.505580][T16190] loop3: detected capacity change from 0 to 8192 [ 235.552714][T16190] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2750'. [ 235.552802][T16190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 235.681126][T16213] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 235.681205][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 235.695260][T16208] netlink: 'syz.0.2752': attribute type 10 has an invalid length. [ 235.703533][T16208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.708357][T16208] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 235.714475][T16208] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2752'. [ 235.736417][T16208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.758718][T16208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.772366][T16220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.778172][T16208] bond0 (unregistering): (slave netdevsim2): Releasing backup interface [ 235.800294][T16208] bond0 (unregistering): Released all slaves [ 235.811214][T16224] loop3: detected capacity change from 0 to 164 [ 235.933965][T13697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.172025][T16275] loop4: detected capacity change from 0 to 4096 [ 236.190911][T16275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.372510][T16275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.372545][T16282] loop9: detected capacity change from 0 to 512 [ 236.487388][T16282] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.2762: iget: bad i_size value: 38620345925642 [ 236.487527][T16282] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.488605][T16282] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2762: couldn't read orphan inode 15 (err -117) [ 236.488650][T16282] loop9: lost filesystem error report for type 5 error -117 [ 236.534079][T16303] netlink: 'syz.4.2765': attribute type 1 has an invalid length. [ 236.538887][T16282] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.639311][T16312] loop4: detected capacity change from 0 to 512 [ 236.654547][T16282] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.2762: bg 0: block 5: invalid block bitmap [ 236.662233][T16282] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 236.662319][T16282] EXT4-fs (loop9): This should not happen!! Data will be lost [ 236.662319][T16282] [ 236.663029][T16282] EXT4-fs (loop9): Total free blocks count 0 [ 236.663073][T16282] EXT4-fs (loop9): Free/Dirty block details [ 236.663104][T16282] EXT4-fs (loop9): free_blocks=0 [ 236.663180][T16282] EXT4-fs (loop9): dirty_blocks=65 [ 236.663213][T16282] EXT4-fs (loop9): Block reservation details [ 236.663235][T16282] EXT4-fs (loop9): i_reserved_data_blocks=65 [ 236.678591][ T5582] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 236.693284][T16312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.693358][T16312] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.702305][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 236.702322][ T29] audit: type=1400 audit(1790173681.456:4600): avc: denied { bind } for pid=16311 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.719418][T15849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.820156][T16323] netlink: 'syz.4.2769': attribute type 1 has an invalid length. [ 236.867345][T16323] veth0: entered promiscuous mode [ 236.869886][T16323] batadv0: entered promiscuous mode [ 236.870107][T16323] debugfs: 'hsr1' already exists in 'hsr' [ 236.870119][T16323] Cannot create hsr debugfs directory [ 236.880790][ T29] audit: type=1400 audit(1790173681.622:4601): avc: denied { write } for pid=16313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.897551][ T29] audit: type=1400 audit(1790173681.641:4602): avc: denied { map } for pid=16322 comm="syz.4.2769" path="socket:[48189]" dev="sockfs" ino=48189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 236.920880][ T29] audit: type=1400 audit(1790173681.650:4603): avc: denied { read } for pid=16327 comm="syz.8.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.945054][ T29] audit: type=1400 audit(1790173681.669:4604): avc: denied { write } for pid=16333 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.030188][T16282] syz.9.2762 (16282) used greatest stack depth: 8712 bytes left [ 237.094211][ T29] audit: type=1400 audit(1790173681.826:4605): avc: denied { ioctl } for pid=16355 comm="syz.4.2777" path="socket:[47536]" dev="sockfs" ino=47536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 237.192276][ T29] audit: type=1400 audit(1790173681.918:4606): avc: denied { write } for pid=16342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.204992][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 237.253275][ T29] audit: type=1400 audit(1790173681.964:4607): avc: denied { write } for pid=16371 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.325828][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2777'. [ 237.344037][ T29] audit: type=1400 audit(1790173682.056:4608): avc: denied { execute } for pid=16360 comm="syz.8.2778" path="/file1" dev="ramfs" ino=48274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 237.389260][T16390] Cannot find del_set index 0 as target [ 237.421903][ T29] audit: type=1400 audit(1790173682.130:4609): avc: denied { ioctl } for pid=16373 comm="syz.9.2781" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 237.457678][T16395] loop3: detected capacity change from 0 to 512 [ 237.494431][T16395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.494542][T16395] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.796803][T15655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.814968][T16403] loop3: detected capacity change from 0 to 512 [ 237.827683][T16403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.827740][T16403] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.881002][T15655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.931830][T16362] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.931946][T16362] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.016058][T16362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.018265][T16362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.103617][ T5636] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.103844][ T5582] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.103923][ T5582] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.103955][ T5582] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.200357][T16424] loop4: detected capacity change from 0 to 1024 [ 238.200626][T16424] EXT4-fs: Ignoring removed i_version option [ 238.208860][T16424] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 238.208995][T16424] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.215555][T16424] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 238.215764][T16424] EXT4-fs (loop4): orphan cleanup on readonly fs [ 238.215942][T16424] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.2790: Freeing blocks not in datazone - block = 0, count = 4096 [ 238.215968][T16424] loop4: lost filesystem error report for type 5 error -117 [ 238.216090][T16424] EXT4-fs (loop4): Remounting filesystem read-only [ 238.216113][T16424] EXT4-fs (loop4): 1 orphan inode deleted [ 238.216532][T16424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.405355][T15849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.450174][T16444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.450286][T16444] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.523938][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.578832][T16457] EXT4-fs: Ignoring removed orlov option [ 238.594120][T16457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.631651][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.650880][T16468] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 238.651042][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 238.677305][T16470] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 239.061308][T16467] EXT4-fs error (device loop4): ext4_quota_enable:7260: inode #4: comm syz.4.2801: casefold flag without casefold feature [ 239.061394][T16467] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 239.063014][T16467] EXT4-fs (loop4): Remounting filesystem read-only [ 239.063284][T16467] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.063677][T16467] EXT4-fs (loop4): mount failed [ 239.063994][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 239.064037][ C0] EXT4-fs (loop4): initial error at time 1790173683: ext4_quota_enable:7260: inode 4 [ 239.064125][ C0] EXT4-fs (loop4): last error at time 1790173683: ext4_quota_enable:7260: inode 4 [ 239.271348][T16518] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2807'. [ 239.424819][T16529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.424961][T16529] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.524321][T13697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.654083][T16553] iso9660: Unknown parameter 'sessiOn' [ 239.679403][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2812'. [ 239.779007][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 239.779176][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 239.810967][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 239.836355][T16565] set_capacity_and_notify: 5 callbacks suppressed [ 239.836374][T16565] loop0: detected capacity change from 0 to 1024 [ 239.852414][T16565] EXT4-fs: Ignoring removed orlov option [ 239.885601][T16565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.950882][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.975884][T16581] netlink: 392 bytes leftover after parsing attributes in process `syz.3.2817'. [ 240.042908][T16591] x_tables: duplicate underflow at hook 1 [ 240.066143][T16586] tipc: Enabling of bearer rejected, failed to enable media [ 240.110388][T16600] loop0: detected capacity change from 0 to 512 [ 240.110717][T16600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.122602][T16600] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 240.122732][T16600] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2821: corrupted in-inode xattr: e_value size too large [ 240.122758][T16600] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 240.122904][T16600] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2821: couldn't read orphan inode 15 (err -117) [ 240.122928][T16600] loop0: lost filesystem error report for type 5 error -117 [ 240.123522][T16600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.193314][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.355960][T16612] vcan0 speed is unknown, defaulting to 1000 [ 240.363621][T16621] program syz.4.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.501310][T16630] loop3: detected capacity change from 0 to 512 [ 240.501672][T16630] EXT4-fs: Ignoring removed oldalloc option [ 240.501895][T16630] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 240.503267][T16630] EXT4-fs (loop3): 1 truncate cleaned up [ 240.504175][T16630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.520127][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2825'. [ 240.520334][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2825'. [ 240.561807][T16630] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2828'. [ 240.561832][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 240.739857][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 240.790526][T16656] loop4: detected capacity change from 0 to 1024 [ 240.807678][T16656] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 240.811546][T16656] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.2833: lblock 2 mapped to illegal pblock 2 (length 1) [ 240.811581][T16656] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.811758][T16656] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.2833: lblock 0 mapped to illegal pblock 48 (length 1) [ 240.811789][T16656] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.811905][T16656] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2833: Failed to acquire dquot type 0 [ 240.811928][T16656] loop4: lost filesystem error report for type 5 error -117 [ 240.812024][T16656] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 240.812041][T16656] loop4: lost filesystem error report for type 5 error -117 [ 240.812167][T16656] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.2833: mark_inode_dirty error [ 240.812212][T16656] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.812271][T16656] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 240.812329][T16656] EXT4-fs (loop4): 1 orphan inode deleted [ 240.812707][T16656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.880513][T15849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.885241][ T5596] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:83: lblock 1 mapped to illegal pblock 1 (length 1) [ 240.885391][ T5596] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.885546][ T5596] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:83: Failed to release dquot type 0 [ 240.885568][ T5596] loop4: lost filesystem error report for type 5 error -117 [ 240.885872][T15849] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 240.885975][T15849] loop4: lost filesystem error report for type 5 error -117 [ 240.886031][T15849] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 240.886048][T15849] loop4: lost filesystem error report for type 5 error -117 [ 240.886132][T15849] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 240.886154][T15849] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.886217][T15849] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 240.886297][T15849] loop4: lost filesystem error report for type 5 error -117 [ 240.923278][T16645] loop8: detected capacity change from 0 to 512 [ 241.138171][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2836'. [ 241.265584][T16667] SELinux: policydb string length 128 does not match expected length 8 [ 241.265626][T16667] SELinux: failed to load policy [ 241.285373][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 241.342773][T15655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.624605][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 241.669882][T16712] loop9: detected capacity change from 0 to 512 [ 241.671569][T16712] ext4: Bad value for 'journal_ioprio' [ 242.235540][T16722] loop9: detected capacity change from 0 to 2048 [ 242.283555][T16722] Alternate GPT is invalid, using primary GPT. [ 242.283682][T16722] loop9: p1 p2 p3 [ 242.497055][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 242.497122][ T29] audit: type=1400 audit(1790173686.810:4676): avc: denied { write } for pid=16719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.579899][T16724] loop8: detected capacity change from 0 to 1024 [ 242.593527][T16724] EXT4-fs: inline encryption not supported [ 242.605637][T16724] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.622114][T16724] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.2844: lblock 2 mapped to illegal pblock 2 (length 1) [ 242.622222][T16724] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 242.622470][T16724] EXT4-fs (loop8): Remounting filesystem read-only [ 242.622492][T16724] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 242.622581][T16724] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 242.622720][T16724] EXT4-fs (loop8): 1 orphan inode deleted [ 242.624673][T16724] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.700366][ T2982] Alternate GPT is invalid, using primary GPT. [ 242.700672][ T2982] loop9: p1 p2 p3 [ 242.703602][ T29] audit: type=1400 audit(1790173686.995:4677): avc: denied { write } for pid=16739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.843799][T16726] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.843831][ T29] audit: type=1400 audit(1790173687.124:4678): avc: denied { write } for pid=16721 comm="syz.9.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.924038][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 243.079938][ T29] audit: type=1400 audit(1790173687.346:4679): avc: denied { write } for pid=16746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.135024][ T29] audit: type=1400 audit(1790173687.392:4680): avc: denied { write } for pid=16757 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.266315][ T29] audit: type=1400 audit(1790173687.512:4681): avc: denied { write } for pid=16759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.350228][ T29] audit: type=1400 audit(1790173687.595:4682): avc: denied { write } for pid=16770 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.387866][ T5683] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.432482][T16775] loop0: detected capacity change from 0 to 512 [ 243.444509][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 243.478963][T16775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.479036][T16775] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.550112][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 243.550169][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 243.557032][ T6466] udevd[6466]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 243.574462][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 243.577473][ T6466] udevd[6466]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 243.590042][ T29] audit: type=1400 audit(1790173687.816:4683): avc: denied { read } for pid=16771 comm="syz.3.2848" lport=54532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.594406][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 243.642732][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.693877][T16798] loop9: detected capacity change from 0 to 256 [ 243.726045][T16801] program syz.0.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.858077][T16813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.125996][T16840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.126086][T16840] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.182862][T16844] EXT4-fs: Ignoring removed orlov option [ 244.204579][T16844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.224457][T16840] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 244.261297][T13697] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.284006][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.299377][T16774] EXT4-fs: Ignoring removed orlov option [ 244.323494][T16774] EXT4-fs (loop4): invalid #clusters per group: 32768 [ 244.420975][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2863'. [ 244.587375][T16873] ip6erspan0: entered allmulticast mode [ 244.602723][T16880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2867'. [ 244.697054][T16887] vfat: Bad value for 'uid' [ 244.697080][T16887] vfat: Bad value for 'uid' [ 244.993869][T16890] EXT4-fs: Ignoring removed orlov option [ 245.025438][T16890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.196640][T14423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.308490][T16918] set_capacity_and_notify: 5 callbacks suppressed [ 245.308506][T16918] loop4: detected capacity change from 0 to 512 [ 245.319421][T16918] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2875: inode has both inline data and extents flags [ 245.319448][T16918] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.319520][T16918] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2875: couldn't read orphan inode 15 (err -117) [ 245.319548][T16918] loop4: lost filesystem error report for type 5 error -117 [ 245.320044][T16918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.380592][T15849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.460558][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2877'. [ 245.506760][T16931] loop3: detected capacity change from 0 to 512 [ 245.527924][T16931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.527977][T16931] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.563894][T16938] loop4: detected capacity change from 0 to 128 [ 245.574230][T16938] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.594874][T16938] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.621509][T15655] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.624859][T15849] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.677499][T16944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 245.849839][T16960] loop4: detected capacity change from 0 to 1024 [ 245.850541][T16960] EXT4-fs: Ignoring removed orlov option [ 245.868242][T16960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.003130][T16973] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.63.0), cmd(3) [ 246.162280][T16926] loop8: detected capacity change from 0 to 4096 [ 246.175089][T16926] EXT4-fs: Ignoring removed orlov option [ 246.179347][T16926] EXT4-fs (loop8): invalid #clusters per group: 32768 [ 246.683149][T16984] ================================================================== [ 246.683177][T16984] BUG: KCSAN: data-race in copy_process / free_pid [ 246.683197][T16984] [ 246.683203][T16984] read-write to 0xffffffff86e5c368 of 4 bytes by task 14423 on cpu 1: [ 246.683218][T16984] free_pid+0xb3/0x1b0 [ 246.683233][T16984] free_pids+0x54/0xb0 [ 246.683247][T16984] release_task+0xa28/0xb90 [ 246.683271][T16984] wait_consider_task+0x10ef/0x15f0 [ 246.683301][T16984] __do_wait+0xf1/0x500 [ 246.683327][T16984] do_wait+0xb6/0x230 [ 246.683352][T16984] kernel_wait4+0x19f/0x210 [ 246.683379][T16984] __x64_sys_wait4+0x91/0x120 [ 246.683406][T16984] x64_sys_call+0x108f/0x2550 [ 246.683433][T16984] do_syscall_64+0x112/0x360 [ 246.683471][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.683492][T16984] [ 246.683498][T16984] read to 0xffffffff86e5c368 of 4 bytes by task 16984 on cpu 0: [ 246.683515][T16984] copy_process+0x1acf/0x2340 [ 246.683536][T16984] kernel_clone+0x1c0/0x5f0 [ 246.683559][T16984] __x64_sys_clone+0x143/0x180 [ 246.683580][T16984] x64_sys_call+0x2479/0x2550 [ 246.683604][T16984] do_syscall_64+0x112/0x360 [ 246.683633][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.683656][T16984] [ 246.683660][T16984] value changed: 0x800001de -> 0x800001dd [ 246.683672][T16984] [ 246.683677][T16984] Reported by Kernel Concurrency Sanitizer on: [ 246.683696][T16984] CPU: 0 UID: 0 PID: 16984 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(lazy) [ 246.683723][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.683736][T16984] ================================================================== [ 246.856865][T17013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.857204][T17013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.925310][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 247.925327][ T29] audit: type=1400 audit(1790173691.813:4726): avc: denied { write } for pid=17047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.449368][ T29] audit: type=1400 audit(1790173692.303:4727): avc: denied { write } for pid=17058 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.595290][ T29] audit: type=1400 audit(1790173692.432:4728): avc: denied { write } for pid=17063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.641254][ T29] audit: type=1400 audit(1790173692.487:4729): avc: denied { write } for pid=17074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.741054][ T29] audit: type=1400 audit(1790173692.580:4730): avc: denied { write } for pid=17076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.786298][ T29] audit: type=1400 audit(1790173692.617:4731): avc: denied { write } for pid=17087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.969664][ T29] audit: type=1400 audit(1790173692.783:4732): avc: denied { write } for pid=17094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.014879][ T29] audit: type=1400 audit(1790173692.829:4733): avc: denied { write } for pid=17105 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.039022][ T29] audit: type=1400 audit(1790173694.694:4734): avc: denied { write } for pid=17115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.074637][ T29] audit: type=1400 audit(1790173694.730:4735): avc: denied { write } for pid=17126 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.915531][ T29] audit: type=1400 audit(1790173697.343:4736): avc: denied { write } for pid=17129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.939495][ T29] audit: type=1400 audit(1790173697.352:4737): avc: denied { write } for pid=17140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.497425][ T29] audit: type=1400 audit(1790173697.887:4738): avc: denied { write } for pid=17143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.529782][ T29] audit: type=1400 audit(1790173697.915:4739): avc: denied { write } for pid=17154 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1