last executing test programs: 7m43.335111001s ago: executing program 32 (id=557): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffff) 7m42.223182668s ago: executing program 33 (id=562): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 7m36.450924528s ago: executing program 34 (id=584): r0 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r0, 0x10000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34020000", @ANYRES16=r4, @ANYBLOB="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"], 0x234}}, 0x80) write(r2, &(0x7f00000001c0)='1', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x4, 0x7fff0026}]}) clock_getres(0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xe}, 0x10cdd0, 0x1222, 0xffffffff, 0x0, 0x80000000000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xf, r1, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x14) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@nodots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@dots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000010205000200000000000000020000001800018014000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a11040000000000000000020000002400048020000180080001006c6f670014000280080006400000000c08000540ffffff080900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) 7m33.429584831s ago: executing program 35 (id=597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x3) 7m32.67467627s ago: executing program 36 (id=599): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m28.267342646s ago: executing program 37 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 7m17.40318186s ago: executing program 38 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='p:s/p .', 0x7) 7m13.763222228s ago: executing program 39 (id=675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) 6m16.362269519s ago: executing program 40 (id=960): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x44000160) dup(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_pidfd_open(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) socket(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m15.119427369s ago: executing program 41 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x1a, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395cc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 6m14.052771355s ago: executing program 42 (id=972): io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20000400) 5m38.382934729s ago: executing program 43 (id=1014): add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8080, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0xfee3, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() sigaltstack(&(0x7f0000000040)={&(0x7f0000002400)=""/4147, 0x80000001, 0xfffffffffffffedf}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 5m8.885452824s ago: executing program 44 (id=1146): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) (fail_nth: 1) 4m36.206740855s ago: executing program 45 (id=1299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000}, 0x20) 4m34.821867698s ago: executing program 46 (id=1312): io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) removexattr(0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) unshare(0x20000400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100001a000100feffffff01010000ff010000000000000000000000000001fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fa000000000000009201000000000010a39b00000000080042060000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007c00000005350000020001002000000000000000480003006c7a7300"/219], 0x138}}, 0x40) 4m5.419607439s ago: executing program 47 (id=1386): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) read$rfkill(r0, &(0x7f0000000040), 0x2) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 2m46.947177221s ago: executing program 48 (id=2287): io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x16, 0x1, 0xc, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x27}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x7, 0x30, &(0x7f00000004c0)=""/48, 0x41100, 0x30, '\x00', 0x0, @fallback=0x1e, r0, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10400, 0x3}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000600)=[r0, r0, r0, r0, r0, r0, r0]}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='!\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="9b8e78b5ff620f61adfdc9bbd959dfc926fa1fbcc2556273bf0dc29aff1974808f8b154ffeea6b87c2cd90cb6ae84aca0a7dca18ced9db02dd67bf6eb6870c238e4963c74914fd130551c7", @ANYRES64=r1], 0x20) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0xfffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x1f, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000003f0a0000000000000900000018110000", @ANYRES32, @ANYBLOB="00000084733f66322a333d76699d0000000000008500000083000000bf090000e9ff000055090100000000009500000000000000d706000000000000000100002020782500000000002020207b1af8ff001a14c0f5273daeea00000000f8ffffffb702000008000000b7030000001c48b2d411a4f6b5000000aa9104000400800085100000fdffffff1811fd00", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x82, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 2m46.870746813s ago: executing program 49 (id=2289): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x600000000000, 0xc}, 0x4008, 0x400000, 0x4, 0x0, 0x0, 0x1000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000083000000bf09000000000000550901000000000095000000000000009500000000000004bf91000000000000b7020000020000008500000084000000b7000000000002000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1ae) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 2m46.370427365s ago: executing program 50 (id=2294): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x2, 0xaded, 0x0, 0x8, 0x0, 0xd58}) r2 = epoll_create(0x7) epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x4, &(0x7f0000000280), 0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="df6b1c881e80735fd85127be8a197ff73c", 0x11}], 0x1) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) 1m46.895952612s ago: executing program 51 (id=2773): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0x1, &(0x7f00000000c0)) pipe2(0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000a40)) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0', 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x6f, 0x2d3}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) connect$x25(r0, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 1m39.061211454s ago: executing program 52 (id=2829): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="8800000000020104000000000000000002000005240002801400018008000100"], 0x88}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xe}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x24048090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7f6, &(0x7f0000000040)={0x0, 0x8000c897, 0xc000, 0x7ffe, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 1m36.146747875s ago: executing program 53 (id=2844): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 1m32.743097359s ago: executing program 54 (id=2867): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xf, 0xffff5b66) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) writev(r0, &(0x7f0000001800)=[{&(0x7f00000004c0)="13dd1fd890ad8a95875ffc7aaa3351f45e5a09070786646700393b4a8613d9ae1e51e481c94efb01f5be882003503cbdb95ba353a88c4bc057268663e9007c5f6e854b47e6e797deaeb4b7439f5a12a1d1f7366f04494c2b", 0x58}], 0x1) 1m15.569802349s ago: executing program 55 (id=2935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x41145}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='01', 0x2) 1m10.852980945s ago: executing program 4 (id=2948): set_mempolicy(0x3, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x40440, 0x100) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1000, 0x71, 0x10, 0xaf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x100800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000}], 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='012', 0x3) 1m10.798125196s ago: executing program 4 (id=2949): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) getdents64(r0, &(0x7f0000000400)=""/48, 0xb09469065a0717bd) 1m10.567877912s ago: executing program 5 (id=2950): ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)=0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)}], 0x1}, 0x41) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_list_modules(0x0, 0x0, 0x10000000) getpid() r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x1, 0x803, &(0x7f0000001000)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1m10.342335577s ago: executing program 5 (id=2952): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x203, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7871, 0xfffffffffffffff0}, 0x1061, 0x6, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='syzkaller\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) r1 = gettid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000006c0)={0x4, 0x100fdfd, 0x8, 0x10, 0x100, &(0x7f0000000040)="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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000640)={[{@barrier}, {@nodioread_nolock}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000100)='2', 0x1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_register(r4, &(0x7f0000000880)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\xb9\x00n\x12\xa1\xb3\x18\xc6\x1a\x00c\xf9\xaf\xe3\xe93z>\x01{\x0e\xf7\xc7\x10%\x80\xf4\xef~\xbe\xeb\xd5\xc8\r7W\xe9\x99\xe0\x14j\xdax\xe6\x13]z\x8a\xb0\xe7|\xf4\x92Q\b)\x9b\xd2\xa80x0}, 0x0) setresuid(0x0, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@access_any}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x34, 0x39, 0x32, 0x36, 0x65, 0x63, 0x30], 0x2d, [0x64, 0x62, 0x33, 0x31], 0x2d, [0x62, 0x66, 0x39], 0x2d, [0x36, 0x33, 0x62, 0x66], 0x2d, [0x37, 0x33, 0x64, 0x0, 0x63, 0x39, 0x33, 0x33]}}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type}, {@uid_lt={'uid<', r7}}, {@subj_type={'subj_type', 0x3d, '\xef@'}}]}}) r8 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000440)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000500)={'\x00', 0x100, 0x56, 0x6, 0x10001, 0x0, r9}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000000c0)={0x8, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) socket$nl_route(0x10, 0x3, 0x0) 1m9.383882011s ago: executing program 4 (id=2956): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 1m9.206067115s ago: executing program 5 (id=2957): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 1m8.927150022s ago: executing program 4 (id=2959): timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240407fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x40, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x2, 0x9}, 0x11efa, 0x4, 0x0, 0xc, 0x1000, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x128}, 0x1) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x4b37, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x3, 0x15f}, 0x0, 0x0, 0x0) r10 = socket(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) 1m8.472018083s ago: executing program 5 (id=2964): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r3 = dup(r2) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f00000001c0)={0x0, 0xfffffffffffffdc0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x8, 0x5, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x79e, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r5, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x2048041}, 0x40000) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x41000001}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) unlink(&(0x7f00000001c0)='./file0\x00') 1m7.675520623s ago: executing program 5 (id=2969): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x809e, 0x1000006}, 0x0, 0x8000, 0x800400, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1bf40, 0xeffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2fdff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x805, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x0, 0x4, 0xa, 0x80, 0xa0, 0x67}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xffffffffffffffed, 0x3}, {0x0, 0x2, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m7.675224783s ago: executing program 56 (id=2969): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x809e, 0x1000006}, 0x0, 0x8000, 0x800400, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1bf40, 0xeffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2fdff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x805, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x0, 0x4, 0xa, 0x80, 0xa0, 0x67}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xffffffffffffffed, 0x3}, {0x0, 0x2, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m7.606303724s ago: executing program 4 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 1m7.564113055s ago: executing program 57 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 26.911047811s ago: executing program 2 (id=3254): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d3f, 0x1070bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0xffff, 0xffff}, {0x1, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1b0}, @TCA_EGRESS_BLOCK={0x5, 0xe, 0x8300}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2000006f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0xffffffffffffffab, 0x0, 0x4, 0x100, 0x8001, 0x7fff, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 25.616570142s ago: executing program 2 (id=3273): unshare(0x24020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 25.337467539s ago: executing program 2 (id=3276): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000818) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0xd, "b3cc670898d1921f12d4db1e56"}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x7ffb, 0x0}, 0xfffffd56) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8c2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)}}], 0x1, 0x2090) sync() setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',directi\b\x00\x00\x00ame=,access=', @ANYRESDEC=r5, @ANYBLOB=',access=client,noxattr,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0xffffffffffffff4a, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@private, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000c40, &(0x7f0000000400)={[{@dax_inode}]}, 0x4, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 24.009737422s ago: executing program 2 (id=3289): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xb}, 0x80, 0x35, 0xfffffffa, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) dup(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) socket(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) umount2(0x0, 0x2) 23.799267227s ago: executing program 2 (id=3292): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$eJzs3M1vVFUbAPDnTqel5eOlLy+vCgGtgpH40dLyIQsTo9GEhUajLjCu6rQQpICBmgghWl1gjAtD4t64NPEvcGF0Y9SViS5xb0iIYQO6uubOvbcfwwxt6dApzO+XXOac+8E5z5x7Zs49904D6FpD2T9JxMaIuBwRmyOi2rjDUP5y49qF2t/XLtSSSNPX/0qyw+L6tQu14r+oL5kN+Yo0LfLrmpR78a2I8ampyTNFfmT65LsjZ8+df+r4yfFjk8cmT40dOrR/386+g2MH2hJnFtf17R+c3rHt8JuXXq4dufT2z99k9d1YbC/jaKeh/N1t6tF2F9Zhm+alk2oHK8KyZO3WWyyXI+3piYHZbZvjxY87WjngTqs2+34uzKTAPSwbqAPdqPyiz65/y2Wx8UIbxx4dd/W5PKIs7hvFkm+pRqXYp7fh+rad+iPiyMw/X2ZL3KF5CACA+b7Pxj9PNhv/VeK+efv9p7iHMhgR/42ILRHxv4jYGhH/j6jve39EPLDM8hvvkNw8/qlcWZBNe5ZZwq1l479nintbC8d/5egvBnuK3KZ6/L3J0eNTk3uL92RP9K7L8qMLDlnohxd++7xx3WfFNPvQvPFftmTlL4ywcqVxgm5ifHp85ZHnrn4Usb3aLP5kdqCfRMS2iNh+m2Ucf/zrHa22NYu/HAsvqg1XIulXEY/l7T8TDfGXkpb3J0efPjh2YKQ/pib3jpRnxYLD6n759eKrrcpfUfxtkLX/+qbnf1797Box6Y84e+78ifr92rO3Ucgfn9SSFpu2FvH3toz/5vO/tjuiL3mjnu4r9ype+5KXspeBcv3749PTZ8bmji3z9dfRPP49u+biH4+5/r8lvzyL5PfXZo/fGREPRsRDRds9HBGPRMSuW4T/0/O732m1rXX732JWvo2y+Cdatv93aZrGYJaaa//lJ3pO/Phtq/LTRc//rP3311N7ijVL+fxbagVX/AYCAADAXaBSfwY+qQzPpiuV4eH8Gf6tsb5SjYgnjp5+79RE/qz8YPRWypmuzfPmQ0eLueEyP9aQ31fMG3/RM1DPD9dOT010Onjochsa+n9a9P/Mn+291QKsRffUE33Asuj/0L30f+he+j90r2frT/vNdLoawGrra776w9WuB9ARyx//99+RegCrz/U/dK96/7/e6VoAneD7H7pSy9/GV1b0k/+7NVFdG9VomhhYG9UoE1FZdJ/KGqnq0hKvfJp3ibVSnzJRXfIfs7jNxLqmm5p+XBzeuLofTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2bwAAAP//3Irhpw==") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x44000160) r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x412cf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x5, 0x80000001, 0x8000, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_pidfd_open(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x47}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x24000004) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f0000000cc0)={[{@nomblk_io_submit}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000480)=0xfe8e, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000000d80)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000dc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000000)={0x9902, 0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x40000000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000012c0)="48000000150081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x20000000) mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="15000000a7b9d4d8d8416a5327c76c9807000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000007f9cf692338fbf90fb154c21811e02d20000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000a11b180004000000183900000100000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.27159357s ago: executing program 2 (id=3296): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0x1, 0x2c8, &(0x7f0000002940)="$eJzs3c9rI1UcAPDvpMk0pYf24EkE57AHL5btXj3YRSqIPSk5+AN0cXdhacJCA4FVMezJv8CDB/8Pb94FL/4HggeP3lyk8GRm0iSbpElcTbuUz+fSx/d9v/Pem5k2hWFePn+td3r/cf/h069/i3Y7i8ZRHMWzLPajERfSSAAAN8KzlOLPF/p8bzY2NScAYLOmPv9bl6Rsz4fe3vS0AIAN+vCjj9+/e3Jy/EFRtCN63w46WdQ/6/67D+NRdONB3I69OJ88C0ipbr/73slxNIvSftzqDQedsrL32S/j1Dyq+sPYi/3F9YdFbap+OGhW/3lkWcSjo3Iid2IvXpmrL/uP7yyoj04eb7RHiyzHP4i9+PWLeBzduF8905iM/00exTvpu7+++qRMLuuz4aCzXeVNpK2rvjYAAAAAAAAAAAAAAAAAAAAAANxcB8XYftzqlaF6/53O1nnVf/Bcf7W/TqPqr+uziLxqzOwPNEzxw8X+OreLokhZnT/e32enGa82o3ltCwcAAAAAAAAAAAAAAAAAAICXSP/Jl6f3ut0HZ/9LY/SS//i1/vmctL3OcY6mIq/H8uTtS8da1IitUXo519mcw58/7Y0j5SJe5CQMWkXEsjm35iI75XxWH/nvlFLKsojZrq2ZyM7Si9taZ6wVjd3lOeXgP32/++bpvWzVOWxfXLgfp7vyOOs/mbmmkS0f9Py5SFr7ligb+ZKcfHQ21zrO7n/8JXrr93qwUSRbsYrWVKQ1asRlt1/7X93PV/P3BwAAAAAAAAAAAAAAAAAAmJi89Lug8+nS0sbGJgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2zy/f+TRsxFZhrD+KMqXpyTUhqOI3mc9a97jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANx8/wQAAP//B4dp0A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x3, 0x0) removexattr(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)=@random={'system.', '\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0x2bb}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x5, 0x7fff, 0xc, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @local}}, 0xf63b, 0x8}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x2, 0x80805, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 23.27131288s ago: executing program 58 (id=3296): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0x1, 0x2c8, &(0x7f0000002940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x3, 0x0) removexattr(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)=@random={'system.', '\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0x2bb}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x5, 0x7fff, 0xc, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @local}}, 0xf63b, 0x8}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x2, 0x80805, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 19.833065994s ago: executing program 0 (id=3329): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140)=0x3, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 19.780711876s ago: executing program 0 (id=3330): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x437, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r4, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="6fffb2b9a89e496b7b", 0x9, 0x54, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x4a, &(0x7f000001f8c0)={@local, @broadcast, @void, {@ipv4={0x8864, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x36, 0x21, 0x0, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x500}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x8, 0x7) 18.972051725s ago: executing program 0 (id=3336): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r4 = dup(r3) r5 = socket(0x2, 0x80805, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000001c0)={0x0, 0xfffffffffffffdc0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x8, 0x5, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x79e, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r6, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x2048041}, 0x40000) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x41000001}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) unlink(&(0x7f00000001c0)='./file0\x00') 18.651267803s ago: executing program 0 (id=3338): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xe}, 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@seclabel}]}, 0x1, 0x556, &(0x7f0000000640)="$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") setns(0xc9, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000140)={0x4, 0x4, 0xd}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000005c0)='fd', 0x0, r9) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x2) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r12, r12) setpgid(0x0, r12) fchdir(r11) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYBLOB="0700ec003a757ed8cfa9b764f55fdb5bd944bd16a6b4cbd0515cfd993578d6b18388f683c18dd508d121f531f69b617769c26271a3ed88532f348e58f5cc4cf23d330472dad236b368dc0169ba698d1da515ad865d1eb08932628399dd803360fb7960befa1279116164b33eb0a406a563940e3fe59f41c81fabecef4b1e893685f7afcc1886c64c941a21cc8061d1c13aba08b6bb5858c155df99133f5c4d68b6afa758ba48f9fae5192391f5e3c780c3f886371fc50e0dc203aa775c1561a4b39509f6c0060a169b3a97244174fb3688523ca11420d49fb1fa2965839f4e02d3055a46e9b65876100d478f70135407"], 0xf4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000033960001002b9d70000000400000000000", @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0) 18.338938541s ago: executing program 0 (id=3342): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40600, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ec88, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x2}, 0x1000, 0x0, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r1, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x7f, 0x44b, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 16.607486533s ago: executing program 0 (id=3358): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, &(0x7f00000000c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'gretap0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xe}}}, 0x24}}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000dc0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x10}, 0x41) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0xd0, 0xd0, 0x180, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x11, 0x40000, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x200, 0x2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r9 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x8b5c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r10, 0x2219, 0x7721, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000100)={0x60003007}) 16.607222243s ago: executing program 59 (id=3358): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, &(0x7f00000000c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'gretap0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xe}}}, 0x24}}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000dc0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x10}, 0x41) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0xd0, 0xd0, 0x180, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x11, 0x40000, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x200, 0x2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r9 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x8b5c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r10, 0x2219, 0x7721, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000100)={0x60003007}) 12.553601202s ago: executing program 7 (id=3404): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (fail_nth: 3) 12.482256955s ago: executing program 7 (id=3405): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0xb, 0xff9, &(0x7f00000014c0)=""/4089, 0x41000}, 0x94) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/67) 12.227435841s ago: executing program 7 (id=3407): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000000)=ANY=[], 0xff, 0x69e, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 11.707933283s ago: executing program 7 (id=3415): r0 = syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0x358f, 0x800, 0x3, 0xc4}, &(0x7f0000000280), &(0x7f00000002c0), 0x0) mmap$IORING_OFF_SQES(0x0, 0x7a, 0x0, 0x11, r0, 0x10000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34020000", @ANYRES16, @ANYBLOB], 0x234}}, 0x80) write(r2, &(0x7f00000001c0)='1', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x4, 0x7fff0026}]}) clock_getres(0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xe}, 0x10cdd0, 0x1222, 0xffffffff, 0x0, 0x80000000000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xf, r1, 0x8) socket(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@nodots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@dots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) write(r5, &(0x7f0000000300)="4734c489d0358a0d323030303030303030302030203098", 0x17) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a11040000000000000000020000002400048020000180080001006c6f670014000280080006400000000c08000540ffffff080900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) 11.298465973s ago: executing program 7 (id=3420): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x98, r0, 0xa0b, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x70}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2090}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20044094}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) pwritev(r2, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000004c0)="f85cfd0f", 0x4}], 0x2, 0xf, 0xffff5b66) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0xfe33) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xf7, 0x14, @mcast1, 0x9}, 0x1c) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000200)="175f5026", 0x4}], 0x1, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x800, 0x2, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x8300) write$binfmt_script(r8, 0x0, 0x0) fdatasync(r8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) ftruncate(r8, 0x1000) writev(r6, &(0x7f0000001800)=[{&(0x7f00000004c0)="13dd1fd890ad8a95875ffc7aaa3351f45e5a09070786646700393b4a8613d9ae1e51e481c94efb01f5be882003503cbdb95ba353a88c4bc057268663e9007c5f6e854b47e6e797deaeb4b7439f5a12a1d1f7366f04494c2b", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r10 = dup2(r1, r1) write$tun(r10, &(0x7f00000000c0)=ANY=[], 0x46) 9.929477137s ago: executing program 7 (id=3428): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)="7c29bef30d46d3a9869d93fc5fd40ff71c3d23f08d6c5aea4cede29724ccdacbad96a634a708af989caa70c13a9815c09e358e0094135cc740bc6700cf31fbd48d509904c823b3929e0604c1bf34b58a4ff5a70d34844803cbf24a9522d43ff65c68461844f6d91e294c6e4261627c77516810f9a42fb422ecb9452efc8eb88c000500000000000077", &(0x7f0000000ac0), 0x81, r0}, 0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xffffffff, 0x10000}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x3, 0x5ca, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) (fail_nth: 1) 9.923919467s ago: executing program 60 (id=3428): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)="7c29bef30d46d3a9869d93fc5fd40ff71c3d23f08d6c5aea4cede29724ccdacbad96a634a708af989caa70c13a9815c09e358e0094135cc740bc6700cf31fbd48d509904c823b3929e0604c1bf34b58a4ff5a70d34844803cbf24a9522d43ff65c68461844f6d91e294c6e4261627c77516810f9a42fb422ecb9452efc8eb88c000500000000000077", &(0x7f0000000ac0), 0x81, r0}, 0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xffffffff, 0x10000}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x3, 0x5ca, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) (fail_nth: 1) 8.789756775s ago: executing program 1 (id=3444): timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x40, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) 8.646158848s ago: executing program 1 (id=3449): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000f4777bdf3dee0000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000800000000000000000000000001ffffffff00"/140]}, 0x104) 8.56754776s ago: executing program 1 (id=3450): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x11, '\x00', r1, 0x0, 0x0, 0x5}, 0x50) 8.226943129s ago: executing program 1 (id=3455): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0xfb31428ec381300c, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x100b, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x3d}, @flat=@binder={0x73622a85, 0x100b, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x40}, @increfs={0x40046304, 0x1}], 0x9e, 0x0, &(0x7f0000000180)="39104c16a804f726341343af0d059ba63d5061516ecc63b31fd0e62c0f9ab92a2ae18d54e36484f41d8b35006cac862114348decfb5f11f3652e5278330f5fd4dcf6d87b01ffea5d50f18f86f920cde55ed06aceda18e5a031b8d293463fbdaf2217cfc1cde9b68e7f0d794c92ccdfa1825f06357710097ef0eaee636241c579f2e9df4ea8fe9db3b5bec84dc596da23771b2a23fd5e87fd4f201d8a74de"}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40042, 0x1) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) fchdir(r2) r5 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000040)='ns\x00') readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r7 = socket$netlink(0x10, 0x3, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb, 0xfffb}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r8, 0x0) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) lseek(r1, 0x102, 0x4) r11 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001f40)=@security={'security\x00', 0xe, 0x4, 0x498, 0xffffffff, 0xf8, 0xf8, 0x2f8, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffff, 0xffffffff, 'veth1_macvtap\x00', 'wlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x5}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x3, 0x2, 0x6, 0x2, 0x6], 0x6, 0x4}, {0x1, [0x0, 0x1, 0x0, 0x2, 0x2, 0x4], 0x1, 0x6}}}}, {{@ip={@loopback, @remote, 0x0, 0xffffff00, 'ip6erspan0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2, 0x1, 0x12}, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@private=0xa010100, @ipv4=@multicast1, @ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:fixed_disk_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x8, 0x4, 0x0, 0x5, 0x0, 0x6], 0x0, 0x7}}}, @common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e22, 0x4e22], 0xfe, 0x8, 0x10, 0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x4, 0x2b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001500)={0x1, 0x7, @status={[0x6, 0x4, 0x3, 0x3, 0xffffffffffff39f3, 0x8]}, [0x4, 0x1ff, 0x10001, 0x0, 0x282, 0x6, 0x4f5e887f, 0xffffffffffff40b2, 0x1, 0x4, 0x5, 0x9, 0x3, 0x7, 0x7, 0x9, 0xdb2, 0x7, 0x7, 0xfffffffffffffff7, 0x5, 0x7, 0x7, 0x1, 0x10000, 0x2, 0x100, 0x7, 0x592, 0x9, 0x1, 0x8, 0x2, 0xffffffffffffffff, 0xfff, 0x80000, 0x1, 0x6, 0x4, 0x400, 0x1, 0x0, 0x5, 0x7000000000, 0xffffffff, 0x101, 0xae, 0x72d, 0x5, 0x3, 0x10, 0x192, 0x8, 0x40, 0x7, 0x8, 0x2, 0xfff, 0xffff, 0x1, 0x1, 0x1, 0x8000000000000001, 0x5]}) 8.088266662s ago: executing program 1 (id=3456): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x1f8}, 0x28) (fail_nth: 3) 7.312452971s ago: executing program 1 (id=3466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000068ffffff", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000028001280"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) (fail_nth: 2) 7.301230561s ago: executing program 61 (id=3466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000068ffffff", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000028001280"], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) (fail_nth: 2) 5.009963377s ago: executing program 3 (id=3488): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000540), 0x4) r3 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r4 = fcntl$getown(r3, 0x9) prlimit64(r4, 0xa, &(0x7f0000000000)={0x8}, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x335143, 0x3c) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000100)) sendfile(r5, r5, 0x0, 0x252c000000000000) 4.51262177s ago: executing program 3 (id=3491): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x203, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7871, 0xfffffffffffffff0}, 0x1061, 0x6, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='syzkaller\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000006c0)={0x4, 0x100fdfd, 0x8, 0x10, 0x100, &(0x7f0000000040)="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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000640)={[{@barrier}, {@nodioread_nolock}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000100)='2', 0x1, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_register(r3, &(0x7f0000000880)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\xb9\x00n\x12\xa1\xb3\x18\xc6\x1a\x00c\xf9\xaf\xe3\xe93z>\x01{\x0e\xf7\xc7\x10%\x80\xf4\xef~\xbe\xeb\xd5\xc8\r7W\xe9\x99\xe0\x14j\xdax\xe6\x13]z\x8a\xb0\xe7|\xf4\x92Q\b)\x9b\xd2\xa80x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r3, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='H']}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x8840) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1e400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@delsa={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {@in=@rand_addr=0x64010100, 0x4d5, 0x2, 0x33}, [@mark={0xc, 0x15, {0x35075a, 0xd534}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) getdents(r4, 0xffffffffffffffff, 0x5a) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) shmget(0x3, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r7, 0x7fffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="16000000000000000200000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r8, r8]}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9, 0x3000000}, 0x27) socket$nl_route(0x10, 0x3, 0x0) 2.136764148s ago: executing program 6 (id=3513): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x7fffffffffffd, 0x12, r0, 0x0) write$cgroup_subtree(r0, 0x0, 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.06352017s ago: executing program 9 (id=3514): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1200408, &(0x7f0000000180), 0x1, 0x7a5, &(0x7f00000007c0)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) keyctl$clear(0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsync(0xffffffffffffffff) timer_settime(r1, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x158, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x12c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xef20}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x158}}, 0x0) 2.05887751s ago: executing program 8 (id=3515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9fff548600d698ceb5819570163", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x1}, 0xac) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x480401) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xa) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES64=r1], 0xb2) 2.015012491s ago: executing program 6 (id=3516): socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) 1.951297162s ago: executing program 3 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)="7c29bef30d46d3a9869d93fc5fd40ff71c3d23f08d6c5aea4cede29724ccdacbad96a634a708af989caa70c13a9815c09e358e0094135cc740bc6700cf31fbd48d509904c823b3929e0604c1bf34b58a4ff5a70d34844803cbf24a9522d43ff65c68461844f6d91e294c6e4261627c77516810f9a42fb422ecb9452efc8eb88c00050000000000", &(0x7f0000000ac0), 0x81, r0}, 0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xffffffff, 0x10000}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x3, 0x5ca, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 1.905806854s ago: executing program 6 (id=3518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000fff0060102000000000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x4000000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001004000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff0000000015040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe0000000079130000000000006f000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0x7, 0x5}}}, 0x1b}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1.827600465s ago: executing program 9 (id=3519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)="7c29bef30d46d3a9869d93fc5fd40ff71c3d23f08d6c5aea4cede29724ccdacbad96a634a708af989caa70c13a9815c09e358e0094135cc740bc6700cf31fbd48d509904c823b3929e0604c1bf34b58a4ff5a70d34844803cbf24a9522d43ff65c68461844f6d91e294c6e4261627c77516810f9a42fb422ecb9452efc8eb88c00050000000000", &(0x7f0000000ac0), 0x81, r0}, 0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xffffffff, 0x10000}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x3, 0x5ca, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (fail_nth: 1) 1.827303145s ago: executing program 8 (id=3520): mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0xd}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r1, &(0x7f00000002c0), 0x0}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x51}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = semget$private(0x0, 0x7, 0x191) unshare(0xa000400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) recvfrom(r7, 0x0, 0x0, 0x22, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = getpid() r10 = syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/mnt\x00') ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 1.677074969s ago: executing program 6 (id=3521): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000240)}, 0x20) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x8c5ba000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f000000b880)=[{0xffffffffffffffff}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) utimes(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80c00, 0x1c4) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002cc0)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708d1f86c2900007b89f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000028f4083c837d589f3570000008500000024000000bf91000000000000b7020000000000008500000000000000b7000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x53}, 0x94) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)=ANY=[@ANYBLOB="4c00000000080102000000000000000003000007050003003a0000000900230073797a310000ee000600024000100000050003002f00000006000240020100000900010073797a3100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x4810) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000006c0)={@mcast2}, &(0x7f0000000700)=0x14) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002c00)={'syztnl0\x00', &(0x7f0000002b80)={'ip6tnl0\x00', 0x0, 0x2f, 0xf, 0x49, 0x7fffffff, 0x15, @remote, @remote, 0x8000, 0x8000, 0x3, 0x5}}) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002c40)={0x0, @multicast2, @empty}, &(0x7f0000002c80)=0xc) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x10, 0xfff1}, {0xffff, 0x2}, {0x0, 0xfff1}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xf, 0xff, 0x3ff, 0x2, 0x5, 0x1, 0x3}}, {0xa, 0x2, [0x5, 0xf800, 0x5]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xc, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x60000084) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) 1.344200267s ago: executing program 8 (id=3522): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, r2, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0xb, 0x0, 0xfffffffffffffffe}, {}, 0x70bd30, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x4002094) kexec_load(0x100, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}], 0x320000) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x66, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002500)=@allocspi={0x118, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x1, 0x6, 0x0, 0x4000000, 0x0, 0xffffffffffffffff}, {0x0, 0x2}, {0x0, 0xfffffffc}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e22, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}}}, @iptfs_dont_frag={0x4}]}, 0x118}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r0) accept4(r6, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4396cc05}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.139264752s ago: executing program 6 (id=3523): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000002940)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x150, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x460}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f0000000400)=@ll={0x11, 0xd, r3, 0x1, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="580ac2ba76cd90837f44e0e727c4014e3abcd53bdf2ab3cb4b9ebb5b", 0x1c}, {&(0x7f0000000580)="6880f50a8d4700", 0x7}], 0x2, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfffffff1}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xd8}, 0x4000090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsync(r5) 964.467217ms ago: executing program 3 (id=3524): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$snapshot(r0, &(0x7f0000000fc0)="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", 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000001140)={[{@errors_continue}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x495, &(0x7f0000001340)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES16=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x4000882) 938.058687ms ago: executing program 9 (id=3525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x7fffffffffffd, 0x12, r0, 0x0) write$cgroup_subtree(r0, 0x0, 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 259.477344ms ago: executing program 3 (id=3526): mount$9p_fd(0x0, 0x0, 0x0, 0x14400, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x603, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100001000", @ANYRES32=0x0, @ANYBLOB="030500000000000030001280080001006772650024000280060010004e210000050013000100000006000f0007"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x100000001, 0x11000, 0x2, 0x8, 0x5, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x14024011}, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000300), 0x1e, 0x3b00, 0x0, 0xfffffffffffffdfd) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) read(r5, &(0x7f0000000540)=""/4096, 0x1000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x1, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) sendto$inet6(r5, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000500)=""/255, &(0x7f0000000640)=0xff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 259.234744ms ago: executing program 5 (id=3467): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x5ea, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5dc, 0x3, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x77}, @local}, @echo={0x8, 0x0, 0x0, 0x6, 0x3, "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"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x11102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}]}, &(0x7f0000000140)=0x10) syz_read_part_table(0x61f, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) socket(0x2b, 0x1, 0x1) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff81}}}, 0x84) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) 244.221274ms ago: executing program 9 (id=3527): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0xbc735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x518}, 0x10026, 0x10003, 0xfffffff6, 0x0, 0x100006, 0x30006, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000011, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, &(0x7f0000000a00)=0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003500), 0x0, &(0x7f0000003580)=""/128, 0x80}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0xc0) 205.555975ms ago: executing program 8 (id=3528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1513}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x85, &(0x7f0000000500)=""/133, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) 132.345087ms ago: executing program 8 (id=3529): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/153, 0x99, 0x0, &(0x7f00000003c0)=""/55, 0x37}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4f}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x7f, &(0x7f0000000200)=""/127, 0x41100, 0x0, '\x00', r3, @fallback=0x1a, r4, 0x8, &(0x7f00000002c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x4, &(0x7f0000000500)=[r7, r0, r0], &(0x7f0000000540)=[{0x4, 0x2, 0xe, 0x2}, {0x5, 0x2, 0xb, 0x6}, {0x3, 0x4, 0xe, 0x1}, {0x5, 0x3, 0x2, 0xb}], 0x10, 0xb32e}, 0x94) socket$inet6(0xa, 0x2, 0xffffffc0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0xf45e, '\x00', r1, r4, 0x1, 0x4, 0x2}, 0x50) r9 = syz_clone3(&(0x7f0000002980)={0x100, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880), {0x27}, &(0x7f00000018c0)=""/90, 0x5a, &(0x7f0000001940)=""/4096, &(0x7f0000002940)=[0x0, 0xffffffffffffffff], 0x2, {r7}}, 0x58) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002a00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000002a40)={'\x00', 0x0, 0x3, 0x80, 0x80, 0xfffffffffffffad0, 0x0}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000002ac0)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002b00)={'\x00', 0x2000, 0x8, 0x5, 0x8, 0x4, 0xffffffffffffffff}) syz_clone3(&(0x7f0000002bc0)={0x88090c00, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0x3e}, &(0x7f0000000780)=""/72, 0x48, &(0x7f0000000800)=""/4096, &(0x7f0000002b80)=[r9, r10, r11, r12, r13], 0x5, {r2}}, 0x58) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000002c40)={0x9}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x34104400}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x10, 0x140f, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20002090) socket$xdp(0x2c, 0x3, 0x0) ioctl$TCGETS(r7, 0x5401, &(0x7f0000002d80)) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002dc0)={'vxcan0\x00'}) connect$unix(r7, &(0x7f0000002e00)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002e80)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000002f80)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002fc0)={{{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e20, 0x3, 0xa, 0xc0, 0x0, 0x32, r1, r14}, {0x2, 0x9, 0x80000001, 0x9, 0x4, 0x6, 0x4, 0x10000}, {0x0, 0x4, 0x922000000, 0x7f}, 0xffff3d5c, 0x6e6bba, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4, 0x1, 0x8, 0xfffffffe, 0xd8de, 0xffff8001}}, 0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003140)={r0, 0x58, &(0x7f00000030c0)}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x20, 0x140c, 0x918, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r15 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) close_range(r2, r15, 0x2) pipe2$9p(&(0x7f00000032c0), 0x80800) 58.680999ms ago: executing program 9 (id=3530): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x7fffffff, 0x4) 3.97544ms ago: executing program 8 (id=3531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x8b5}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004802c0001800b0001006e756d67656e00001c000280080003400000000008000240000000020800014000000005100001800800010064757000040002800900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000204002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 0s ago: executing program 6 (id=3532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x7fffff, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffffffee}]}, 0x3c}}, 0x4000000) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1787024566.351:3181): avc: denied { write } for pid=21357 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.720746][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 614.756612][T21344] EXT4-fs error (device loop2): ext4_map_blocks:835: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.783622][T21361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.835169][T21367] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.849322][T21367] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.863060][T21341] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.878001][T21341] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.892812][T21341] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.909354][T21367] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.922838][T21341] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.970222][T21341] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 614.971232][T21382] FAULT_INJECTION: forcing a failure. [ 614.971232][T21382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.996603][T21382] CPU: 1 UID: 0 PID: 21382 Comm: syz.9.3227 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 614.996713][T21382] Tainted: [W]=WARN [ 614.996723][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.996738][T21382] Call Trace: [ 614.996747][T21382] [ 614.996758][T21382] __dump_stack+0x1d/0x30 [ 614.996803][T21382] dump_stack_lvl+0x95/0xd0 [ 614.996829][T21382] dump_stack+0x15/0x1b [ 614.996854][T21382] should_fail_ex+0x25e/0x270 [ 614.996950][T21382] should_fail+0xb/0x20 [ 614.996972][T21382] should_fail_usercopy+0x1a/0x20 [ 614.997000][T21382] _copy_to_user+0x20/0xa0 [ 614.997059][T21382] simple_read_from_buffer+0xb5/0x130 [ 614.997088][T21382] proc_fail_nth_read+0x10e/0x150 [ 614.997117][T21382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.997144][T21382] vfs_read+0x18e/0x7c0 [ 614.997230][T21382] ? __rcu_read_unlock+0x4e/0x70 [ 614.997262][T21382] ? __fget_files+0x184/0x1c0 [ 614.997294][T21382] ? mutex_lock+0x57/0x90 [ 614.997354][T21382] ksys_read+0xdc/0x1a0 [ 614.997441][T21382] __x64_sys_read+0x40/0x50 [ 614.997467][T21382] x64_sys_call+0x292b/0x3050 [ 614.997495][T21382] do_syscall_64+0x136/0x3c0 [ 614.997530][T21382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.997636][T21382] RIP: 0033:0x7fb47be0e90e [ 614.997657][T21382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 614.997679][T21382] RSP: 002b:00007fb47a8a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 614.997766][T21382] RAX: ffffffffffffffda RBX: 00007fb47a8a76c0 RCX: 00007fb47be0e90e [ 614.997793][T21382] RDX: 000000000000000f RSI: 00007fb47a8a70a0 RDI: 0000000000000004 [ 614.997810][T21382] RBP: 00007fb47a8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.997867][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.997883][T21382] R13: 00007fb47c0d6038 R14: 00007fb47c0d5fa0 R15: 00007fff5d6cb638 [ 614.997905][T21382] [ 615.003240][T21387] loop7: detected capacity change from 0 to 256 [ 615.208067][T21341] EXT4-fs error (device loop2): ext4_map_blocks:793: inode #15: comm syz.2.3220: lblock 0 mapped to illegal pblock 0 (length 1) [ 615.230787][T21387] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 615.270378][T21356] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 615.279418][T21396] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3226'. [ 615.305324][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3228'. [ 617.828187][T17590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.838295][T19425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 617.908949][T21414] loop2: detected capacity change from 0 to 164 [ 617.922164][T21416] loop0: detected capacity change from 0 to 512 [ 617.940977][T21414] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 617.950535][T21416] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.3235: corrupted xattr block 95: invalid header [ 618.013526][T21416] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 618.023803][T21416] EXT4-fs (loop0): Remounting filesystem read-only [ 618.025890][T21414] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 618.032960][T21416] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -30) [ 618.032998][T21416] EXT4-fs (loop0): 1 orphan inode deleted [ 618.064516][T21416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.074786][T21414] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 618.147836][T21421] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3237: iget: bad i_size value: 38620345925642 [ 618.160477][T21421] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 618.160749][T21421] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3237: couldn't read orphan inode 15 (err -117) [ 618.181670][T21421] loop7: lost filesystem error report for type 5 error -117 [ 618.182398][T21421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.301628][T21428] set_capacity_and_notify: 1 callbacks suppressed [ 618.301645][T21428] loop2: detected capacity change from 0 to 512 [ 618.318622][T21428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 618.335358][T21428] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 618.350012][T21428] EXT4-fs (loop2): 1 truncate cleaned up [ 618.356199][T21428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.094629][T17590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.143363][T19425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.146095][T21434] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3241'. [ 621.196273][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.267098][T21449] vhci_hcd: not connected 4 [ 621.425519][T21444] loop2: detected capacity change from 0 to 512 [ 621.433459][T21446] loop7: detected capacity change from 0 to 512 [ 621.480967][T21459] loop0: detected capacity change from 0 to 512 [ 621.505912][T21459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 621.541444][T21446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.554795][T21446] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.559676][T21459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 621.575163][T21444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.577245][T21459] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 621.597941][T21466] loop6: detected capacity change from 0 to 512 [ 621.625182][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.629315][T21468] loop9: detected capacity change from 0 to 512 [ 621.640777][T21444] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 621.657957][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 621.658042][ T28] audit: type=1400 audit(1787024573.521:3197): avc: denied { write } for pid=21443 comm="syz.2.3243" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 621.667781][T21470] loop7: detected capacity change from 0 to 256 [ 621.718979][T21468] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.9.3250: corrupted xattr block 95: invalid header [ 621.733795][T21470] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 621.740575][T21468] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 621.750127][T21466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.750191][T21468] EXT4-fs (loop9): Remounting filesystem read-only [ 621.759334][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 621.759355][ C1] EXT4-fs (loop9): initial error at time 1787024573: ext4_expand_extra_isize_ea:2810: inode 11 [ 621.759392][ C1] EXT4-fs (loop9): last error at time 1787024573: ext4_expand_extra_isize_ea:2810: inode 11 [ 621.759458][T21466] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.773266][ T28] audit: type=1400 audit(1787024573.611:3198): avc: denied { write } for pid=21443 comm="syz.2.3243" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 621.838439][T21470] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3251'. [ 621.847891][T21468] EXT4-fs warning (device loop9): ext4_evict_inode:272: couldn't mark inode dirty (err -30) [ 621.858464][T21470] team0: Device ipvlan2 is already an upper device of the team interface [ 621.879457][T21468] EXT4-fs (loop9): 1 orphan inode deleted [ 621.885846][T21468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.924251][T21459] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.3249: Allocating blocks 41-42 which overlap fs metadata [ 621.938012][T21459] loop0: lost filesystem error report for type 5 error -117 [ 621.941816][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.965613][T21459] EXT4-fs (loop0): Remounting filesystem read-only [ 621.972189][T21459] Quota error (device loop0): write_blk: dquota write failed [ 621.979597][T21459] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 621.979852][T21482] loop7: detected capacity change from 0 to 512 [ 621.988839][T21459] Quota error (device loop0): write_blk: dquota write failed [ 622.003005][T21459] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 622.009752][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 622.018320][T21459] EXT4-fs (loop0): 1 truncate cleaned up [ 622.019458][ C1] EXT4-fs (loop0): initial error at time 1787024573: ext4_mb_mark_diskspace_used:4222 [ 622.019490][ C1] EXT4-fs (loop0): last error at time 1787024573: ext4_mb_mark_diskspace_used:4222 [ 622.026678][T21482] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3253: iget: bad i_size value: 38620345925642 [ 622.026711][T21482] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 622.030950][T21482] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3253: couldn't read orphan inode 15 (err -117) [ 622.066947][T21459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.070148][T21482] loop7: lost filesystem error report for type 5 error -117 [ 622.087839][T21482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.130250][ T28] audit: type=1400 audit(1787024573.951:3199): avc: denied { write } for pid=21481 comm="syz.7.3253" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 622.170166][T19425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.213780][T21494] loop2: detected capacity change from 0 to 4096 [ 622.214157][T21495] Line length is too long: Should be less than 4094 [ 622.222798][T21459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.240711][T21494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.258042][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.270400][ T28] audit: type=1400 audit(1787024574.121:3200): avc: denied { read } for pid=21488 comm="syz.9.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 622.300928][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.318683][T21494] netlink: 'syz.2.3254': attribute type 14 has an invalid length. [ 622.327208][ T28] audit: type=1400 audit(1787024574.161:3201): avc: denied { write } for pid=21493 comm="syz.2.3254" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 622.362430][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3255'. [ 622.420378][ T28] audit: type=1400 audit(1787024574.271:3202): avc: denied { kexec_image_load } for pid=21488 comm="syz.9.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 622.492139][T21505] loop6: detected capacity change from 0 to 512 [ 622.617415][T21514] ip_tables: iptables: counters copy to user failed while replacing table [ 622.660671][T21505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.679015][T21519] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.3263: corrupted xattr block 95: invalid header [ 622.703642][T21516] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.728897][T21519] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 622.730081][T21519] EXT4-fs (loop0): Remounting filesystem read-only [ 622.739280][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 622.739303][ C0] EXT4-fs (loop0): initial error at time 1787024574: ext4_expand_extra_isize_ea:2810: inode 11 [ 622.739358][ C0] EXT4-fs (loop0): last error at time 1787024574: ext4_expand_extra_isize_ea:2810: inode 11 [ 622.777444][T21519] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -30) [ 622.788030][T21519] EXT4-fs (loop0): 1 orphan inode deleted [ 622.788711][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.794373][T21519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.821918][T21505] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 622.858166][T17590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.884867][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.932179][T21525] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3264: inode has both inline data and extents flags [ 622.946816][T21525] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 622.949204][T21525] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3264: couldn't read orphan inode 15 (err -117) [ 622.958447][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 622.958489][ C1] EXT4-fs (loop7): initial error at time 1787024574: ext4_orphan_get:1399: inode 15 [ 622.958608][ C1] EXT4-fs (loop7): last error at time 1787024574: ext4_orphan_get:1399: inode 15 [ 622.997180][T21525] loop7: lost filesystem error report for type 5 error -117 [ 623.015539][T21525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.113645][T21535] gre0: Master is either lo or non-ether device [ 623.250374][T21533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.262063][T21542] FAULT_INJECTION: forcing a failure. [ 623.262063][T21542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.267655][T21533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.284317][T21542] CPU: 0 UID: 0 PID: 21542 Comm: syz.9.3271 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 623.284396][T21542] Tainted: [W]=WARN [ 623.284405][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.284420][T21542] Call Trace: [ 623.284429][T21542] [ 623.284438][T21542] __dump_stack+0x1d/0x30 [ 623.284467][T21542] dump_stack_lvl+0x95/0xd0 [ 623.284491][T21542] dump_stack+0x15/0x1b [ 623.284518][T21542] should_fail_ex+0x25e/0x270 [ 623.284546][T21542] should_fail+0xb/0x20 [ 623.284569][T21542] should_fail_usercopy+0x1a/0x20 [ 623.284596][T21542] _copy_from_user+0x1c/0xb0 [ 623.284629][T21542] ___sys_sendmsg+0xc1/0x1e0 [ 623.284744][T21542] __x64_sys_sendmsg+0xd4/0x160 [ 623.284773][T21542] x64_sys_call+0x18e8/0x3050 [ 623.284799][T21542] do_syscall_64+0x136/0x3c0 [ 623.284885][T21542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.284914][T21542] RIP: 0033:0x7fb47be4e0d9 [ 623.284934][T21542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.284961][T21542] RSP: 002b:00007fb47a8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.285040][T21542] RAX: ffffffffffffffda RBX: 00007fb47c0d5fa0 RCX: 00007fb47be4e0d9 [ 623.285060][T21542] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000004 [ 623.285076][T21542] RBP: 00007fb47a8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 623.285093][T21542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.285108][T21542] R13: 00007fb47c0d6038 R14: 00007fb47c0d5fa0 R15: 00007fff5d6cb638 [ 623.285132][T21542] [ 623.291891][T21544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.468408][T21544] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.469375][T19425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.481440][T21543] EXT4-fs error (device loop6): ext4_map_blocks:835: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.502130][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.502996][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.536451][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.560810][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.583339][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.591000][T21552] set_capacity_and_notify: 6 callbacks suppressed [ 623.591096][T21552] loop7: detected capacity change from 0 to 512 [ 623.614469][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.628027][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.628407][T21549] loop9: detected capacity change from 0 to 512 [ 623.641554][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.660750][T21554] Cannot find del_set index 0 as target [ 623.660865][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.686721][T21552] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.3275: corrupted xattr block 95: invalid header [ 623.700701][T21543] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3272: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.736522][T21552] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 623.736745][T21552] EXT4-fs (loop7): Remounting filesystem read-only [ 623.739841][T21554] loop2: detected capacity change from 0 to 1024 [ 623.746013][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 623.746033][ C0] EXT4-fs (loop7): initial error at time 1787024575: ext4_expand_extra_isize_ea:2810: inode 11 [ 623.746066][ C0] EXT4-fs (loop7): last error at time 1787024575: ext4_expand_extra_isize_ea:2810: inode 11 [ 623.765897][T21552] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -30) [ 623.765935][T21552] EXT4-fs (loop7): 1 orphan inode deleted [ 623.766443][T21552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.844938][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 623.858167][T21554] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 623.858240][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.936967][T21549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.949578][T21549] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.962254][T21549] FAULT_INJECTION: forcing a failure. [ 623.962254][T21549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.975378][T21549] CPU: 0 UID: 0 PID: 21549 Comm: syz.9.3274 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 623.975456][T21549] Tainted: [W]=WARN [ 623.975465][T21549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.975547][T21549] Call Trace: [ 623.975589][T21549] [ 623.975600][T21549] __dump_stack+0x1d/0x30 [ 623.975638][T21549] dump_stack_lvl+0x95/0xd0 [ 623.975663][T21549] dump_stack+0x15/0x1b [ 623.975687][T21549] should_fail_ex+0x25e/0x270 [ 623.975730][T21549] should_fail+0xb/0x20 [ 623.975752][T21549] should_fail_usercopy+0x1a/0x20 [ 623.975778][T21549] _copy_from_user+0x1c/0xb0 [ 623.975806][T21549] vmemdup_user+0x5e/0xd0 [ 623.975909][T21549] path_setxattrat+0x1b3/0x320 [ 623.975946][T21549] __x64_sys_setxattr+0x6e/0x90 [ 623.975976][T21549] x64_sys_call+0x2f92/0x3050 [ 623.976080][T21549] do_syscall_64+0x136/0x3c0 [ 623.976118][T21549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.976146][T21549] RIP: 0033:0x7fb47be4e0d9 [ 623.976166][T21549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.976212][T21549] RSP: 002b:00007fb47a8a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 623.976233][T21549] RAX: ffffffffffffffda RBX: 00007fb47c0d5fa0 RCX: 00007fb47be4e0d9 [ 623.976249][T21549] RDX: 0000200000001400 RSI: 0000200000000080 RDI: 00002000000000c0 [ 623.976265][T21549] RBP: 00007fb47a8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 623.976323][T21549] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 623.976338][T21549] R13: 00007fb47c0d6038 R14: 00007fb47c0d5fa0 R15: 00007fff5d6cb638 [ 623.976359][T21549] [ 624.187802][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.200264][T21558] FAULT_INJECTION: forcing a failure. [ 624.200264][T21558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.203691][T21567] loop7: detected capacity change from 0 to 256 [ 624.213437][T21558] CPU: 1 UID: 0 PID: 21558 Comm: syz.6.3277 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 624.213503][T21558] Tainted: [W]=WARN [ 624.213512][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.213526][T21558] Call Trace: [ 624.213534][T21558] [ 624.213543][T21558] __dump_stack+0x1d/0x30 [ 624.213571][T21558] dump_stack_lvl+0x95/0xd0 [ 624.213594][T21558] dump_stack+0x15/0x1b [ 624.213627][T21558] should_fail_ex+0x25e/0x270 [ 624.213652][T21558] should_fail+0xb/0x20 [ 624.213672][T21558] should_fail_usercopy+0x1a/0x20 [ 624.213699][T21558] _copy_to_user+0x20/0xa0 [ 624.213728][T21558] simple_read_from_buffer+0xb5/0x130 [ 624.213758][T21558] proc_fail_nth_read+0x10e/0x150 [ 624.213827][T21558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.213969][T21558] vfs_read+0x18e/0x7c0 [ 624.213989][T21558] ? __tsan_unaligned_volatile_read8+0x131/0x190 [ 624.214014][T21558] ? __rcu_read_unlock+0x4e/0x70 [ 624.214099][T21558] ? __fget_files+0x184/0x1c0 [ 624.214135][T21558] ? mutex_lock+0x57/0x90 [ 624.214163][T21558] ksys_read+0xdc/0x1a0 [ 624.214264][T21558] __x64_sys_read+0x40/0x50 [ 624.214286][T21558] x64_sys_call+0x292b/0x3050 [ 624.214313][T21558] do_syscall_64+0x136/0x3c0 [ 624.214345][T21558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.214369][T21558] RIP: 0033:0x7efee657e90e [ 624.214426][T21558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 624.214446][T21558] RSP: 002b:00007efee5016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.214470][T21558] RAX: ffffffffffffffda RBX: 00007efee50176c0 RCX: 00007efee657e90e [ 624.214486][T21558] RDX: 000000000000000f RSI: 00007efee50170a0 RDI: 0000000000000005 [ 624.214500][T21558] RBP: 00007efee5017090 R08: 0000000000000000 R09: 0000000000000000 [ 624.214590][T21558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.214604][T21558] R13: 00007efee6846038 R14: 00007efee6845fa0 R15: 00007ffc39aa7c88 [ 624.214625][T21558] [ 624.273721][T21554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.298900][T21567] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 624.344291][T21554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.523962][T21575] loop0: detected capacity change from 0 to 512 [ 624.539378][T21578] vhci_hcd: not connected 4 [ 624.594175][T21582] loop9: detected capacity change from 0 to 512 [ 624.621485][T21582] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3286: iget: bad i_size value: 38620345925642 [ 624.634156][T21582] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 624.647018][T21586] loop6: detected capacity change from 0 to 1024 [ 624.655558][T21582] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3286: couldn't read orphan inode 15 (err -117) [ 624.674546][T21582] loop9: lost filesystem error report for type 5 error -117 [ 624.683976][T21582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.707245][T21587] loop2: detected capacity change from 0 to 512 [ 624.720148][T21587] EXT4-fs: dax option not supported [ 624.750323][T21586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.758999][T21575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.763696][T21586] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.775657][T21575] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.830423][T21584] EXT4-fs error (device loop6): ext4_map_blocks:835: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.852941][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.866876][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.867587][T17590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.880656][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.905016][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.919253][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.928586][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.951916][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 624.988316][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.002404][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.016701][T21584] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3287: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.055996][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 625.068711][T21594] loop2: detected capacity change from 0 to 512 [ 625.077236][T21594] EXT4-fs: inline encryption not supported [ 625.083192][T21594] EXT4-fs: test_dummy_encryption option not supported [ 625.180164][T21604] 9p: Bad value for 'rfdno' [ 625.226662][T21597] loop9: detected capacity change from 0 to 1024 [ 625.246944][T21597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.277197][T21597] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.280793][T21611] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.301067][T21597] EXT4-fs error (device loop9): ext4_map_blocks:835: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.314847][T21613] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.337277][ T6046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.366034][T21607] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.381454][T21607] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.394994][T21607] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.408717][T21595] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.422490][T21595] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.438296][T21595] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.452037][T21595] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.465474][T21607] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.479730][T21613] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3294'. [ 625.488818][T21595] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3290: lblock 0 mapped to illegal pblock 0 (length 1) [ 625.546381][T21613] team0: Device ipvlan2 is already an upper device of the team interface [ 625.588555][ T6046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.677064][ T6046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.766626][ T6046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.921137][ T6046] bridge_slave_1: left allmulticast mode [ 625.931745][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 625.946138][ T6046] bridge_slave_1: left promiscuous mode [ 625.947398][T21632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.956781][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.967643][T21624] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 625.971500][T21632] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.996374][T21624] FAT-fs (loop7): Filesystem has been set read-only [ 626.009597][ T6046] bridge_slave_0: left allmulticast mode [ 626.027276][ T6046] bridge_slave_0: left promiscuous mode [ 626.035682][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.056540][T21631] EXT4-fs error (device loop0): ext4_map_blocks:835: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.093934][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.126267][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.145920][T21645] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 626.173079][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.193589][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.197963][T21638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.232453][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.238661][T21638] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.261856][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.265124][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.287641][ T6046] bond0 (unregistering): Released all slaves [ 626.299783][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.341984][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.368805][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.385812][ T6046] hsr_slave_0: left promiscuous mode [ 626.391289][T21654] netlink: 'syz.7.3307': attribute type 1 has an invalid length. [ 626.406845][ T6046] hsr_slave_1: left promiscuous mode [ 626.415021][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.418452][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.435879][T21631] EXT4-fs error (device loop0): ext4_map_blocks:793: inode #15: comm syz.0.3302: lblock 0 mapped to illegal pblock 0 (length 1) [ 626.467744][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.490284][T17590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 626.504217][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.528899][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.568317][ T6046] veth1_macvtap: left promiscuous mode [ 626.586375][ T6046] veth0_macvtap: left promiscuous mode [ 626.595927][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3304'. [ 626.599205][ T6046] veth1_vlan: left promiscuous mode [ 626.610503][ T6046] veth0_vlan: left promiscuous mode [ 626.717678][T21675] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3306: iget: bad i_size value: 38620345925642 [ 626.730322][T21675] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.734263][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 626.749871][ C0] EXT4-fs (loop6): initial error at time 1787024578: ext4_orphan_get:1399: inode 15 [ 626.759312][ C0] EXT4-fs (loop6): last error at time 1787024578: ext4_orphan_get:1399: inode 15 [ 626.780164][T21675] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3306: couldn't read orphan inode 15 (err -117) [ 626.805577][T21675] loop6: lost filesystem error report for type 5 error -117 [ 626.865430][T21675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.894826][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 626.909172][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 626.955928][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 626.955946][ T28] audit: type=1400 audit(1787024578.781:3216): avc: denied { write } for pid=21663 comm="syz.6.3306" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 626.967143][T21684] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 627.005515][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 627.099787][ T28] audit: type=1400 audit(1787024578.961:3217): avc: denied { create } for pid=21626 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 627.099827][ T28] audit: type=1400 audit(1787024578.961:3218): avc: denied { setattr } for pid=21626 comm="syz-executor" name="tun" dev="devtmpfs" ino=4063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 627.099927][ T28] audit: type=1400 audit(1787024578.961:3219): avc: denied { read write } for pid=21626 comm="syz-executor" name="tun" dev="devtmpfs" ino=4063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 627.099955][ T28] audit: type=1400 audit(1787024578.961:3220): avc: denied { open } for pid=21626 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=4063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 627.100027][ T28] audit: type=1400 audit(1787024578.961:3221): avc: denied { ioctl } for pid=21626 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=4063 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 627.115645][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.256245][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3312'. [ 627.310972][T21708] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 627.369624][ T28] audit: type=1400 audit(1787024579.231:3222): avc: denied { write } for pid=21699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.432190][ T28] audit: type=1400 audit(1787024579.291:3223): avc: denied { write } for pid=21719 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.505142][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 627.512894][ T28] audit: type=1326 audit(1787024579.371:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21731 comm="syz.9.3320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47be4e0d9 code=0x7ffc0000 [ 627.513113][ T28] audit: type=1326 audit(1787024579.371:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21731 comm="syz.9.3320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb47be0ae3b code=0x7ffc0000 [ 627.591155][T21626] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.591194][T21626] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.591360][T21626] bridge_slave_0: entered allmulticast mode [ 627.591998][T21626] bridge_slave_0: entered promiscuous mode [ 627.593532][T21626] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.668291][T21626] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.668401][T21626] bridge_slave_1: entered allmulticast mode [ 627.669054][T21626] bridge_slave_1: entered promiscuous mode [ 627.689068][T21626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.692259][T21626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.748794][T21626] team0: Port device team_slave_0 added [ 627.749861][T21626] team0: Port device team_slave_1 added [ 627.756829][T21746] e1000e 0000:00:00.0: probe with driver e1000e failed with error -5 [ 627.773923][T21626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.773939][T21626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.773965][T21626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.774864][T21626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.774880][T21626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.774927][T21626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.782883][T21746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3324'. [ 627.827377][T21626] hsr_slave_0: entered promiscuous mode [ 627.829437][T21626] hsr_slave_1: entered promiscuous mode [ 627.829730][T21626] debugfs: 'hsr0' already exists in 'hsr' [ 627.829749][T21626] Cannot create hsr debugfs directory [ 627.996758][T21756] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3325'. [ 628.597643][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 628.781828][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 628.859685][T21759] loop9: p1 < > p2 < > p3 p4 < > [ 628.865723][T21754] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.876321][T21774] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 628.891695][T21759] loop9: partition table partially beyond EOD, truncated [ 628.931565][T21759] loop9: p1 start 2305 is beyond EOD, truncated [ 628.945174][T21774] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 628.964081][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 628.970583][ C1] EXT4-fs (loop7): initial error at time 1787024580: ext4_mb_generate_buddy:1317 [ 628.979768][ C1] EXT4-fs (loop7): last error at time 1787024580: ext4_mb_generate_buddy:1317 [ 628.994131][T21759] loop9: p2 start 4294902784 is beyond EOD, truncated [ 629.007035][T21759] loop9: p3 start 3724543488 is beyond EOD, truncated [ 629.021325][T21774] EXT4-fs (loop7): 1 truncate cleaned up [ 629.035561][T21774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.200226][T21824] ip6gre1: entered promiscuous mode [ 629.214209][T21824] ip6gre1: entered allmulticast mode [ 629.279934][T21626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 629.304646][T21626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.331979][T21626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 629.364819][T21626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.386847][T21626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 629.416269][T21626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.436787][T21626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 629.462504][T21626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.568723][T21626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.611301][T21626] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.641773][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.648891][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.680245][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.687372][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.698637][ T2981] loop9: p1 < > p2 < > p3 p4 < > [ 629.724596][ T2981] loop9: partition table partially beyond EOD, truncated [ 629.737442][ T2981] loop9: p1 start 2305 is beyond EOD, truncated [ 629.751499][T19434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.760644][ T2981] loop9: p2 start 4294902784 is beyond EOD, truncated [ 629.780793][ T2981] loop9: p3 start 3724543488 is beyond EOD, truncated [ 629.863174][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 629.917519][T21871] set_capacity_and_notify: 13 callbacks suppressed [ 629.917570][T21871] loop6: detected capacity change from 0 to 512 [ 629.956168][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 630.069911][T21626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.083905][T21893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.117039][T21893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.139257][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3332'. [ 630.224388][T21626] veth0_vlan: entered promiscuous mode [ 630.234238][T21626] veth1_vlan: entered promiscuous mode [ 630.241931][T21916] netlink: 26 bytes leftover after parsing attributes in process `syz.9.3337'. [ 630.255034][T21626] veth0_macvtap: entered promiscuous mode [ 630.283426][T21626] veth1_macvtap: entered promiscuous mode [ 630.287641][T21920] loop0: detected capacity change from 0 to 1024 [ 630.306132][T21920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.325221][T21626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.342057][T21920] ip_tables: iptables: counters copy to user failed while replacing table [ 630.362034][T21626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.375512][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.375580][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.375661][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.424233][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.466529][T21938] vhci_hcd: not connected 4 [ 630.512171][T21935] loop9: detected capacity change from 0 to 512 [ 630.565619][T21935] EXT4-fs (loop9): orphan cleanup on readonly fs [ 630.584834][T21935] EXT4-fs warning (device loop9): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 630.599492][T21935] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 630.606239][T21935] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3340: couldn't read orphan inode 26 (err -116) [ 630.618070][T21935] loop9: lost filesystem error report for type 5 error -116 [ 630.656189][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 630.669979][ C0] EXT4-fs (loop9): initial error at time 1787024582: ext4_orphan_get:1404 [ 630.678541][ C0] EXT4-fs (loop9): last error at time 1787024582: ext4_orphan_get:1404 [ 630.697394][T21935] EXT4-fs (loop9): Remounting filesystem read-only [ 630.777652][T21947] loop1: detected capacity change from 0 to 1024 [ 630.798780][T21947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.832278][T21947] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.851904][T21947] EXT4-fs error (device loop1): ext4_map_blocks:835: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 630.882949][T21947] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 630.898226][T21947] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 630.911704][T21947] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 630.977130][T21945] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 630.990891][T21947] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.022569][T21945] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.036282][T21945] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.051600][T21945] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.065533][T21945] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3341: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.098579][T21983] loop7: detected capacity change from 0 to 512 [ 631.122007][T21983] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3346: iget: bad i_size value: 38620345925642 [ 631.134728][T21983] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 631.135032][T21983] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3346: couldn't read orphan inode 15 (err -117) [ 631.137755][T21985] hugetlbfs: Bad value 'z_' for mount option 'nr_inodes' [ 631.137755][T21985] [ 631.144216][T21983] loop7: lost filesystem error report for type 5 error -117 [ 631.212161][T21995] loop6: detected capacity change from 0 to 1024 [ 631.235813][T21995] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.247479][T21995] EXT4-fs error (device loop6): ext4_map_blocks:835: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.273840][T21966] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.297957][T21966] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.313994][T21966] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.339473][T21964] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.353027][T21964] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.367712][T21964] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.381381][T21966] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.402166][ T6625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.418813][T21995] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.432463][T21995] EXT4-fs error (device loop6): ext4_map_blocks:793: inode #15: comm syz.6.3343: lblock 0 mapped to illegal pblock 0 (length 1) [ 631.481241][T22011] vhci_hcd: not connected 4 [ 631.541775][ T6625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.592784][T22021] netlink: 'syz.7.3350': attribute type 1 has an invalid length. [ 631.631103][T22021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.668261][ T6625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.705425][T22028] vhci_hcd: not connected 4 [ 631.764910][ T6625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.858449][T22043] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3354'. [ 631.930605][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 631.930655][ T28] audit: type=1400 audit(1787024583.791:3307): avc: denied { write } for pid=22039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.960312][T22047] loop6: detected capacity change from 0 to 512 [ 632.000885][ T6625] bridge_slave_1: left allmulticast mode [ 632.010824][T22053] loop1: detected capacity change from 0 to 512 [ 632.017866][T22047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.025230][T22053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 632.036026][ T6625] bridge_slave_1: left promiscuous mode [ 632.042120][T22047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 632.043226][ T28] audit: type=1400 audit(1787024583.821:3308): avc: denied { write } for pid=22056 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.050870][T22047] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 632.100745][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.113789][T22047] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3355: Allocating blocks 41-42 which overlap fs metadata [ 632.114657][T22053] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 632.127469][T22047] loop6: lost filesystem error report for type 5 error -117 [ 632.135799][T22053] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 632.152036][T22066] loop9: detected capacity change from 0 to 512 [ 632.160203][T22047] EXT4-fs (loop6): Remounting filesystem read-only [ 632.163559][T22053] EXT4-fs (loop1): 1 truncate cleaned up [ 632.176489][T22047] Quota error (device loop6): write_blk: dquota write failed [ 632.179822][ T28] audit: type=1400 audit(1787024584.021:3309): avc: denied { write } for pid=22033 comm="syz.1.3353" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 632.183878][T22047] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 632.205645][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 632.214755][T22047] Quota error (device loop6): write_blk: dquota write failed [ 632.221052][ C1] EXT4-fs (loop6): initial error at time 1787024583: ext4_mb_mark_diskspace_used:4222 [ 632.228432][T22047] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 632.228486][T22047] EXT4-fs (loop6): 1 truncate cleaned up [ 632.238000][ C1] EXT4-fs (loop6): last error at time 1787024583: ext4_mb_mark_diskspace_used:4222 [ 632.290827][ T6625] bridge_slave_0: left allmulticast mode [ 632.296818][ T6625] bridge_slave_0: left promiscuous mode [ 632.302657][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.416566][T22080] vhci_hcd: not connected 4 [ 632.433031][T22066] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.438698][ T28] audit: type=1400 audit(1787024584.291:3310): avc: denied { write } for pid=22068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.476915][ T6625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.482936][ T28] audit: type=1400 audit(1787024584.291:3311): avc: denied { write } for pid=22087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.537092][ T6625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.572334][ T6625] bond0 (unregistering): Released all slaves [ 632.601284][T22103] netlink: 'syz.6.3362': attribute type 1 has an invalid length. [ 632.625425][T22106] vhci_hcd: not connected 4 [ 632.665626][T22103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 632.667017][ T28] audit: type=1400 audit(1787024584.531:3312): avc: denied { write } for pid=22091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.702781][ T6625] hsr_slave_0: left promiscuous mode [ 632.717346][ T6625] hsr_slave_1: left promiscuous mode [ 632.725475][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.739121][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.760796][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.769778][ T6625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.807967][ T6625] veth1_macvtap: left promiscuous mode [ 632.823083][ T6625] veth0_macvtap: left promiscuous mode [ 632.840384][ T6625] veth1_vlan: left promiscuous mode [ 632.882132][ T6625] veth0_vlan: left promiscuous mode [ 632.905193][T22124] loop1: detected capacity change from 0 to 512 [ 632.919363][T22124] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.3369: corrupted xattr block 95: invalid header [ 632.970894][T22124] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 632.974063][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 632.984864][T22124] EXT4-fs (loop1): Remounting filesystem read-only [ 632.989715][ C1] EXT4-fs (loop1): initial error at time 1787024584: ext4_expand_extra_isize_ea:2810: inode 11 [ 633.006632][ C1] EXT4-fs (loop1): last error at time 1787024584: ext4_expand_extra_isize_ea:2810: inode 11 [ 633.007548][T22124] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -30) [ 633.032891][T22124] EXT4-fs (loop1): 1 orphan inode deleted [ 633.046716][T22112] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.069486][T22115] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.081554][T22112] EXT4-fs error (device loop7): ext4_map_blocks:835: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.095818][T22115] EXT4-fs error (device loop9): ext4_map_blocks:835: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.113207][ T6625] team0 (unregistering): Port device team_slave_1 removed [ 633.131642][T22112] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.146782][ T6625] team0 (unregistering): Port device team_slave_0 removed [ 633.148354][T22115] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.167687][T22112] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.181654][T22114] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.195265][T22114] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.208897][T22112] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.222435][T22114] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.236102][T22115] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.254126][T22111] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.254378][T22126] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.278485][T22111] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.280869][T22126] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.308931][T22111] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.308904][T22114] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.335865][T22114] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3365: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.335918][T22111] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.365925][T22111] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.380544][T22111] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3364: lblock 0 mapped to illegal pblock 0 (length 1) [ 633.460969][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3371'. [ 633.566826][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 633.586342][T22133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22133 comm=syz.1.3370 [ 633.599032][T22155] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 633.759442][T22178] vhci_hcd: not connected 4 [ 633.782404][T22177] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 633.791499][T22180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3374'. [ 633.814360][T22073] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.821475][T22073] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.828886][T22073] bridge_slave_0: entered allmulticast mode [ 633.835581][T22073] bridge_slave_0: entered promiscuous mode [ 633.842579][T22073] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.849773][T22073] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.857149][T22073] bridge_slave_1: entered allmulticast mode [ 633.865505][T22073] bridge_slave_1: entered promiscuous mode [ 633.872023][T22185] FAULT_INJECTION: forcing a failure. [ 633.872023][T22185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.883511][T22073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.896360][T22073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.903733][T22188] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 633.913587][T22185] CPU: 0 UID: 0 PID: 22185 Comm: syz.6.3376 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 633.913622][T22185] Tainted: [W]=WARN [ 633.913631][T22185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.913644][T22185] Call Trace: [ 633.913669][T22185] [ 633.913679][T22185] __dump_stack+0x1d/0x30 [ 633.913706][T22185] dump_stack_lvl+0x95/0xd0 [ 633.913846][T22185] dump_stack+0x15/0x1b [ 633.913875][T22185] should_fail_ex+0x25e/0x270 [ 633.913934][T22185] should_fail+0xb/0x20 [ 633.913954][T22185] should_fail_usercopy+0x1a/0x20 [ 633.913978][T22185] _copy_to_user+0x20/0xa0 [ 633.914066][T22185] simple_read_from_buffer+0xb5/0x130 [ 633.914096][T22185] proc_fail_nth_read+0x10e/0x150 [ 633.914125][T22185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.914186][T22185] vfs_read+0x18e/0x7c0 [ 633.914207][T22185] ? __rcu_read_unlock+0x4e/0x70 [ 633.914256][T22185] ? __fget_files+0x184/0x1c0 [ 633.914285][T22185] ? mutex_lock+0x57/0x90 [ 633.914311][T22185] ksys_read+0xdc/0x1a0 [ 633.914345][T22185] __x64_sys_read+0x40/0x50 [ 633.914367][T22185] x64_sys_call+0x292b/0x3050 [ 633.914392][T22185] do_syscall_64+0x136/0x3c0 [ 633.914425][T22185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.914514][T22185] RIP: 0033:0x7efee657e90e [ 633.914533][T22185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 633.914560][T22185] RSP: 002b:00007efee5016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 633.914584][T22185] RAX: ffffffffffffffda RBX: 00007efee50176c0 RCX: 00007efee657e90e [ 633.914599][T22185] RDX: 000000000000000f RSI: 00007efee50170a0 RDI: 0000000000000005 [ 633.914614][T22185] RBP: 00007efee5017090 R08: 0000000000000000 R09: 0000000000000000 [ 633.914674][T22185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.914688][T22185] R13: 00007efee6846038 R14: 00007efee6845fa0 R15: 00007ffc39aa7c88 [ 633.914708][T22185] [ 633.975228][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 634.127518][T22073] team0: Port device team_slave_0 added [ 634.142107][T22073] team0: Port device team_slave_1 added [ 634.181622][T22073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.196045][T22073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.239182][T22073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.252156][T22073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.259770][T22073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.288612][T22073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.322782][T22204] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3380: iget: bad i_size value: 38620345925642 [ 634.335443][T22204] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.361118][T22073] hsr_slave_0: entered promiscuous mode [ 634.375068][T22204] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3380: couldn't read orphan inode 15 (err -117) [ 634.376348][T22073] hsr_slave_1: entered promiscuous mode [ 634.396210][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 634.402441][T22204] loop7: lost filesystem error report for type 5 error -117 [ 634.404978][ C1] EXT4-fs (loop7): initial error at time 1787024586: ext4_orphan_get:1399: inode 15 [ 634.405015][ C1] EXT4-fs (loop7): last error at time 1787024586: ext4_orphan_get:1399: inode 15 [ 634.411871][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 634.660673][T22244] vhci_hcd: not connected 4 [ 634.672276][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 634.769885][T22228] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.803592][T22255] vhci_hcd: not connected 4 [ 634.807120][T22073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 634.811127][T22228] EXT4-fs error (device loop7): ext4_map_blocks:835: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.832805][T22073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.841852][T22073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 634.852195][T22228] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.866263][T22073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.873986][T22073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 634.882592][T22228] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.899250][T22253] loop9: p3 p4 < > [ 634.906595][T22253] loop9: p3 size 201326592 extends beyond EOD, truncated [ 634.907097][T22073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.919492][T22227] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.934529][T22227] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.935584][T22073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 634.949496][T22227] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.968596][T22254] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.982969][T22254] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 634.996501][T22228] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.012445][T22073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.035348][T22227] EXT4-fs error (device loop7): ext4_map_blocks:793: inode #15: comm syz.7.3382: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.155662][T22073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.187262][T22073] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.202768][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.209988][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.235206][T22288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3392'. [ 635.248453][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.255580][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.271551][T22282] set_capacity_and_notify: 7 callbacks suppressed [ 635.271573][T22282] loop9: detected capacity change from 0 to 512 [ 635.307965][T22282] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3391: iget: bad i_size value: 38620345925642 [ 635.320619][T22282] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 635.325062][T22282] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3391: couldn't read orphan inode 15 (err -117) [ 635.346025][T22282] loop9: lost filesystem error report for type 5 error -117 [ 635.375609][T22305] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3393'. [ 635.501212][T22073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.616336][T22335] loop1: detected capacity change from 0 to 1024 [ 635.692672][T22335] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.711497][T22314] EXT4-fs error (device loop1): ext4_map_blocks:835: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.730248][T22314] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.752346][T22314] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.770217][T22314] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.771765][T22073] veth0_vlan: entered promiscuous mode [ 635.791783][T22309] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.805416][T22309] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.818966][T22309] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.821181][T22073] veth1_vlan: entered promiscuous mode [ 635.838591][T22309] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.866995][T22309] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.881024][T22309] EXT4-fs error (device loop1): ext4_map_blocks:793: inode #15: comm syz.1.3395: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.902782][T22352] loop9: detected capacity change from 0 to 512 [ 635.903229][T22073] veth0_macvtap: entered promiscuous mode [ 635.916066][T22352] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3397: iget: bad i_size value: 38620345925642 [ 635.922947][T22365] loop7: detected capacity change from 0 to 256 [ 635.928741][T22352] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 635.940439][T22073] veth1_macvtap: entered promiscuous mode [ 635.947798][T22352] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3397: couldn't read orphan inode 15 (err -117) [ 635.954400][T22073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.969342][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 635.969362][ C1] EXT4-fs (loop9): initial error at time 1787024587: ext4_orphan_get:1399: inode 15 [ 635.969396][ C1] EXT4-fs (loop9): last error at time 1787024587: ext4_orphan_get:1399: inode 15 [ 635.995037][T22365] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 636.003548][T22352] loop9: lost filesystem error report for type 5 error -117 [ 636.042779][T22073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.073460][T22365] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3399'. [ 636.085871][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.111020][T22365] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 636.128702][T22365] team0: Device ipvlan2 failed to register rx_handler [ 636.258668][T22386] loop6: detected capacity change from 0 to 164 [ 636.269487][T22386] SELinux: policydb version 275 does not match my version range 15-35 [ 636.278049][T22386] SELinux: failed to load policy [ 636.279424][ T6625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.308273][ T160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.337647][ T160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.400757][T22402] FAULT_INJECTION: forcing a failure. [ 636.400757][T22402] name failslab, interval 1, probability 0, space 0, times 0 [ 636.413468][T22402] CPU: 0 UID: 0 PID: 22402 Comm: syz.7.3404 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 636.413505][T22402] Tainted: [W]=WARN [ 636.413515][T22402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.413531][T22402] Call Trace: [ 636.413539][T22402] [ 636.413549][T22402] __dump_stack+0x1d/0x30 [ 636.413584][T22402] dump_stack_lvl+0x95/0xd0 [ 636.413648][T22402] dump_stack+0x15/0x1b [ 636.413671][T22402] should_fail_ex+0x25e/0x270 [ 636.413697][T22402] should_failslab+0x8c/0xb0 [ 636.413724][T22402] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 636.413753][T22402] ? __d_alloc+0x34/0x320 [ 636.413807][T22402] ? __d_alloc+0x34/0x320 [ 636.413843][T22402] __d_alloc+0x34/0x320 [ 636.413880][T22402] d_alloc+0x2e/0x100 [ 636.413940][T22402] lookup_one_qstr_excl+0x95/0x240 [ 636.413976][T22402] filename_create+0x155/0x220 [ 636.414063][T22402] filename_mknodat+0x13e/0x450 [ 636.414096][T22402] __se_sys_mknodat+0x38/0xf0 [ 636.414161][T22402] __x64_sys_mknodat+0x55/0x70 [ 636.414188][T22402] x64_sys_call+0x3f7/0x3050 [ 636.414216][T22402] do_syscall_64+0x136/0x3c0 [ 636.414250][T22402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.414343][T22402] RIP: 0033:0x7f3ee822e0d9 [ 636.414364][T22402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.414385][T22402] RSP: 002b:00007f3ee6c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 636.414410][T22402] RAX: ffffffffffffffda RBX: 00007f3ee84b5fa0 RCX: 00007f3ee822e0d9 [ 636.414428][T22402] RDX: 0000000000001000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 636.414446][T22402] RBP: 00007f3ee6c87090 R08: 0000000000000000 R09: 0000000000000000 [ 636.414478][T22402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.414512][T22402] R13: 00007f3ee84b6038 R14: 00007f3ee84b5fa0 R15: 00007ffd1acfaa08 [ 636.414533][T22402] [ 636.748896][T22426] loop9: detected capacity change from 0 to 128 [ 636.813415][T22430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3409'. [ 636.822672][T22431] loop7: detected capacity change from 0 to 164 [ 636.844083][T22431] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 636.846859][T22433] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3411'. [ 636.902636][T22407] loop1: detected capacity change from 0 to 512 [ 636.914994][T22417] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 636.956040][T22407] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 636.967060][T22445] loop9: detected capacity change from 0 to 128 [ 636.988896][T22417] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 637.030443][T22440] loop3: detected capacity change from 0 to 2048 [ 637.038888][T22407] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 637.038935][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 637.039023][ T28] audit: type=1400 audit(1787024588.881:3345): avc: denied { write } for pid=22439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.058734][T22452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 637.060855][T22407] EXT4-fs (loop1): 1 truncate cleaned up [ 637.102578][T22452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 637.111292][T22452] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 637.127931][ T28] audit: type=1400 audit(1787024588.991:3346): avc: denied { write } for pid=22456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.180543][ T28] audit: type=1400 audit(1787024588.991:3347): avc: denied { write } for pid=22406 comm="syz.1.3406" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.260891][ T28] audit: type=1400 audit(1787024589.031:3348): avc: denied { listen } for pid=22469 comm="syz.9.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 637.291997][T22440] loop3: p1 < > p2 < > p3 p4 < > [ 637.296757][T22466] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 637.303321][T22440] loop3: partition table partially beyond EOD, truncated [ 637.317465][T22466] Cannot find set identified by id 0 to match [ 637.319542][T22440] loop3: p1 start 2305 is beyond EOD, truncated [ 637.325028][T22452] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3413: Allocating blocks 41-42 which overlap fs metadata [ 637.329858][T22440] loop3: p2 start 4294902784 is beyond EOD, truncated [ 637.343486][T22452] loop6: lost filesystem error report for type 5 error -117 [ 637.350275][T22440] loop3: p3 start 3724543488 is beyond EOD, truncated [ 637.372054][T22452] EXT4-fs (loop6): Remounting filesystem read-only [ 637.378662][T22452] Quota error (device loop6): write_blk: dquota write failed [ 637.392498][ T28] audit: type=1400 audit(1787024589.181:3349): avc: denied { mounton } for pid=22465 comm="syz.7.3415" path="/77/file0/proc" dev="loop7" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 637.426528][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 637.436765][ C0] EXT4-fs (loop6): initial error at time 1787024589: ext4_mb_mark_diskspace_used:4222 [ 637.450653][ C0] EXT4-fs (loop6): last error at time 1787024589: ext4_mb_mark_diskspace_used:4222 [ 637.465316][T22452] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 637.528459][ T28] audit: type=1400 audit(1787024589.391:3350): avc: denied { write } for pid=22469 comm="syz.9.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 637.556251][T22452] Quota error (device loop6): write_blk: dquota write failed [ 637.578309][T22452] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 637.633920][T22452] EXT4-fs (loop6): 1 truncate cleaned up [ 639.094323][ T2487] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.180696][ T2487] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.264232][T22558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 639.421908][T22554] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 639.454983][ T2487] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.468806][T22558] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.519411][T22554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3432'. [ 639.537810][T22558] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 639.554762][T22554] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 639.562040][T22554] team0: Device ipvlan2 failed to register rx_handler [ 639.685009][ T2487] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.889681][T22558] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.3433: Allocating blocks 41-42 which overlap fs metadata [ 639.917196][T22558] loop9: lost filesystem error report for type 5 error -117 [ 639.917385][T22558] EXT4-fs (loop9): Remounting filesystem read-only [ 639.931350][T22558] EXT4-fs (loop9): 1 truncate cleaned up [ 639.938077][T22592] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3438: iget: bad i_size value: 38620345925642 [ 639.950756][T22592] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 639.953854][T22592] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3438: couldn't read orphan inode 15 (err -117) [ 639.978307][T22592] loop6: lost filesystem error report for type 5 error -117 [ 639.992860][ T2487] bridge_slave_1: left allmulticast mode [ 640.005861][ T2487] bridge_slave_1: left promiscuous mode [ 640.011567][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.023707][ T2487] bridge_slave_0: left allmulticast mode [ 640.029603][ T2487] bridge_slave_0: left promiscuous mode [ 640.035539][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.103821][T22604] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 640.133690][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.147279][T22604] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.147367][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.179407][ T2487] bond0 (unregistering): Released all slaves [ 640.188447][ T2487] bond1 (unregistering): Released all slaves [ 640.255077][ T2487] tipc: Disabling bearer [ 640.268390][ T2487] tipc: Left network mode [ 640.275289][T22621] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3447'. [ 640.306146][ T2487] hsr_slave_0: left promiscuous mode [ 640.312371][ T2487] hsr_slave_1: left promiscuous mode [ 640.323252][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.336842][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.349126][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.360459][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.378048][ T2487] veth1_macvtap: left promiscuous mode [ 640.386012][ T2487] veth0_macvtap: left promiscuous mode [ 640.401049][T22634] set_capacity_and_notify: 6 callbacks suppressed [ 640.401068][T22634] loop3: detected capacity change from 0 to 2048 [ 640.414771][ T2487] veth1_vlan: left promiscuous mode [ 640.425550][ T2487] veth0_vlan: left promiscuous mode [ 640.464803][T22634] loop3: p1 < > p2 < > p3 p4 < > [ 640.472631][T22634] loop3: partition table partially beyond EOD, truncated [ 640.500396][T22634] loop3: p1 start 2305 is beyond EOD, truncated [ 640.513683][T22634] loop3: p2 start 4294902784 is beyond EOD, truncated [ 640.530712][T22634] loop3: p3 start 3724543488 is beyond EOD, truncated [ 640.578993][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 640.588898][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 640.618715][T22551] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.625777][T22551] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.632878][T22551] bridge_slave_0: entered allmulticast mode [ 640.639212][T22551] bridge_slave_0: entered promiscuous mode [ 640.646446][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 640.658234][T22551] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.680000][T22551] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.687438][T22551] bridge_slave_1: entered allmulticast mode [ 640.695049][T22551] bridge_slave_1: entered promiscuous mode [ 640.713401][T22655] loop1: detected capacity change from 0 to 2048 [ 640.750272][T22551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.761259][T22551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.766940][T22655] x_tables: duplicate underflow at hook 2 [ 640.790017][T22551] team0: Port device team_slave_0 added [ 640.796919][T22551] team0: Port device team_slave_1 added [ 640.812403][T22551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.819416][T22551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.845415][T22551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.856684][T22551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.865668][T22551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.902597][T22551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.946447][T22551] hsr_slave_0: entered promiscuous mode [ 640.952634][T22551] hsr_slave_1: entered promiscuous mode [ 640.958555][T22551] debugfs: 'hsr0' already exists in 'hsr' [ 640.964397][T22551] Cannot create hsr debugfs directory [ 641.031462][T22664] 9p: Bad value for 'rfdno' [ 641.047017][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 641.086130][T22678] vhci_hcd: not connected 4 [ 641.177307][ T2487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.313784][ T2487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.416277][T22705] FAULT_INJECTION: forcing a failure. [ 641.416277][T22705] name failslab, interval 1, probability 0, space 0, times 0 [ 641.419191][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 641.428917][T22705] CPU: 0 UID: 0 PID: 22705 Comm: syz.9.3464 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 641.428954][T22705] Tainted: [W]=WARN [ 641.428963][T22705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 641.428994][T22705] Call Trace: [ 641.429001][T22705] [ 641.429010][T22705] __dump_stack+0x1d/0x30 [ 641.429057][T22705] dump_stack_lvl+0x95/0xd0 [ 641.429124][T22705] dump_stack+0x15/0x1b [ 641.429145][T22705] should_fail_ex+0x25e/0x270 [ 641.429217][T22705] ? dev_ethtool+0x99/0x2100 [ 641.429251][T22705] should_failslab+0x8c/0xb0 [ 641.429276][T22705] __kmalloc_cache_noprof+0x7b/0x3d0 [ 641.429303][T22705] ? dev_ethtool+0x99/0x2100 [ 641.429368][T22705] dev_ethtool+0x99/0x2100 [ 641.429393][T22705] ? full_name_hash+0x92/0xe0 [ 641.429423][T22705] ? strcmp+0x22/0x50 [ 641.429502][T22705] ? __rcu_read_unlock+0x4e/0x70 [ 641.429530][T22705] dev_ioctl+0x2e0/0x960 [ 641.429562][T22705] sock_do_ioctl+0x1aa/0x230 [ 641.429616][T22705] sock_ioctl+0x439/0x610 [ 641.429645][T22705] ? mutex_lock+0x57/0x90 [ 641.429670][T22705] ? __pfx_sock_ioctl+0x10/0x10 [ 641.429767][T22705] __se_sys_ioctl+0xce/0x140 [ 641.429839][T22705] __x64_sys_ioctl+0x43/0x50 [ 641.429861][T22705] x64_sys_call+0x16a2/0x3050 [ 641.429887][T22705] do_syscall_64+0x136/0x3c0 [ 641.430016][T22705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.430039][T22705] RIP: 0033:0x7fb47be4e0d9 [ 641.430058][T22705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.430078][T22705] RSP: 002b:00007fb47a8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.430101][T22705] RAX: ffffffffffffffda RBX: 00007fb47c0d5fa0 RCX: 00007fb47be4e0d9 [ 641.430134][T22705] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 641.430172][T22705] RBP: 00007fb47a8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 641.430187][T22705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.430279][T22705] R13: 00007fb47c0d6038 R14: 00007fb47c0d5fa0 R15: 00007fff5d6cb638 [ 641.430351][T22705] [ 641.715784][ T2487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.884138][ T2487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.924712][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3468'. [ 641.958695][T22738] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.965911][T22738] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.973135][T22738] bridge0: entered promiscuous mode [ 641.978360][T22738] bridge0: entered allmulticast mode [ 642.001625][T22753] loop6: detected capacity change from 0 to 256 [ 642.008221][T22738] loop9: detected capacity change from 0 to 128 [ 642.027527][T22753] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 642.055558][T22738] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 642.063245][T22738] FAT-fs (loop9): Filesystem has been set read-only [ 642.087918][ T11] IPVS: starting estimator thread 0... [ 642.102139][T22551] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 642.111903][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.120323][T22753] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3472'. [ 642.128492][T22551] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 642.140448][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.160499][T22753] team0: Device ipvlan2 is already an upper device of the team interface [ 642.199440][T22551] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 642.211672][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.212677][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 642.212692][ T28] audit: type=1400 audit(1787024594.061:3386): avc: denied { write } for pid=22759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.250105][T22769] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3473'. [ 642.265801][T22551] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 642.274625][T22758] IPVS: using max 2448 ests per chain, 122400 per kthread [ 642.285482][T22551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.295710][ T28] audit: type=1400 audit(1787024594.161:3387): avc: denied { write } for pid=22774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.357485][ T2487] bridge_slave_1: left allmulticast mode [ 642.363895][T22782] loop6: detected capacity change from 0 to 512 [ 642.370635][T22783] loop9: detected capacity change from 0 to 512 [ 642.374435][ T2487] bridge_slave_1: left promiscuous mode [ 642.390157][ T2487] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.408669][T22782] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.424387][ T2487] bridge_slave_0: left allmulticast mode [ 642.432317][T22783] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.450546][ T2487] bridge_slave_0: left promiscuous mode [ 642.453021][T22783] FAULT_INJECTION: forcing a failure. [ 642.453021][T22783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.457040][ T2487] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.469453][T22783] CPU: 0 UID: 0 PID: 22783 Comm: syz.9.3475 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 642.469488][T22783] Tainted: [W]=WARN [ 642.469496][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.469509][T22783] Call Trace: [ 642.469516][T22783] [ 642.469525][T22783] __dump_stack+0x1d/0x30 [ 642.469582][T22783] dump_stack_lvl+0x95/0xd0 [ 642.469605][T22783] dump_stack+0x15/0x1b [ 642.469626][T22783] should_fail_ex+0x25e/0x270 [ 642.469650][T22783] should_fail+0xb/0x20 [ 642.469670][T22783] should_fail_usercopy+0x1a/0x20 [ 642.469707][T22783] strncpy_from_user+0x27/0x250 [ 642.469740][T22783] path_setxattrat+0xeb/0x320 [ 642.469771][T22783] __x64_sys_setxattr+0x6e/0x90 [ 642.469845][T22783] x64_sys_call+0x2f92/0x3050 [ 642.469871][T22783] do_syscall_64+0x136/0x3c0 [ 642.469913][T22783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.469936][T22783] RIP: 0033:0x7fb47be4e0d9 [ 642.469955][T22783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.469975][T22783] RSP: 002b:00007fb47a8a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 642.470037][T22783] RAX: ffffffffffffffda RBX: 00007fb47c0d5fa0 RCX: 00007fb47be4e0d9 [ 642.470052][T22783] RDX: 0000200000000280 RSI: 0000200000000440 RDI: 00002000000000c0 [ 642.470065][T22783] RBP: 00007fb47a8a7090 R08: 0000000000000001 R09: 0000000000000000 [ 642.470078][T22783] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 642.470093][T22783] R13: 00007fb47c0d6038 R14: 00007fb47c0d5fa0 R15: 00007fff5d6cb638 [ 642.470113][T22783] [ 642.735723][ T2487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.746822][ T2487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.760143][ T2487] bond0 (unregistering): Released all slaves [ 642.864469][T22551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.884462][T22551] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.897746][ T2487] IPVS: stopping backup sync thread 22155 ... [ 642.920391][T22716] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.936507][T22716] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.944363][T22716] bridge_slave_0: entered allmulticast mode [ 642.950926][T22716] bridge_slave_0: entered promiscuous mode [ 642.959559][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.966673][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.018380][ T2487] hsr_slave_0: left promiscuous mode [ 643.021009][T22821] loop9: detected capacity change from 0 to 1024 [ 643.030621][ T2487] hsr_slave_1: left promiscuous mode [ 643.036516][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.046053][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.049466][T22821] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 643.064460][ T2487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.074775][T22821] EXT4-fs error (device loop9): ext4_map_blocks:835: inode #3: block 1: comm syz.9.3481: lblock 1 mapped to illegal pblock 1 (length 1) [ 643.078983][ T2487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.093284][T22821] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 643.096308][T22821] Quota error (device loop9): write_blk: dquota write failed [ 643.105396][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 643.105431][ C1] EXT4-fs (loop9): initial error at time 1787024594: ext4_map_blocks:835: inode 3: block 1 [ 643.105468][ C1] EXT4-fs (loop9): last error at time 1787024594: ext4_map_blocks:835: inode 3: block 1 [ 643.122781][T22828] loop6: detected capacity change from 0 to 512 [ 643.129562][T22821] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 643.139453][ T28] audit: type=1400 audit(1787024594.971:3388): avc: denied { write } for pid=22811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.145589][T22821] EXT4-fs error (device loop9): ext4_acquire_dquot:7049: comm syz.9.3481: Failed to acquire dquot type 0 [ 643.170105][ T28] audit: type=1400 audit(1787024595.021:3389): avc: denied { write } for pid=22831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.178721][T22821] loop9: lost filesystem error report for type 5 error -117 [ 643.213424][ T2487] veth1_macvtap: left promiscuous mode [ 643.220118][T22821] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.3481: Freeing blocks not in datazone - block = 0, count = 4096 [ 643.224190][ T2487] veth0_macvtap: left promiscuous mode [ 643.226720][T22821] loop9: lost filesystem error report for type 5 error -117 [ 643.257530][ T2487] veth1_vlan: left promiscuous mode [ 643.276126][T22834] loop3: detected capacity change from 0 to 764 [ 643.276830][T22821] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.3481: Invalid inode bitmap blk 0 in block_group 0 [ 643.295705][ T6625] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 643.298261][ T2487] veth0_vlan: left promiscuous mode [ 643.310626][ T6625] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 643.315646][T22821] loop9: lost filesystem error report for type 5 error -117 [ 643.316595][ T6625] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 643.328871][T22821] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 643.341123][T22828] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.361502][ T6625] EXT4-fs error (device loop9): ext4_release_dquot:7085: comm kworker/u8:12: Failed to release dquot type 0 [ 643.373033][ T6625] loop9: lost filesystem error report for type 5 error -117 [ 643.373109][T22821] loop9: lost filesystem error report for type 5 error -117 [ 643.380819][T22821] EXT4-fs (loop9): 1 orphan inode deleted [ 643.412654][ T28] audit: type=1400 audit(1787024595.271:3390): avc: denied { write } for pid=22822 comm="syz.6.3482" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.430098][T22821] EXT4-fs error (device loop9): __ext4_get_inode_loc:4894: comm syz.9.3481: Invalid inode table block 18446744069414584321 in block_group 0 [ 643.453160][T22821] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6473: Corrupt filesystem [ 643.462842][ T28] audit: type=1400 audit(1787024595.271:3391): avc: denied { setattr } for pid=22819 comm="syz.9.3481" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.465093][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3482'. [ 643.488623][ T28] audit: type=1400 audit(1787024595.301:3392): avc: denied { write } for pid=22822 comm="syz.6.3482" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.556033][T19132] EXT4-fs error (device loop9): __ext4_get_inode_loc:4894: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 643.575127][T19132] loop9: lost filesystem error report for type 5 error -117 [ 643.577832][ T2487] team0 (unregistering): Port device team_slave_1 removed [ 643.598871][ T2487] team0 (unregistering): Port device team_slave_0 removed [ 643.650262][T22716] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.657519][T22716] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.664811][T22716] bridge_slave_1: entered allmulticast mode [ 643.671290][T22716] bridge_slave_1: entered promiscuous mode [ 643.684858][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.691987][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.722678][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 643.732888][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3482'. [ 643.748118][T22850] loop9: detected capacity change from 0 to 1024 [ 643.761505][T22716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.779968][T22850] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.801623][T22716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.837456][T22716] team0: Port device team_slave_0 added [ 643.844581][T22716] team0: Port device team_slave_1 added [ 643.894849][T22716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.913011][T17937] EXT4-fs unmount: 50 callbacks suppressed [ 643.913028][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.914057][T22716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.954638][T22716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.995596][T22716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.014198][T22716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.028244][T22846] EXT4-fs error (device loop9): ext4_map_blocks:835: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.042984][T22716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.105265][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.134522][T22868] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.141814][T22868] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.145946][T22880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.151093][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.161426][T22880] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.179338][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.231216][T22868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.240664][T22868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.272994][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.287522][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.302382][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.316075][ T160] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.326828][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.352595][T22846] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.374258][T22845] EXT4-fs error (device loop9): ext4_map_blocks:793: inode #15: comm syz.9.3486: lblock 0 mapped to illegal pblock 0 (length 1) [ 644.403808][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.450360][T22716] hsr_slave_0: entered promiscuous mode [ 644.463111][T22716] hsr_slave_1: entered promiscuous mode [ 644.474543][T22716] debugfs: 'hsr0' already exists in 'hsr' [ 644.480621][T22716] Cannot create hsr debugfs directory [ 644.488864][T22551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.536694][ T6046] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.624936][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.647306][ T6046] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.751935][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 644.892283][T22551] veth0_vlan: entered promiscuous mode [ 644.910960][T22551] veth1_vlan: entered promiscuous mode [ 644.960789][T22551] veth0_macvtap: entered promiscuous mode [ 644.978084][T22551] veth1_macvtap: entered promiscuous mode [ 644.992322][T22922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.999333][T22922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 645.008026][T22922] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 645.014762][T22551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.041604][T22938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.054381][T22938] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.118303][T22897] EXT4-fs error (device loop3): ext4_map_blocks:835: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.148867][T22551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.157641][T22897] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.184588][T22957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.194776][T22897] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.211560][T22896] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.215175][T22922] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3493: Allocating blocks 41-42 which overlap fs metadata [ 645.238500][T22922] loop6: lost filesystem error report for type 5 error -117 [ 645.240549][T22922] EXT4-fs (loop6): Remounting filesystem read-only [ 645.240616][T22896] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.247931][T22922] EXT4-fs (loop6): 1 truncate cleaned up [ 645.254597][T22896] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.268377][T22922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.273439][T22896] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.300026][T22922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.313706][T22896] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.336891][T22897] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.352864][T22896] EXT4-fs error (device loop3): ext4_map_blocks:793: inode #15: comm syz.3.3491: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.367822][ T3759] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.488906][ T3759] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.497651][ T3759] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.517685][T22965] set_capacity_and_notify: 3 callbacks suppressed [ 645.517704][T22965] loop8: detected capacity change from 0 to 2048 [ 645.579399][T22965] FAT-fs (loop8): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 645.620004][T22716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.628185][T22965] FAT-fs (loop8): Filesystem has been set read-only [ 645.655289][T22716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.695393][T22716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.736376][T22716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.760058][T22716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.786174][T22988] FAULT_INJECTION: forcing a failure. [ 645.786174][T22988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.802514][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 645.812560][T22716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.821396][T22988] CPU: 0 UID: 0 PID: 22988 Comm: syz.6.3499 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 645.821428][T22988] Tainted: [W]=WARN [ 645.821435][T22988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.821510][T22988] Call Trace: [ 645.821518][T22988] [ 645.821527][T22988] __dump_stack+0x1d/0x30 [ 645.821556][T22988] dump_stack_lvl+0x95/0xd0 [ 645.821581][T22988] dump_stack+0x15/0x1b [ 645.821605][T22988] should_fail_ex+0x25e/0x270 [ 645.821630][T22988] should_fail+0xb/0x20 [ 645.821675][T22988] should_fail_usercopy+0x1a/0x20 [ 645.821702][T22988] _copy_to_user+0x20/0xa0 [ 645.821729][T22988] sctp_getsockopt_associnfo+0x424/0x480 [ 645.821833][T22988] sctp_getsockopt+0x765/0xaa0 [ 645.821925][T22988] sock_common_getsockopt+0x60/0x70 [ 645.821973][T22988] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 645.822013][T22988] do_sock_getsockopt+0x2f5/0x570 [ 645.822113][T22988] ? vfs_write+0x848/0x990 [ 645.822141][T22988] __x64_sys_getsockopt+0x11d/0x1a0 [ 645.822239][T22988] x64_sys_call+0x2e32/0x3050 [ 645.822265][T22988] do_syscall_64+0x136/0x3c0 [ 645.822295][T22988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.822321][T22988] RIP: 0033:0x7efee65be0d9 [ 645.822341][T22988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.822411][T22988] RSP: 002b:00007efee5017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 645.822432][T22988] RAX: ffffffffffffffda RBX: 00007efee6845fa0 RCX: 00007efee65be0d9 [ 645.822447][T22988] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 645.822460][T22988] RBP: 00007efee5017090 R08: 0000200000003640 R09: 0000000000000000 [ 645.822473][T22988] R10: 0000200000003600 R11: 0000000000000246 R12: 0000000000000001 [ 645.822488][T22988] R13: 00007efee6846038 R14: 00007efee6845fa0 R15: 00007ffc39aa7c88 [ 645.822556][T22988] [ 645.832059][T22716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.895029][T22990] loop6: detected capacity change from 0 to 2048 [ 646.046061][T22716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 646.054963][T22990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.084146][ T3759] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.158414][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.212955][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 646.252869][T23019] FAULT_INJECTION: forcing a failure. [ 646.252869][T23019] name failslab, interval 1, probability 0, space 0, times 0 [ 646.268634][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 646.283063][T23019] CPU: 0 UID: 0 PID: 23019 Comm: syz.8.3506 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 646.283148][T23019] Tainted: [W]=WARN [ 646.283157][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.283173][T23019] Call Trace: [ 646.283181][T23019] [ 646.283191][T23019] __dump_stack+0x1d/0x30 [ 646.283230][T23019] dump_stack_lvl+0x95/0xd0 [ 646.283257][T23019] dump_stack+0x15/0x1b [ 646.283346][T23019] should_fail_ex+0x25e/0x270 [ 646.283367][T23019] should_failslab+0x8c/0xb0 [ 646.283389][T23019] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 646.283451][T23019] ? __alloc_skb+0x2db/0x6f0 [ 646.283472][T23019] ? __alloc_skb+0x2db/0x6f0 [ 646.283493][T23019] __alloc_skb+0x2db/0x6f0 [ 646.283559][T23019] ? __alloc_skb+0x205/0x6f0 [ 646.283630][T23019] netlink_alloc_large_skb+0xbf/0xf0 [ 646.283687][T23019] netlink_sendmsg+0x40c/0x6f0 [ 646.283773][T23019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.283845][T23019] ____sys_sendmsg+0x532/0x580 [ 646.283874][T23019] ___sys_sendmsg+0x195/0x1e0 [ 646.283984][T23019] __x64_sys_sendmsg+0xd4/0x160 [ 646.284037][T23019] x64_sys_call+0x18e8/0x3050 [ 646.284118][T23019] do_syscall_64+0x136/0x3c0 [ 646.284148][T23019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.284232][T23019] RIP: 0033:0x7f88bd79e0d9 [ 646.284249][T23019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.284318][T23019] RSP: 002b:00007f88bc1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.284340][T23019] RAX: ffffffffffffffda RBX: 00007f88bda25fa0 RCX: 00007f88bd79e0d9 [ 646.284354][T23019] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 646.284367][T23019] RBP: 00007f88bc1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 646.284379][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.284392][T23019] R13: 00007f88bda26038 R14: 00007f88bda25fa0 R15: 00007ffd532dfb38 [ 646.284523][T23019] [ 646.299331][T22716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.551441][T22716] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.555496][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.555548][ T2487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.562550][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.562590][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.594446][T22716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.749802][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3511'. [ 646.844477][T23069] loop9: detected capacity change from 0 to 2048 [ 646.879470][T23069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.950178][T22716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.058952][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.296328][T23101] loop3: detected capacity change from 0 to 512 [ 647.416677][T22716] veth0_vlan: entered promiscuous mode [ 647.428362][T23101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.439059][T22716] veth1_vlan: entered promiscuous mode [ 647.452944][T23105] loop9: detected capacity change from 0 to 512 [ 647.459537][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 647.459553][ T28] audit: type=1400 audit(1787024599.311:3412): avc: denied { write } for pid=23103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.507258][T22716] veth0_macvtap: entered promiscuous mode [ 647.538943][T22716] veth1_macvtap: entered promiscuous mode [ 647.552503][T23105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.558939][ T28] audit: type=1400 audit(1787024599.421:3413): avc: denied { write } for pid=23135 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.594851][T23101] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 647.605799][T22716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.634967][T23105] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 647.652685][ T28] audit: type=1400 audit(1787024599.511:3414): avc: denied { write } for pid=23098 comm="syz.3.3517" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 647.674890][T22716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.698394][T23105] FAULT_INJECTION: forcing a failure. [ 647.698394][T23105] name failslab, interval 1, probability 0, space 0, times 0 [ 647.700673][ T28] audit: type=1400 audit(1787024599.561:3415): avc: denied { ioctl } for pid=23137 comm="syz.8.3522" path="socket:[63361]" dev="sockfs" ino=63361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.711814][T23105] CPU: 0 UID: 0 PID: 23105 Comm: syz.9.3519 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 647.711850][T23105] Tainted: [W]=WARN [ 647.711858][T23105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.711872][T23105] Call Trace: [ 647.711879][T23105] [ 647.711888][T23105] __dump_stack+0x1d/0x30 [ 647.711915][T23105] dump_stack_lvl+0x95/0xd0 [ 647.711959][T23105] dump_stack+0x15/0x1b [ 647.711981][T23105] should_fail_ex+0x25e/0x270 [ 647.712143][T23105] should_failslab+0x8c/0xb0 [ 647.712298][T23105] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 647.712324][T23105] ? do_getname+0x2e/0x1c0 [ 647.712352][T23105] ? do_getname+0x2e/0x1c0 [ 647.712382][T23105] do_getname+0x2e/0x1c0 [ 647.712429][T23105] getname_flags+0x1d/0x30 [ 647.712457][T23105] do_sys_openat2+0x6c/0x130 [ 647.712513][T23105] __x64_sys_openat+0xf2/0x120 [ 647.712659][T23105] x64_sys_call+0x1cfb/0x3050 [ 647.712728][T23105] do_syscall_64+0x136/0x3c0 [ 647.712826][T23105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.712855][T23105] RIP: 0033:0x7fb47be4e0d9 [ 647.712875][T23105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.712896][T23105] RSP: 002b:00007fb47a8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.712920][T23105] RAX: ffffffffffffffda RBX: 00007fb47c0d5fa0 RCX: 00007fb47be4e0d9 [ 647.712937][T23105] RDX: 00000000000026e1 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 647.713029][T23105] RBP: 00007fb47a8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 647.713044][T23105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.713059][T23105] R13: 00007fb47c0d6038 R14: 00007fb47c0d5fa0 R15: 00007fff5d6cb638 [ 647.713098][T23105] [ 647.743497][T23143] loop6: detected capacity change from 0 to 256 [ 647.905638][ T28] audit: type=1400 audit(1787024599.671:3416): avc: denied { listen } for pid=23137 comm="syz.8.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.917239][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.922172][ T28] audit: type=1400 audit(1787024599.671:3417): avc: denied { accept } for pid=23137 comm="syz.8.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 647.942956][T22073] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.009994][T23143] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 648.031720][T23143] x_tables: unsorted entry at hook 3 [ 648.151433][T23151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 648.183776][ T28] audit: type=1400 audit(1787024600.041:3418): avc: denied { create } for pid=23148 comm="syz.3.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 648.206938][T23152] loop3: detected capacity change from 0 to 512 [ 648.215529][T23152] EXT4-fs: journaled quota format not specified [ 648.241107][T23156] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 648.270411][ T28] audit: type=1400 audit(1787024600.041:3419): avc: denied { bind } for pid=23148 comm="syz.3.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 648.272879][T23156] FAT-fs (loop6): Filesystem has been set read-only [ 648.300775][ T28] audit: type=1400 audit(1787024600.161:3420): avc: denied { write } for pid=23140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.308129][T19132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.393186][T23160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3524'. [ 648.404740][T23156] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 648.452329][ T6046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.479836][ T28] audit: type=1400 audit(1787024600.341:3421): avc: denied { write } for pid=23161 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.549317][ T6625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.595779][ T3759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.713720][T23177] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3467'. [ 648.782988][T23156] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 648.806388][T23167] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 648.814746][T23167] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 648.830458][T23187] loop5: detected capacity change from 0 to 2048 [ 648.877796][T23187] loop5: p1 < > p2 < > p3 p4 < > [ 648.883116][T23187] loop5: partition table partially beyond EOD, truncated [ 648.899530][T23198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.900544][T23187] loop5: p1 start 2305 is beyond EOD, [ 648.917956][ T2981] ================================================================== [ 648.931357][T23187] truncated [ 648.931530][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 648.942597][ T2981] [ 648.944929][ T2981] write to 0xffff88811ab2b7b0 of 8 bytes by task 3285 on cpu 0: [ 648.952565][ T2981] dentry_unlink_inode+0x65/0x260 [ 648.957600][ T2981] d_delete+0x164/0x180 [ 648.961757][ T2981] d_delete_notify+0x32/0x100 [ 648.966441][ T2981] vfs_unlink+0x287/0x490 [ 648.970778][ T2981] filename_unlinkat+0x1dc/0x410 [ 648.975725][ T2981] __se_sys_unlink+0x2b/0xe0 [ 648.980324][ T2981] __x64_sys_unlink+0x1f/0x30 [ 648.985010][ T2981] x64_sys_call+0x2f7c/0x3050 [ 648.989696][ T2981] do_syscall_64+0x136/0x3c0 [ 648.994307][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.000212][ T2981] [ 649.002535][ T2981] read to 0xffff88811ab2b7b0 of 8 bytes by task 2981 on cpu 1: [ 649.010081][ T2981] step_into_slowpath+0x12c/0x4c0 [ 649.015121][ T2981] path_lookupat+0x2eb/0x4c0 [ 649.019815][ T2981] filename_lookup+0x18f/0x390 [ 649.024592][ T2981] do_readlinkat+0x74/0x2f0 [ 649.029111][ T2981] __x64_sys_readlink+0x47/0x60 [ 649.033977][ T2981] x64_sys_call+0x2af9/0x3050 [ 649.038669][ T2981] do_syscall_64+0x136/0x3c0 [ 649.043282][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.049200][ T2981] [ 649.051533][ T2981] value changed: 0xffff88811b236948 -> 0x0000000000000000 [ 649.058646][ T2981] [ 649.060969][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 649.067138][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 649.077577][ T2981] Tainted: [W]=WARN [ 649.081380][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.091439][ T2981] ================================================================== [ 649.099688][T23187] loop5: p2 start 4294902784 is beyond EOD, truncated [ 649.109626][T23187] loop5: p3 start 3724543488 is beyond EOD, truncated [ 649.498646][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 649.612312][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 649.722788][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 649.847741][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 652.628742][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 652.628816][ T28] audit: type=1400 audit(1787024604.491:3469): avc: denied { write } for pid=23509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.658924][ T28] audit: type=1400 audit(1787024604.511:3470): avc: denied { write } for pid=23520 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.732121][ T28] audit: type=1400 audit(1787024606.591:3471): avc: denied { write } for pid=23523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.755506][ T28] audit: type=1400 audit(1787024606.591:3472): avc: denied { write } for pid=23534 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1