last executing test programs: 20m13.501068148s ago: executing program 32 (id=1001): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x35}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) sync_file_range(r4, 0x8, 0x30, 0x5) write$P9_RVERSION(r3, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") (async) r5 = creat(0x0, 0x171) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, 0x0) (async) r6 = syz_clone3(&(0x7f0000000e00)={0x1800, &(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x0, {0x2}, &(0x7f0000000cc0)=""/137, 0x89, &(0x7f0000000d80)=""/20, &(0x7f0000000dc0)=[0x0, 0x0], 0x2, {r5}}, 0x58) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000440)) (async) syz_clone3(&(0x7f0000000b00)={0x98000080, &(0x7f0000000980)=0xffffffffffffffff, &(0x7f0000000480)=0x0, &(0x7f0000000e80), {0x4}, &(0x7f00000009c0)=""/91, 0x5b, &(0x7f0000000a40)=""/119, &(0x7f0000000ac0)=[r7, r6, r8, r6], 0x4, {r5}}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async, rerun: 32) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000ec0)) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r11 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x10a) (async) rmdir(&(0x7f0000000200)='./file0\x00') getdents64(r11, 0x0, 0x0) prlimit64(r10, 0x1, &(0x7f0000000b80)={0x1, 0x8}, &(0x7f0000000bc0)) mknod(&(0x7f0000000000)='./file0\x00', 0x200, 0x77b) syz_clone(0x8982100, &(0x7f0000000200)="9404fa1e47529c69b8013dc62f6b86dd1f2e6707aac9a7c6fcef4706e74bb175f22b67c0b3123afb1f86861fe542073841502c6465b8de611940f7e31266c84483115478ea74a62861a2722dde582cfa603aae172df2871af4f731cb679fcbeff4860f0ffbec5c6499b259e66bf4e26ce9c443745251ece0f6b2a75b88f1a0f55bacdfc7827d44fdb44d44f94fcb12f2c36ca66f06daf1f0a514e6", 0x9b, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="c2d1f65526d1d534dd68696db9bd48bdfcfb3282522c56cf8632f0db2bcbdf727c202a7dc406402350b3fe16ddcffbafb321a90346330b156afde9c9b05aae4cd3cc5f57b6d9bb5e04efa96387a86d7a9c3213c03d8d66b02c14104b3277247badb0259e6e6d880031dafaaad8ef33290258f7c2cbf3558a09a17c3b5fd08b7ee33682b3b71a14690207b9645bc47fc7cac411ef764ff20b6df5d25e39a51955bafd8c91c8f03e808690a4c7e741a6941a94357702c8c0fc98fccfe63c01a760b4baab7220c1cd983e109a22c4b59f974bd7c0013e365f27f11e8a6ca0784d") (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 16m20.002905839s ago: executing program 33 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = memfd_secret(0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x2, 0xd, 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd2, &(0x7f0000000140)={0x0, 0xf475, 0x80, 0x0, 0x2da}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) file_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x4000, 0x800, 0xe, 0x7, 0xae}, 0x18, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) 15m43.548849723s ago: executing program 34 (id=2895): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) getpid() ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES8=r1], 0xfdef) 15m40.897121021s ago: executing program 35 (id=2911): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb01ef3200000000000000400000004008109a68c3e457d0ed730000000200000000000001abc544cc9f00004003000000030000000000000000000000000000010581000000000000000000000000005ccb24bda213a24924a34de61a62a23de1e5ac42c52cc9767dadb81737e48266fa7db122f13d913ec7e258982f"], 0x0, 0x5a}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x4, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000ac0)={0x3, 0x33, 0xfa00, {{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x88}, {0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0xffffffffffffffff, 0x4}}, 0x48) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x80000000}]) io_getevents(r8, 0x1000000000004, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xedf4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000000c0)="ad10cac799cbeff830de48840014140c502d74b2f07b874c38927caf0ba45f6849d92b5aa2126a7937a6f8757015ca74dc189bed68cfe053f91520c9d6cafa3d2068b5b83b14e35bcf7f2267a4bbcd24191f4666cc4e21b664cac58a17fc7776499ebc188e8d284aeadc6371aa3bad267a6351c0c9494ee46641c97f1721b563cd04a9e368fd9b000000000000003d4efbad8adfc1a4b0b229d0835fe3cadb49175f06cb971c58a9f58e7cbb232501fe96ea61256e8c448c18384d07d80fbbed501e88472e42b38477c33ca125b7b9781b0c04", 0xd3}, {&(0x7f00000001c0)="53237b036a36adcb8ad6249ed89ca71226fb6cb11f992d79c5e85ba45c50596fe181d4c8edbd93384fc3a1a7181620be224e3bec2fbd226123765ffc35eedc42fe6de019b66760fa602bb7722ec3eb276ba6224acfc0c6f8d4d67c15d6a35e6cc0644e1d524abf37367b83638659a5bbd6075cab8e686cd30e6e6d8fbeeb5677b2697322", 0x84}, {&(0x7f0000000280)="1002cc4092e058cffc261265aa4687ad2a871004953358adfdfe0ce1ffd30529784ab7bf48d888cea5f3036393b8c4e35f3b2adcdc7eb8f0ab0d8377a1a283ed00942e889164f0904f852bfc06616d0a6a4695ba88d29bdfd07913da11739afb23371a1dce9f33ac0a82f20cd35fb0765f5f9dcee2df354340972ecf08d8a10458f2cb45ea2454ca31caa909c26a77b1d2c93696db83073b17d450234846a6f1c022ff16625025a44262b044ca1c60bc83", 0xb1}, {&(0x7f0000000340)="99b7705cf1c4f560c8b32fc1d3f19e3fce6cc7654922a80d948cf3b63dfadd9b4a10113cb4785d3611160f2b8d42c620364203c4cd01883b78513827924e2fbf3838fe06e543cec96c213fb80ca7bc7e375658b6456fe248bca741b9c51d52fab544d0d456495ea5e15a522c0d92d0e930efd56a177736b2d974431af4ec26d05b364157aef9ed18845c8f8fde9c5b929294b9cdd406dd029909463eba24ae4ecef7313eb105e9f6c291796a82", 0xad}, {&(0x7f0000000400)="76a16128071b64ef3e831ed6a949b17d6f8f687dfbefe833d55377d12cc32ca177c6483246a0fdd678e6592741a7ed79cfc9e5", 0x33}, {&(0x7f00000004c0)="f47a8d224d428d1ce0959d121a2493c0cade9f0469ccf3beb8ea7888bfb2e8cf7be991d2f46f7870e55036e0e5b30f753cb99c69d9e77b4b0daa442a494cb86c9eac77cb3abe41141e7c74e7b72463afe50f56aa4388f1769e6b7d869c72a64ed5512835e5707656f0d7d74e58bc28347fbaf92944a1dc8307b9b426339ab5b34ffbfe23073b19f0d4c428792ff73ffc6ba874a1214b00e30fe6c0d34e412b7cc6540523337a50706f8957b5dcfc2eb55599a7edc8629d4d0aea517deb30803e7aff423eba57408765402e27c72e65c46a943c493ea3f192e52567ce4e5f2613fc63c2", 0xe3}, {&(0x7f00000005c0)="206109fa56f75d0e71fe527bec9a37d60c569f082030b7f440c9179e79fcd359bc702f7fdec05a347ea6e0fbdcfa2db88922d6696838f1eb9ea69bdc523aff8d030ddc8789ab34ca34dbdc4e48424953ce163ec8306b24264b3d4445913e6e32d94691f8ce99f47a1762766017ef7c0c8877abfaff7b22cff8b3d32d55fc9c04aaf08c00bca22bded55693a06d89f26805a703898e48", 0x96}, {&(0x7f0000000680)="1e94476e28eb18937ac3d5257c8b7cbd5ec0e488f2da4535f78c1ed539b6e3709c337dbf83ccae8dc7034528c3981b43b3b73ea53d4bc6c9802fa8c255bbc140fc7ec1bbe6a5d50a5acb4241a934319f628636a783f77f7593811a85fefb1e77c4694bee8f754b36c27c15143c3966d65dc6d6d7065ea18347316430984f0b075f", 0x81}], 0x8}}], 0x1, 0x800) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000b40)={0x0}) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000280)={r10, 0x1, r11, 0x3, 0x80000}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/power/pm_print_times', 0x109000, 0x42) r13 = eventfd(0xd) io_submit(r8, 0x2, &(0x7f0000000a40)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x411, r1, &(0x7f00000008c0)="b147106764a02407ff6ec844e95b0b38afc2b11b59547300068d5d199355ac8928030cbe252b3280ccc4363e6a1904e074", 0x31, 0x8, 0x0, 0x1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0x7, r12, &(0x7f0000000980)="a83ce9637e64e29cb1ccfa0b81af11f3d189190c947dc05cf8bec4a1dec7637e533aae890a7ec9751d0eef63177c16e3abec263e3d64d0a4fcd9eccbf956427e3fbd1c5828", 0x45, 0x80, 0x0, 0x2, r13}]) recvfrom$unix(r1, 0x0, 0x0, 0x20, 0x0, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESDEC=r2, @ANYRES8=r7, @ANYRESHEX=r4, @ANYRES64=r11, @ANYRES32], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000880)={r0, r14}, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 14m0.333712742s ago: executing program 36 (id=3576): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400000000000000050000f500", @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e000300000003000000050017"], 0x50}}, 0x0) accept4$phonet_pipe(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r6, &(0x7f0000000300)=""/213, 0xd5, 0x40002123, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) shutdown(r6, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x6, 0x200) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0205865, &(0x7f0000000480)={&(0x7f0000000080)=0x7, 0x5, &(0x7f0000000200)=[{}], &(0x7f0000000440)}) 13m30.995867751s ago: executing program 37 (id=3672): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) getpid() ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1", @ANYRES16, @ANYRES8=r0], 0xfdef) 13m17.944642672s ago: executing program 38 (id=3801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000042, &(0x7f0000000040)=ANY=[], 0x0, 0x2db, &(0x7f0000000440)="$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") sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r2 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$MRT(r2, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000180)=0x4) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1f, 0x3000, 0x0, 0x1) 11m5.96805458s ago: executing program 39 (id=4636): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1004003, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x5}}]}, 0xa, 0xbde, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c00038008000140000000000800024000000004180003801400010070696d3672656731000000000000000048000000160a01010600000000000000010000000900020073797a31000000000900010073797a30000000001c000380180003801400010070696d3672656731000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_init() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) 10m4.421343323s ago: executing program 40 (id=5088): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x3c, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) openat(r2, 0x0, 0x181243, 0x1bd) setrlimit(0x5, &(0x7f0000000080)={0x4, 0x2}) r3 = socket(0x10, 0x803, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x50, 0xffffffffffffffff, 0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r3], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) 5m50.220140168s ago: executing program 41 (id=6593): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x4, 0x1}]}, 0x20}}, 0x8000) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x27, 0x1, 0x0, 0x0, {{0xb}, {0x44}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m40.849145897s ago: executing program 42 (id=6651): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1300000004000000040000000200000000800000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00 '], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x800000000000, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0), 0x9}, 0x6000, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2042, 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0xed, 0x1000000000000}) 5m38.124608917s ago: executing program 43 (id=6673): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000000000000ffff0007000000441c"], 0x30}, 0x40880) 4m36.002775948s ago: executing program 44 (id=7065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x85}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 4m22.381851218s ago: executing program 45 (id=7106): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_setup(0x10, &(0x7f0000000200)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_getevents(r0, 0x1, 0x1, &(0x7f0000000680)=[{}], &(0x7f0000000140)={0x0, 0x3938700}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4m18.69854822s ago: executing program 46 (id=7127): r0 = socket$kcm(0x21, 0x2, 0xa) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f0000000280)="ff9e7ac7dc1cc7723d253618eb26402f9c1c40aa99939d5c16764cde8fdde5f8787dfa6f11596923242942c9359a1bd89592f0819659f4a5facef5b3da023b2bf2c47f6680a62f431e9c145a418656e6d117e19e5bf1f0691a1bbc6442e311210f2e34b6b7e04db9c493dbd7e01043febc5b022453ef9bef3602606c7e58f9808e6939d1da895100faa4db0344fd93864089c9d77b120726def0c700d0a65577aac46578d82b617f6ad4e0d16f7c567bfc080faf6f35bc59bc9857d8b5e827f0ceb5e5a5c1fb684c9902e16804f1e46b66c824aec7028777e5451258", 0x27}], 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$inet(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x45}, {&(0x7f0000002340)="6511", 0x2}], 0x2}, 0x4000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3ff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0xfffffffe, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, 0x0, 0xffffff00, 'syzkaller1\x00', 'netdevsim0\x00', {0xff}, {}, 0x4, 0x1, 0x8}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x0, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x91}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x30) fcntl$notify(r7, 0x402, 0xc000000b) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e1f9875ff22ea3c8c10561ea5063a600abe6cc4e38270c9f7846997591c7aad6fbc0f92753c3a04af52d95f2f8f50f05830835abb11ccf6e8f626bd1df7363858c0acd7480671de63e630ce73fc5b173b8cfbc3d4ec203056683601f720cde1792ef9479d0d351b48c8bed1294bebfde88eb23e1aadc730ca577dc20c51ed3b3e64b7eb2962123636bbd7a29f6ec23c3890c5fb065adc"], 0x18}, 0xfc40) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40010040) 4m18.573442484s ago: executing program 47 (id=7131): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90) r5 = dup(r1) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) r6 = socket(0x10, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0xa00) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 4m17.389400643s ago: executing program 48 (id=7144): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d9d, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x2, 0x81, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x4008, 0x0, 0x0, 0x1, 0x3fe, 0x7bfffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m17.18060743s ago: executing program 49 (id=7146): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80001, 0x0) fchown(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpgrp(r0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x8, 0x5], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 4m14.000835255s ago: executing program 50 (id=7152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@gettaction={0x74, 0x32, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x22, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000001020103000000000000000002"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[], 0x1, 0x206, &(0x7f0000000480)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001900010900000000fbdbdf25021800000002fd010000000b08000100ac141400080005000a0101020c001680050002000700000008000b00"], 0x48}}, 0x40810) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x79}]}}, 0x0, 0x2a}, 0x28) setsockopt$sock_attach_bpf(r2, 0x1, 0x2b, &(0x7f0000002640), 0x42) r3 = memfd_secret(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) 4m10.20122502s ago: executing program 51 (id=7159): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000780), 0x2}, 0x995d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x9, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x3, 0xbb, 0xfffdfff8, 0xfff}, 0xffffffffffffff4c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x100000000006, 0x8004, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80480) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000003c0)={0x20001003, 0x4, 0xfffefffe, 0x400c, 0x9, "4698ddc1220200cf0000002c0100", 0xfffffffe, 0xdc2}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000000)={0xd7, ""/215}) execveat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)={[&(0x7f0000000340)='#! ', &(0x7f0000000380)='memory.events.local\x00', &(0x7f0000000400)='.^\x00', &(0x7f0000000440)='\x00', &(0x7f0000000500)='+\x00', &(0x7f0000000540)='.[+..%[+$Q{\x84\x031)(\x00', &(0x7f0000000580)='#! ', &(0x7f00000005c0)='[#\x00', &(0x7f0000000600)=')&h\x00']}, &(0x7f0000000740)={[&(0x7f00000006c0)='batadv_slave_0\x00', &(0x7f0000000700)='#! ']}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGK660c0EqmulMZAYm0iQGl8SkwGm2nRsSafB1BiRlVvjh3BBWLIjUb4AG3e6ceOOjYkLWRjHdDpDoQxFSmkR/r+EzGHOPdN7O4Wc21A27r99ls9aWlYvSzCqJCAisikyKEHxBNxj0Ikjst1rudL34/P5uw8e3k6l02OTSo2npq4mlVIDQx+ev4y5w1Z7ZX3w8cb35Lf1/9fPbvyeepqzVM5ShWJZ6Wq6+LWsT5uGms1ZeU2pCdPQLUPlCpZRquWLtXzWLM7NVZRemO2Pz5UMy1J6oaLyRkWVi6pcqqjQEz1XUJqmqf64YD+ZpclJPdVi8UybJ4MjUiql9JCIxHZlMktdmRAAAOiqxv4/KKqd/f/yxbVy372VAbf/X4349f/XvtSutaP/j4qIb//vPb5v/68frP/f3RGdLofq/3E8DEV2nQrUw2qylNLj7s+vY/HR8rAT0P8DAAAAAAAAAAAAAAAAAAAAAPAv2LTthG3bCe/offWKSFREvO99SkMicqMLU0YbHeL+4wSof3AvPCBivpnPzGdqR3fAmoiYzv1PyC/n9eCqxt4nj1TVoHw0F9z6hflMyMmkspITUwwZkUSPNNbb9vit9NiIqtlZ3yPx7fVJSch//vVJ3/qIXL60rV6ThHyakaKYMuvMo17/akSpm3fSDfUxZxwAAAAAACeBprb47t81ba98rX5rfz3c8P5AqL6/Hvbdn4flXLi7awcAAAAA4LSwKi/yumkapSZBTPYf03oQPqIreyv82yrvbxmObqVNAu/Bd6Si7sm2Py2BAzwtewRBaaVqqLoa1ZC6sOiz9maB97bRXmNkYrTzd9AJzrx7/7N9F7y+Et1npa0HoeYvgJ7O/PYBAAAA0En1pt87M9rdCQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAp14r+jdXuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHHxJwAA//8/swLy") ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000200)={0x3, 0x101, 0xac, &(0x7f0000000140)=""/172}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x16, 0x4041c, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x4000000000007}, 0x8909, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x1, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 4m7.947505734s ago: executing program 52 (id=7167): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) socket$kcm(0x10, 0x2, 0x0) 4m6.417331175s ago: executing program 53 (id=7176): unshare(0x22020600) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffbfe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(0x0, 0x40002, 0x131) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4}, 0x34) mlock2(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mlock(&(0x7f0000007000/0x3000)=nil, 0x3000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000166faa9f0367d03dd882dc08b20200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920800024040000001080004400000000008000140000000120800034000000002080002400000007c08000140000000000900020073797a320000000014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f0000000200), 0x1, 0x470, &(0x7f0000000440)="$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") r7 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x7b, 0x1a00, 0x0, 0x3) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000380)=0x80000001) poll(&(0x7f0000000100)=[{}, {0xffffffffffffffff, 0x200}, {r0, 0x223}, {r1, 0x6000}], 0x4, 0x4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f0000000040)={0x5, 0x1, 0x3, 0x6, 0x2, [0x7, 0xb80, 0xffff8000, 0x400]}) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0xfb) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x1402, 0x108, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) 4m4.14155394s ago: executing program 54 (id=7183): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) socket$kcm(0x10, 0x2, 0x0) 4m3.732043954s ago: executing program 3 (id=7185): socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x300000000000000}]) 4m3.560726399s ago: executing program 3 (id=7186): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@nobh}, {@test_dummy_encryption}, {@norecovery}, {@journal_ioprio}, {@nobarrier}, {@jqfmt_vfsv1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@dax_never}, {@errors_remount}], [{@seclabel}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x38, 0x34, 0x64, 0x64, 0x30, 0x39, 0x66], 0x2d, [0x33, 0x62, 0x66, 0x65], 0x2d, [0x30, 0x63, 0x63, 0x30], 0x2d, [0x60, 0x37, 0x39, 0x34], 0x2d, [0x55, 0x33, 0x36, 0x32, 0x38, 0x64, 0x36, 0x35]}}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") 4m3.475277863s ago: executing program 3 (id=7187): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4m3.366534606s ago: executing program 3 (id=7188): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 4m3.334469107s ago: executing program 3 (id=7189): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) 4m3.073061716s ago: executing program 3 (id=7190): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x5, 0x9fd, 0x84}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0x1, &(0x7f0000000000)="d6b4029c68ecceb2d053e35841275fc17b4c0ee3675d", &(0x7f0000000040)=""/223, 0x4}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!', 0x2}], 0x1, 0x3e42, 0x407ff) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 4m3.071589586s ago: executing program 55 (id=7190): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x5, 0x9fd, 0x84}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0x1, &(0x7f0000000000)="d6b4029c68ecceb2d053e35841275fc17b4c0ee3675d", &(0x7f0000000040)=""/223, 0x4}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!', 0x2}], 0x1, 0x3e42, 0x407ff) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 2m11.674306964s ago: executing program 7 (id=7993): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0x36b6, 0x400, 0x0, 0xc0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f0000000180)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000001c0)=0x4, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2m11.379996193s ago: executing program 7 (id=7995): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() tkill(r1, 0x36) open(0x0, 0x0, 0x1a1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000002400000034000100ffbfffff95"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.446955954s ago: executing program 7 (id=8008): capset(&(0x7f0000000040)={0x20080522}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 2m10.396226466s ago: executing program 7 (id=8010): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000005c0)={[{@resgid}]}, 0x1, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="53000000082005c0ffa0f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d8", 0x58}], 0x2) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="48000000000000001701000005000000838a5f73c1f3bbd7019d3545a4e860b8935f619600498f2db5beef93765fc06d32f5ee65bcd34acf4706f35c7649a576440000000000000050"], 0x98}}], 0x1, 0x20040000) socket(0x17, 0x1, 0x7ff) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup2(r3, r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) read$msr(r4, &(0x7f0000033a40)=""/102391, 0x18ff7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1108000004000083198b50636de7af1be973aaad26e80000ebffffff00bd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) 2m8.268410795s ago: executing program 7 (id=8027): r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x7, 0x20, 0x8, 0x0, 0x9, 0xc0080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbfae, 0x2, @perf_config_ext={0x9, 0x7}, 0x20, 0x10001, 0x1f, 0x4, 0x400, 0x54, 0x5, 0x0, 0x6, 0x0, 0x7fff}, 0x0, 0xb, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffefff, 0x0, 0xfffffffffffffffc, 0x80000ff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000002000000bc1cd3233561e3c8b44ea8c6490f50b2000000005cd3c19f35dc812fc9129ee858d03b57fd6ca37a"], 0x22200) r3 = socket(0xa, 0x5, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0xfffffffffffffc01, 0x0) tee(r4, r5, 0x1fc, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff9c7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe76}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x800) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000000c0)) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000580)=[{r9, 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x400, 0x6, 0x9, 0x7}, {0x8000, 0xb8, 0x0, 0x9}, {0x0, 0xff, 0xe3, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a34000000060a0000000000000091c142c3956e91a6400000000209f52b2a8fc9f2c9340000000900010073797a3000000000140000001100010000000000000000000500000a0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x3, 0x3}) ioctl$NILFS_IOCTL_RESIZE(r10, 0x40086e8b, &(0x7f0000000040)=0x3) 2m7.140149222s ago: executing program 7 (id=8049): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0xfe, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x2, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES16=r1], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffe, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5402030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=@deltclass={0x44, 0x29, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0xfff3, 0x8}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x2}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x1, 0xf6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'veth0_virt_wifi\x00', @local}) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004018}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001a00000828bd70007ddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket(0x2c, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() 2m7.087341474s ago: executing program 56 (id=8049): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0xfe, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x2, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES16=r1], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffe, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5402030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=@deltclass={0x44, 0x29, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0xfff3, 0x8}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x2}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = fsmount(r2, 0x1, 0xf6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'veth0_virt_wifi\x00', @local}) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4004018}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001a00000828bd70007ddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socket(0x2c, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() 1m56.54880348s ago: executing program 2 (id=8230): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m56.455646053s ago: executing program 2 (id=8234): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140)=0x2, 0xc1000000) 1m56.396982024s ago: executing program 2 (id=8237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) 1m56.344062716s ago: executing program 2 (id=8239): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 1m56.292411798s ago: executing program 2 (id=8241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'wg0\x00', 0x400}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) 1m56.163384152s ago: executing program 2 (id=8243): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)={{}, {}, [{0x2, 0x4}], {0x4, 0x4}}, 0x2c, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 1m56.097161524s ago: executing program 57 (id=8243): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)={{}, {}, [{0x2, 0x4}], {0x4, 0x4}}, 0x2c, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 1m56.003528617s ago: executing program 0 (id=8246): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00(']) 1m55.937170099s ago: executing program 0 (id=8248): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 1m55.90946727s ago: executing program 0 (id=8250): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3, 0xe01) ioctl$BLKIOMIN(r0, 0x1278, 0x0) 1m55.805101104s ago: executing program 0 (id=8251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1m55.760263646s ago: executing program 0 (id=8253): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 1m55.653031349s ago: executing program 0 (id=8254): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1m39.614695685s ago: executing program 58 (id=8254): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1m10.75684473s ago: executing program 8 (id=8590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x30}}, 0x4000040) 1m10.695935953s ago: executing program 8 (id=8591): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) unshare(0x2c020400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x20002, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, 0x0, 0x0) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m10.583837026s ago: executing program 8 (id=8593): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xf7ffff7f00000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 1m10.480974649s ago: executing program 8 (id=8595): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)={0x10000000}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x8, 0x72, 0x0, 0x0, 0xc8, 0xa620, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x6}, 0x100010, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r6, 0x0) read(r6, &(0x7f0000001400)=""/4096, 0x1000) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.904221821s ago: executing program 8 (id=8602): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(0x0, 0xfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x10, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000300)=0x12, 0xc00) recvmmsg(r4, &(0x7f0000000340), 0x0, 0x20, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dffbfb}, 0x14}}, 0x200048c4) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x4f, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7ff0}, @device_a, @device_b, @initial, {0xd, 0x40}, @value=@ver_80211n={0x0, 0x8, 0x1, 0x3, 0x0, 0x2, 0x1}}, 0x20, 0x80, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0x24, 0x1}, {0x1b}, {0x1b}, {0x60, 0x1}, {0x1}]}, @val={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0x5, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x8000, 0x4}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x400, 0xb, 0x4, 0x0, 0x7]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) 1m8.057875879s ago: executing program 8 (id=8608): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x8, 0x401, 0x5, 0x0, 0x8, 0x0, 0x200b}, 0xffffffffffffffff, 0x24000000000, 0xffffffffffffffff, 0xa) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) statfs(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 1m7.931668283s ago: executing program 59 (id=8608): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x8, 0x401, 0x5, 0x0, 0x8, 0x0, 0x200b}, 0xffffffffffffffff, 0x24000000000, 0xffffffffffffffff, 0xa) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) statfs(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 8.080965205s ago: executing program 4 (id=9158): r0 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1}, 0x10) r2 = syz_pidfd_open(r1, 0x0) syz_clone(0x40801000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) 3.269104793s ago: executing program 1 (id=9171): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5c9", 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 2.861234356s ago: executing program 4 (id=9176): openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000003c0), 0x9}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x136db, 0x80000000002f423f, 0xfffffffffffffffe, 0x9, 0xd, 0x7, 0x2000008, 0x4, 0x80000000, 0xffffd, 0x3, 0x1, 0x100, 0x7, 0x0, 0x2000000000000, 0x3, 0xc5b, 0xfffffffffffffffe, 0x4000000000200, 0x80000, 0x0, 0x816, 0x80000001, 0x37, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) timerfd_create(0x8, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x10222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000001ac0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001a80)=""/24, 0x18, 0x103, 0x4, 0x0, 0x5, 0xc04}}, 0x11c) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) semtimedop(0x0, &(0x7f0000000500)=[{0x0, 0xffff, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000300)=[0x6]) 2.778501939s ago: executing program 6 (id=9178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c0002000100000006000a0008"], 0x2c}}, 0x4000) sendmmsg(r0, 0x0, 0x0, 0x0) 2.629130164s ago: executing program 5 (id=9181): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0xc}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 2.627349074s ago: executing program 6 (id=9182): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x5, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c35130000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 2.567708396s ago: executing program 5 (id=9183): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x7, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r1, &(0x7f0000000000)='\x00', 0x2, 0x1100) sendmsg$NFT_BATCH(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r2 = socket$netlink(0x10, 0x3, 0x1b) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x400c043}, 0xc0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x4004000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140)={[], [{@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) gettimeofday(0x0, 0x0) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x1e, 0x805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file1', './file1'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2], 0x48) 2.532631887s ago: executing program 6 (id=9184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000090603000000000000000000050000400900020073797a3100000000050001000700000040000780060004404e24000005000700ff0000000c00018008000140e00040000c00148008000140ac1e0100060005404e2100000c00168048", @ANYBLOB="a43c2513cf0f545b2b6b7cc78a861b095f045d7fc3c43a061d9eb079d8c03b0e968266f28e8bcd9afae0d34137d5005c5e109ffcf01ae9dc7f3d38bc4f674455a0b4d629329785a108b36ecf4b0191ed42b8826f640fc7ac8228a932cb6c507f3a72457412b935df26e0851a995dbdec0682a8bef07bc8c1757836f47b9cac978cabc427203d2a246f5f2433154c138a87db9523e8f99f40f59f"], 0x68}, 0x1, 0x0, 0x0, 0x20004810}, 0x20000080) rt_sigpending(&(0x7f0000000000), 0x8) 2.43530502s ago: executing program 6 (id=9186): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) sendfile(r0, r0, 0x0, 0x7f) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="18"], 0x50) 2.375857072s ago: executing program 6 (id=9187): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) dup(0xffffffffffffffff) r1 = syz_socket_connect_nvme_tcp() copy_file_range(r0, &(0x7f00000000c0)=0x7, r1, &(0x7f0000000140)=0xea, 0x6, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r5, 0x0, 0x4f, 0x40002021, 0x0, 0x0) (async) sendmsg$802154_dgram(r5, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 2.375537972s ago: executing program 5 (id=9188): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = open(0x0, 0x2c4083, 0x1a1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) epoll_create1(0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x24, {{0x2, 0x4e23, @multicast2}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@flag='dirsync'}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='posixacl'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000005040)=[{{&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f0000001040)=[{&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f00000007c0)=""/219, 0xdb}, {&(0x7f0000000d80)=""/174, 0xae}, {&(0x7f0000000e40)=""/62, 0x3e}, {&(0x7f0000000e80)=""/22, 0x16}, {&(0x7f0000001440)=""/87, 0x50}, {&(0x7f0000000f40)=""/28, 0x1c}, {&(0x7f0000000f80)=""/138, 0x8a}], 0x9}, 0x1}, {{&(0x7f0000001100)=@can, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/168, 0xa8}, {&(0x7f0000001240)=""/64, 0x40}], 0x2, &(0x7f0000001340)=""/58, 0x3a}, 0x401}, {{&(0x7f0000001380)=@nfc, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001400)=""/19, 0x13}, {&(0x7f00000051c0)=""/181, 0xb5}, {&(0x7f0000001500)=""/222, 0xfffffffffffffec9}, {&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000001700)=""/47, 0x2f}, {&(0x7f0000001740)=""/78, 0x4e}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002840)=""/219, 0xdb}, 0x6}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002940)=""/128, 0x80}], 0x1, &(0x7f0000002a00)=""/133, 0xffffffffffffff08}, 0x2}, {{&(0x7f0000002ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b40)=""/120, 0x78}, {&(0x7f00000004c0)=""/49, 0x23}, {&(0x7f0000005280)=""/149, 0x95}], 0x3, &(0x7f0000002d00)=""/151, 0x97}, 0x7}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002dc0)=""/229, 0xe5}, {&(0x7f0000002ec0)=""/155, 0x9b}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/73, 0x49}], 0x4, &(0x7f0000004040)=""/4096, 0x1000}, 0xe}], 0x6, 0x74d3c3855c3e7cac, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x1e, 0x374a76c8977093c, &(0x7f0000005480)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_lookup=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6f19, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x10000018}) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r9) 2.344961993s ago: executing program 4 (id=9189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f}}, 0x20}, 0x1, 0x0, 0x0, 0x2400c050}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)=':*)\x82\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000100002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x84, 0x6c80}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r4, 0x0, 0x0) symlinkat(0x0, r4, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000021da52ef00", @ANYRES16=r5, @ANYBLOB="000426bd7000ffdbdf250e0000001c00028008000500ff7f000008000900140000000800070056ffffff08000500090000000c0002800800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'bridge_slave_1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'none\x00', 0xd, 0x81, 0x2}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r7) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)={0x93, r9, 0x0, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0xa401) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18}, 0x8841) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.049001073s ago: executing program 9 (id=9191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008011}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0x8b, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x8a, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000005b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r1}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0x0, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x1b, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28b68c19, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd1}, @ldst={0x3, 0x2, 0x3, 0x0, 0x8, 0xfffffffffffffff0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffff37}, @generic={0x6, 0x6, 0x2, 0x9, 0x2}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xd3, &(0x7f00000004c0)=""/211, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, r3, 0x8, &(0x7f0000000600)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x6, 0xfffffffa, 0x800}, 0x10, r4, r1, 0xa, &(0x7f0000000c00)=[r5, r6, r7, 0x1, r8, r9], &(0x7f0000000c40)=[{0x4, 0x3, 0x8, 0x9}, {0x2, 0x4, 0x0, 0x6}, {0x4, 0x3, 0x2, 0x7}, {0x1, 0x4, 0x1}, {0x2, 0x1, 0x2, 0xb}, {0x3, 0x1, 0x0, 0x5}, {0x0, 0x4, 0xe, 0x4}, {0x1, 0x1, 0xd, 0x1}, {0x3, 0x5, 0x8, 0xc}, {0x2, 0x2, 0x3, 0x3}], 0x10, 0xc01}, 0x94) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r10, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe67, &(0x7f0000000ac0)=ANY=[], 0x0) 2.026611593s ago: executing program 9 (id=9192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800fd000010c30000000020000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.022903143s ago: executing program 1 (id=9193): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="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", 0x101}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) set_mempolicy(0x1, &(0x7f0000000040)=0x8000000009, 0xb) 1.934774627s ago: executing program 9 (id=9194): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x5, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c35130000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 1.934387197s ago: executing program 1 (id=9195): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') r2 = openat(r1, 0x0, 0x181243, 0x1bd) setrlimit(0x5, &(0x7f0000000080)={0x4, 0x2}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$incfs(r2, &(0x7f00000000c0)='.log\x00', 0x210083, 0x21) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r4, 0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0xf2) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r3], 0x1b0) 1.82913353s ago: executing program 9 (id=9196): openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000003c0), 0x9}, 0x4580, 0x0, 0x800003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x136db, 0x80000000002f423f, 0xfffffffffffffffe, 0x9, 0xd, 0x7, 0x2000008, 0x4, 0x80000000, 0xffffd, 0x3, 0x1, 0x100, 0x7, 0x0, 0x2000000000000, 0x3, 0xc5b, 0xfffffffffffffffe, 0x4000000000200, 0x80000, 0x0, 0x816, 0x80000001, 0x37, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) timerfd_create(0x8, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x10222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000001ac0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001a80)=""/24, 0x18, 0x103, 0x4, 0x0, 0x5, 0xc04}}, 0x11c) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000500)=[{0x0, 0xffff, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000300)=[0x6]) 1.82900299s ago: executing program 1 (id=9197): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) sendfile(r0, r0, 0x0, 0x7f) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="18"], 0x50) 1.767193182s ago: executing program 1 (id=9198): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f00000001c0), &(0x7f00000004c0)=@udp6=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x7, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x1, 0x1, 0x0, 0x5, 0x6, 0x4c, 0xfffffffffffffffc}, @generic={0x8c, 0x8, 0xc, 0xc, 0xff}], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x36) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f00000048c0)=[{0x0, 0x1c}, {&(0x7f0000000700)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4000000}, 0x44880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0xfeff, &(0x7f0000000340), 0x1, 0x626, &(0x7f0000000380)="$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") 1.379622045s ago: executing program 9 (id=9199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = open(0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x5ed57abc6f73e6d7, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@version_L}, {@directio}, {@privport}, {@access_user}], [{@subj_type}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@seclabel}, {@uid_gt={'uid>', 0xee00}}, {@euid_lt={'euid<', r3}}, {@measure}]}}) 1.337185476s ago: executing program 5 (id=9200): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.235068289s ago: executing program 6 (id=9201): socket(0x21, 0xa, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x1aa) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './bus'}, 0x9) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x10001) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x4098, 0x9, 0x0, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x13a9, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) 1.172273942s ago: executing program 4 (id=9202): socket$packet(0x11, 0x3, 0x300) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0x3, 0x9, 0x9}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r5, 0x0, 0x0, 0x800000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x16, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x350c0000, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x3, 0x0, 0x4, 0x8, 0x1, 0xffffffffffffffe0, 0x10}, @jmp={0x5, 0x0, 0xd, 0xb, 0xb, 0xfffffffffffffff4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[r4], 0x0, 0x10, 0x3ed}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x101d0) 1.044748075s ago: executing program 5 (id=9203): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000052000600050031383434080008"], 0x2c}}, 0x20008000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0xee00, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x1001, 0xd, 0x4}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 748.100965ms ago: executing program 9 (id=9204): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5c9", 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 742.673665ms ago: executing program 1 (id=9214): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, 0x0, 0x0, 0x8db, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x4, 0xffd, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000058f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ppoll(&(0x7f0000000080)=[{r0, 0x29}, {r0, 0x8402}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x1e, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x8800) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x974, 0x1f480, 0x0, 0x39a}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x4}, 0x1c) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 185.170484ms ago: executing program 4 (id=9205): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xbfb28851ad939977, 0x2}}}}]}, 0x40}}, 0x4060140) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0xfffc, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc4c77, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_unlink(&(0x7f0000000140)='\x02') ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xd1, 0x3) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) 41.192088ms ago: executing program 5 (id=9206): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40128, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x13) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 0s ago: executing program 4 (id=9207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000900)="b44c8063056244310834", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) (async) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x401) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000300)=""/227, 0xe3, 0x0, &(0x7f0000000400)=""/47, 0x2f}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) listen(0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7004000000002c0000002000018008000100", @ANYRES32=r11, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) kernel console output (not intermixed with test programs): er kthread [ 1344.745376][ T6412] wg1 speed is unknown, defaulting to 1000 [ 1344.795179][ T6412] lo speed is unknown, defaulting to 1000 [ 1345.117885][ T6481] C: renamed from veth1_to_team (while UP) [ 1345.130939][ T6481] netlink: 'syz.4.8491': attribute type 4 has an invalid length. [ 1345.144058][ T6481] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8491'. [ 1345.155745][ T6481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1345.363621][ T6488] siw: device registration error -23 [ 1345.674589][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.756592][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.984057][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1345.984096][ T28] audit: type=1400 audit(2000000779.041:10306): avc: denied { ioctl } for pid=6496 comm="syz.8.8498" path="socket:[123381]" dev="sockfs" ino=123381 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1346.020535][ T6499] SELinux: policydb magic number 0x1eb9f does not match expected magic number 0xf97cff8c [ 1346.030715][ T6499] SELinux: failed to load policy [ 1346.043514][ T6497] loop8: detected capacity change from 0 to 512 [ 1346.148610][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8501'. [ 1346.210660][ T5926] IPVS: starting estimator thread 0... [ 1346.241618][ T6512] loop9: detected capacity change from 0 to 512 [ 1346.305136][ T6511] IPVS: using max 2496 ests per chain, 124800 per kthread [ 1346.338780][ T6518] loop9: detected capacity change from 0 to 1024 [ 1346.356228][ T6518] EXT4-fs: test_dummy_encryption option not supported [ 1346.697671][ T6526] loop9: detected capacity change from 0 to 512 [ 1346.752687][ T6526] EXT4-fs (loop9): 1 orphan inode deleted [ 1346.759799][ T6526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.852697][ T6526] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1347.553305][ T6533] SELinux: policydb magic number 0x1eb9f does not match expected magic number 0xf97cff8c [ 1347.563535][ T6533] SELinux: failed to load policy [ 1347.571387][T24742] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1347.628730][T24742] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:14: Failed to release dquot type 1 [ 1347.679101][ T6537] loop8: detected capacity change from 0 to 1024 [ 1347.818450][ T6537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.830669][ T6537] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.362261][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.703455][ T5165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1348.841517][ T6535] netlink: 'syz.5.8511': attribute type 16 has an invalid length. [ 1349.065764][ T6551] loop8: detected capacity change from 0 to 164 [ 1349.066537][ T6547] loop9: detected capacity change from 0 to 512 [ 1349.080959][ T6549] loop4: detected capacity change from 0 to 164 [ 1349.163519][ T6547] EXT4-fs: inline encryption not supported [ 1349.235325][ T6547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1349.245523][ T6547] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1349.257261][ T6547] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1349.386669][ T6547] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1349.396611][ T6547] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.8514: Failed to acquire dquot type 1 [ 1349.416154][ T6547] loop9: lost filesystem error report for type 5 error -5 [ 1349.416318][ T6547] EXT4-fs (loop9): Remounting filesystem read-only [ 1349.430027][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1349.430045][ C1] EXT4-fs (loop9): initial error at time 2000000782: ext4_acquire_dquot:7034 [ 1349.430065][ C1] EXT4-fs (loop9): last error at time 2000000782: ext4_acquire_dquot:7034 [ 1349.893022][ T6547] EXT4-fs (loop9): 1 truncate cleaned up [ 1349.948968][ T6547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.128101][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6547 comm=syz.9.8514 [ 1350.307801][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8523'. [ 1350.328455][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.483484][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8525'. [ 1350.541942][ T6582] loop9: detected capacity change from 0 to 512 [ 1350.601801][ T6582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.638459][ T6582] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.662446][ T6592] netlink: 'syz.4.8528': attribute type 24 has an invalid length. [ 1350.714159][ T6594] loop4: detected capacity change from 0 to 164 [ 1350.990284][ T28] audit: type=1400 audit(2000000783.737:10307): avc: denied { validate_trans } for pid=6604 comm="syz.1.8533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1350.996605][ T6605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6605 comm=syz.1.8533 [ 1351.474318][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.553237][ T6611] loop8: detected capacity change from 0 to 128 [ 1351.595784][ T6611] FAT-fs (loop8): bogus number of reserved sectors [ 1351.625303][ T6611] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1351.658578][ T6611] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1352.127792][ T6622] x_tables: duplicate underflow at hook 1 [ 1352.157252][ T28] audit: type=1400 audit(2000000784.822:10308): avc: denied { ioctl } for pid=6621 comm="syz.1.8539" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=123911 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1352.194487][ T6627] loop8: detected capacity change from 0 to 764 [ 1352.208379][ T6626] loop9: detected capacity change from 0 to 2048 [ 1352.283772][ T6626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.487735][ T28] audit: type=1400 audit(2000000785.112:10309): avc: denied { write } for pid=6619 comm="syz.9.8536" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1352.769395][ T28] audit: type=1400 audit(2000000785.393:10310): avc: denied { write } for pid=6619 comm="syz.9.8536" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1353.221222][ T6651] FAULT_INJECTION: forcing a failure. [ 1353.221222][ T6651] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.234292][ T6651] CPU: 0 UID: 0 PID: 6651 Comm: syz.1.8547 Tainted: G W syzkaller #0 PREEMPT(full) [ 1353.234361][ T6651] Tainted: [W]=WARN [ 1353.234370][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1353.234386][ T6651] Call Trace: [ 1353.234395][ T6651] [ 1353.234404][ T6651] __dump_stack+0x1d/0x30 [ 1353.234431][ T6651] dump_stack_lvl+0x95/0xd0 [ 1353.234455][ T6651] dump_stack+0x15/0x1b [ 1353.234538][ T6651] should_fail_ex+0x263/0x280 [ 1353.234632][ T6651] should_failslab+0x8c/0xb0 [ 1353.234669][ T6651] __kmalloc_node_noprof+0xc8/0x550 [ 1353.234754][ T6651] ? __nla_validate_parse+0x1650/0x1cf0 [ 1353.234788][ T6651] ? qdisc_alloc+0x65/0x410 [ 1353.234938][ T6651] qdisc_alloc+0x65/0x410 [ 1353.235059][ T6651] ? nla_strcmp+0xc3/0xe0 [ 1353.235125][ T6651] qdisc_create+0xf5/0x9d0 [ 1353.235145][ T6651] tc_modify_qdisc+0xffc/0x14f0 [ 1353.235187][ T6651] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1353.235312][ T6651] rtnetlink_rcv_msg+0x6a7/0x720 [ 1353.235399][ T6651] netlink_rcv_skb+0x123/0x220 [ 1353.235432][ T6651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1353.235475][ T6651] rtnetlink_rcv+0x1c/0x30 [ 1353.235526][ T6651] netlink_unicast+0x5a8/0x680 [ 1353.235552][ T6651] netlink_sendmsg+0x5c8/0x6f0 [ 1353.235587][ T6651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1353.235694][ T6651] ____sys_sendmsg+0x563/0x5b0 [ 1353.235758][ T6651] ___sys_sendmsg+0x195/0x1e0 [ 1353.235806][ T6651] __x64_sys_sendmsg+0xd4/0x160 [ 1353.235843][ T6651] x64_sys_call+0x194c/0x3020 [ 1353.235877][ T6651] do_syscall_64+0x12c/0x3b0 [ 1353.235973][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.235999][ T6651] RIP: 0033:0x7fe9f469ce59 [ 1353.236016][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.236068][ T6651] RSP: 002b:00007fe9f30f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.236089][ T6651] RAX: ffffffffffffffda RBX: 00007fe9f4915fa0 RCX: 00007fe9f469ce59 [ 1353.236133][ T6651] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 1353.236150][ T6651] RBP: 00007fe9f30f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.236166][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.236255][ T6651] R13: 00007fe9f4916038 R14: 00007fe9f4915fa0 R15: 00007ffe4bcde188 [ 1353.236274][ T6651] [ 1353.735156][ T6589] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1354.254860][ T6664] Invalid argument reading file caps for ./file0 [ 1354.683531][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.763496][ T6669] loop1: detected capacity change from 0 to 164 [ 1354.790135][ T6677] ip6t_rpfilter: unknown options [ 1354.832615][ T6679] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 1354.832615][ T6679] program syz.4.8557 not setting count and/or reply_len properly [ 1355.315905][ T6695] loop1: detected capacity change from 0 to 128 [ 1355.495136][ T28] audit: type=1400 audit(2000000787.946:10311): avc: denied { shutdown } for pid=6694 comm="syz.1.8562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1356.388953][ T6701] loop1: detected capacity change from 0 to 2048 [ 1356.711413][ T6717] FAULT_INJECTION: forcing a failure. [ 1356.711413][ T6717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.732754][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.8.8567 Tainted: G W syzkaller #0 PREEMPT(full) [ 1356.732796][ T6717] Tainted: [W]=WARN [ 1356.732803][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1356.732816][ T6717] Call Trace: [ 1356.732823][ T6717] [ 1356.732875][ T6717] __dump_stack+0x1d/0x30 [ 1356.732906][ T6717] dump_stack_lvl+0x95/0xd0 [ 1356.732931][ T6717] dump_stack+0x15/0x1b [ 1356.732950][ T6717] should_fail_ex+0x263/0x280 [ 1356.732979][ T6717] should_fail+0xb/0x20 [ 1356.733082][ T6717] should_fail_usercopy+0x1a/0x20 [ 1356.733119][ T6717] _copy_from_iter+0xcf/0xea0 [ 1356.733193][ T6717] ? __alloc_skb+0x4f6/0x690 [ 1356.733298][ T6717] ? __alloc_skb+0x200/0x690 [ 1356.733322][ T6717] netlink_sendmsg+0x4ae/0x6f0 [ 1356.733379][ T6717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1356.733409][ T6717] ____sys_sendmsg+0x563/0x5b0 [ 1356.733440][ T6717] ___sys_sendmsg+0x195/0x1e0 [ 1356.733490][ T6717] __x64_sys_sendmsg+0xd4/0x160 [ 1356.733560][ T6717] x64_sys_call+0x194c/0x3020 [ 1356.733589][ T6717] do_syscall_64+0x12c/0x3b0 [ 1356.733621][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.733663][ T6717] RIP: 0033:0x7f93547cce59 [ 1356.733682][ T6717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.733713][ T6717] RSP: 002b:00007f935321f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.733739][ T6717] RAX: ffffffffffffffda RBX: 00007f9354a45fa0 RCX: 00007f93547cce59 [ 1356.733759][ T6717] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1356.733843][ T6717] RBP: 00007f935321f090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.733885][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.733899][ T6717] R13: 00007f9354a46038 R14: 00007f9354a45fa0 R15: 00007ffe48ee93b8 [ 1356.733979][ T6717] [ 1356.932089][ T28] audit: type=1400 audit(2000000789.284:10312): avc: denied { map } for pid=6721 comm="syz.9.8569" path="socket:[124033]" dev="sockfs" ino=124033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1356.940900][ T6722] ip6gretap1: entered promiscuous mode [ 1356.973137][ T6722] ip6gretap1: entered allmulticast mode [ 1357.054928][ T28] audit: type=1400 audit(2000000789.405:10313): avc: denied { create } for pid=6728 comm="syz.9.8572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1357.080245][ T6732] loop1: detected capacity change from 0 to 512 [ 1357.200276][ T6737] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8576'. [ 1357.398095][ T6756] loop8: detected capacity change from 0 to 512 [ 1357.405418][ T6756] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 1357.508354][ T6760] loop4: detected capacity change from 0 to 128 [ 1357.877393][ T28] audit: type=1400 audit(2000000790.172:10314): avc: denied { wake_alarm } for pid=6766 comm="syz.4.8582" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1358.024448][ T6767] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1358.124798][ T6767] bond2 (unregistering): Released all slaves [ 1358.138309][ T28] audit: type=1400 audit(2000000790.416:10315): avc: denied { connect } for pid=6770 comm="syz.1.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1358.158471][ T6771] loop9: detected capacity change from 0 to 4096 [ 1358.167551][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8584'. [ 1358.198558][ T6771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.239526][ T28] audit: type=1400 audit(2000000790.509:10316): avc: denied { map } for pid=6769 comm="syz.9.8583" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1358.263417][ T28] audit: type=1400 audit(2000000790.509:10317): avc: denied { write } for pid=6769 comm="syz.9.8583" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1358.946997][ T6796] loop8: detected capacity change from 0 to 128 [ 1359.004085][ T6798] loop1: detected capacity change from 0 to 128 [ 1359.066615][ T6798] netlink: 'syz.1.8592': attribute type 3 has an invalid length. [ 1359.076040][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1359.142304][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.161366][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.348340][T24748] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.361852][ T6807] loop8: detected capacity change from 0 to 256 [ 1359.380211][ T6807] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1359.409842][ T6807] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1359.427833][ T6807] FAT-fs (loop8): Filesystem has been set read-only [ 1359.442489][ T6807] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1360.637256][ T6815] loop4: detected capacity change from 0 to 2048 [ 1360.713669][ T5165] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 1360.724758][ T5165] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 1360.777432][ T6823] loop1: detected capacity change from 0 to 128 [ 1360.855097][ T6815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.896996][ T28] audit: type=1400 audit(2000000792.997:10318): avc: denied { write } for pid=6814 comm="syz.4.8599" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1360.898433][ T6815] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 1360.919753][ T28] audit: type=1400 audit(2000000792.997:10319): avc: denied { write } for pid=6814 comm="syz.4.8599" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1360.976038][ T6827] loop1: detected capacity change from 0 to 512 [ 1361.038686][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.048057][ T6809] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1361.056224][ T6809] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1361.116471][ T6832] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.8606'. [ 1361.126507][ T6832] netlink: zone id is out of range [ 1361.131741][ T6832] netlink: zone id is out of range [ 1361.137606][ T6832] netlink: zone id is out of range [ 1361.142884][ T6832] netlink: zone id is out of range [ 1361.148472][ T6832] netlink: zone id is out of range [ 1361.153644][ T6832] netlink: zone id is out of range [ 1361.159166][ T6832] netlink: zone id is out of range [ 1361.175344][ T6832] netlink: set zone limit has 8 unknown bytes [ 1361.234795][T24746] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.307760][T24746] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.404516][T24746] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.040786][ T6840] wg1 speed is unknown, defaulting to 1000 [ 1362.058662][ T6840] lo speed is unknown, defaulting to 1000 [ 1362.502638][T24746] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.638069][ T6851] loop4: detected capacity change from 0 to 2048 [ 1362.681464][ T6851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.694829][ T6851] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.721163][ T6837] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8607: bg 0: block 345: padding at end of block bitmap is not set [ 1362.724156][ T28] audit: type=1400 audit(2000000794.709:10320): avc: denied { write } for pid=6835 comm="syz.4.8607" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1362.763379][ T6837] EXT4-fs (loop4): Remounting filesystem read-only [ 1362.810939][ T6860] loop9: detected capacity change from 0 to 128 [ 1362.900137][ T6860] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1362.910519][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.918493][ T6860] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.931870][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.953453][ T6840] bridge_slave_0: entered allmulticast mode [ 1362.962072][ T6840] bridge_slave_0: entered promiscuous mode [ 1362.970926][ T6867] team0: entered promiscuous mode [ 1362.987731][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.996151][ T6867] team_slave_0: entered promiscuous mode [ 1363.010909][ T6867] team_slave_1: entered promiscuous mode [ 1363.019802][ T6867] bond1: entered promiscuous mode [ 1363.039803][ T28] audit: type=1400 audit(2000000794.999:10321): avc: denied { write } for pid=6866 comm="syz.1.8610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1363.068696][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.081936][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.095694][ T6840] bridge_slave_1: entered allmulticast mode [ 1363.105503][ T6840] bridge_slave_1: entered promiscuous mode [ 1363.124490][ T6878] sg_read: process 794 (syz.1.8617) changed security contexts after opening file descriptor, this is not allowed. [ 1363.152531][T24746] batadv1: left allmulticast mode [ 1363.157705][T24746] batadv1: left promiscuous mode [ 1363.165288][T24746] bridge0: port 3(batadv1) entered disabled state [ 1363.178489][ T6880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1363.188537][T24746] bridge_slave_1: left allmulticast mode [ 1363.207126][T24746] bridge_slave_1: left promiscuous mode [ 1363.226357][T24746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.237263][T24746] bridge_slave_0: left allmulticast mode [ 1363.246408][T24746] bridge_slave_0: left promiscuous mode [ 1363.255789][T24746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.329006][ T6883] loop4: detected capacity change from 0 to 2048 [ 1363.464224][ T6887] loop1: detected capacity change from 0 to 4096 [ 1363.488193][T24746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.504855][T24746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.515589][T24746] bond0 (unregistering): Released all slaves [ 1364.216830][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.230865][ T6883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.263616][ T28] audit: type=1400 audit(2000000796.140:10322): avc: denied { write } for pid=6881 comm="syz.4.8620" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1364.290292][ T28] audit: type=1400 audit(2000000796.178:10323): avc: denied { write } for pid=6881 comm="syz.4.8620" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1364.291988][ T6883] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 1364.385889][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.409220][ T6840] team0: Port device team_slave_0 added [ 1364.416411][ T6840] team0: Port device team_slave_1 added [ 1364.438675][ T6870] wg1 speed is unknown, defaulting to 1000 [ 1364.469307][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.494661][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.582761][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.613287][ T6870] lo speed is unknown, defaulting to 1000 [ 1364.623910][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.645365][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.691904][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.730637][T24746] hsr_slave_0: left promiscuous mode [ 1364.737257][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8625'. [ 1364.747477][T24746] hsr_slave_1: left promiscuous mode [ 1364.759188][T24746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.772454][ T28] audit: type=1400 audit(2000000796.627:10324): avc: denied { write } for pid=6904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1364.798753][T24746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.815134][T24746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.828943][T24746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.849243][T24746] veth1_macvtap: left promiscuous mode [ 1364.854951][T24746] veth0_macvtap: left promiscuous mode [ 1364.861750][ T28] audit: type=1400 audit(2000000796.692:10325): avc: denied { write } for pid=6916 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1364.886690][T24746] veth1_vlan: left promiscuous mode [ 1364.894493][T24746] veth0_vlan: left promiscuous mode [ 1364.999736][T24746] team0 (unregistering): Port device team_slave_1 removed [ 1365.010892][T24746] team0 (unregistering): Port device team_slave_0 removed [ 1365.063771][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1365.140641][ T6840] hsr_slave_0: entered promiscuous mode [ 1365.151416][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8626'. [ 1365.161308][ T6840] hsr_slave_1: entered promiscuous mode [ 1365.171328][ T6840] debugfs: 'hsr0' already exists in 'hsr' [ 1365.177303][ T6840] Cannot create hsr debugfs directory [ 1365.365142][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.380994][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1365.406094][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1365.470832][ T28] audit: type=1400 audit(2000000797.272:10326): avc: denied { write } for pid=6923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.529794][ T5873] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1365.570455][ T6946] loop1: detected capacity change from 0 to 256 [ 1365.597794][ T28] audit: type=1400 audit(2000000797.394:10327): avc: denied { write } for pid=6944 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.625548][ T6946] FAULT_INJECTION: forcing a failure. [ 1365.625548][ T6946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.681466][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.1.8630 Tainted: G W syzkaller #0 PREEMPT(full) [ 1365.681512][ T6946] Tainted: [W]=WARN [ 1365.681520][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1365.681578][ T6946] Call Trace: [ 1365.681585][ T6946] [ 1365.681594][ T6946] __dump_stack+0x1d/0x30 [ 1365.681619][ T6946] dump_stack_lvl+0x95/0xd0 [ 1365.681732][ T6946] dump_stack+0x15/0x1b [ 1365.681751][ T6946] should_fail_ex+0x263/0x280 [ 1365.681783][ T6946] should_fail+0xb/0x20 [ 1365.681814][ T6946] should_fail_usercopy+0x1a/0x20 [ 1365.681904][ T6946] strncpy_from_user+0x27/0x250 [ 1365.681926][ T6946] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 1365.682038][ T6946] do_getname+0x59/0x1c0 [ 1365.682056][ T6946] getname_uflags+0x23/0x30 [ 1365.682074][ T6946] do_fchownat+0x89/0x210 [ 1365.682091][ T6946] ? ksys_write+0x194/0x1a0 [ 1365.682131][ T6946] __x64_sys_lchown+0x4a/0x60 [ 1365.682221][ T6946] x64_sys_call+0x2870/0x3020 [ 1365.682289][ T6946] do_syscall_64+0x12c/0x3b0 [ 1365.682320][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.682388][ T6946] RIP: 0033:0x7fe9f469ce59 [ 1365.682406][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.682428][ T6946] RSP: 002b:00007fe9f30f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1365.682452][ T6946] RAX: ffffffffffffffda RBX: 00007fe9f4915fa0 RCX: 00007fe9f469ce59 [ 1365.682470][ T6946] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000cc0 [ 1365.682491][ T6946] RBP: 00007fe9f30f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.682508][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.682524][ T6946] R13: 00007fe9f4916038 R14: 00007fe9f4915fa0 R15: 00007ffe4bcde188 [ 1365.682548][ T6946] [ 1365.914915][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1366.119616][ T28] audit: type=1400 audit(2000000797.880:10328): avc: denied { write } for pid=6951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1366.171532][ T28] audit: type=1400 audit(2000000797.936:10329): avc: denied { write } for pid=6975 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1366.203796][T24746] IPVS: stop unused estimator thread 0... [ 1366.214417][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1366.291691][ T6983] SELinux: failed to load policy [ 1366.301243][T24746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.312105][T24746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.353405][T24746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.364025][T24746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.384119][ T6987] SET target dimension over the limit! [ 1366.406108][T24746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.417103][T24746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.471230][T24746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.481641][T24746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.555537][T24746] erspan0: left allmulticast mode [ 1366.560618][T24746] erspan0: left promiscuous mode [ 1366.565788][T24746] bridge4: port 1(erspan0) entered disabled state [ 1366.626612][T24746] team0: Port device vxlan0 removed [ 1366.779299][T24746] team0: Port device bridge3 removed [ 1366.867137][T24746] bond0 (unregistering): Released all slaves [ 1366.875721][T24746] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1366.884273][ T6953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1366.888110][T24746] bond1 (unregistering): Released all slaves [ 1366.929396][ T6840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1366.951365][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1366.962848][ T6840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1366.974703][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1366.982659][ T6994] loop4: detected capacity change from 0 to 512 [ 1366.989581][ T6992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1367.020758][ T6994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.034538][ T6840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1367.041471][ T6990] loop1: detected capacity change from 0 to 512 [ 1367.066382][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1367.080671][ T28] audit: type=1400 audit(2000000798.788:10330): avc: denied { write } for pid=6993 comm="syz.4.8640" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1367.103741][ T6840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1367.118808][ T6840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1367.132489][ T28] audit: type=1400 audit(2000000798.834:10331): avc: denied { write } for pid=6993 comm="syz.4.8640" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1367.133644][ T6994] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: comm syz.4.8640: Directory block failed checksum [ 1367.186791][T24746] hsr_slave_0: left promiscuous mode [ 1367.202577][T24746] hsr_slave_1: left promiscuous mode [ 1367.238279][T24746] veth1_macvtap: left promiscuous mode [ 1367.250396][T24746] veth0_macvtap: left promiscuous mode [ 1367.262086][T24746] veth1_vlan: left promiscuous mode [ 1367.267431][T24746] veth0_vlan: left promiscuous mode [ 1367.279803][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.649075][ T7035] loop4: detected capacity change from 0 to 512 [ 1367.755083][ T7035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.785331][ T7035] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.860353][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.007652][ T7047] loop9: detected capacity change from 0 to 128 [ 1368.021394][ T7047] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1368.044307][ T7047] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1368.229033][ T7049] loop1: detected capacity change from 0 to 1024 [ 1368.541311][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1368.830609][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.893034][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.944647][T24755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.944691][T24755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.968487][T24755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.968527][T24755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.096278][ T7082] loop4: detected capacity change from 0 to 256 [ 1369.251325][ T7095] loop1: detected capacity change from 0 to 512 [ 1369.266404][ T7095] EXT4-fs: Ignoring removed i_version option [ 1369.326395][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.481070][ T7126] loop4: detected capacity change from 0 to 1024 [ 1369.755224][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 1369.755241][ T28] audit: type=1400 audit(2000000801.285:10483): avc: denied { write } for pid=7129 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.067407][ T28] audit: type=1400 audit(2000000801.575:10484): avc: denied { write } for pid=7131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.117043][ T28] audit: type=1400 audit(2000000801.603:10485): avc: denied { write } for pid=7147 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.193261][ T6840] veth0_vlan: entered promiscuous mode [ 1370.214276][ T6840] veth1_vlan: entered promiscuous mode [ 1370.233981][ T28] audit: type=1326 audit(2000000801.734:10486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.5.8667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x0 [ 1370.268526][ T6840] veth0_macvtap: entered promiscuous mode [ 1370.283273][ T6840] veth1_macvtap: entered promiscuous mode [ 1370.315197][ T7165] netlink: 'syz.5.8667': attribute type 15 has an invalid length. [ 1370.337240][ T7165] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8667'. [ 1370.347913][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.368566][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.396469][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.405498][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.413091][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.420754][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.428873][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.436475][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.443913][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.452033][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.459855][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.468009][ T5930] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 1370.476923][ T5930] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1370.556522][ T7176] fido_id[7176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1370.567805][T24742] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.592199][T24742] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.601103][T24742] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.609966][T24742] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.673935][ T28] audit: type=1400 audit(2000000802.144:10487): avc: denied { write } for pid=7159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.774777][ T28] audit: type=1400 audit(2000000802.237:10488): avc: denied { write } for pid=7188 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1370.870206][ T28] audit: type=1400 audit(2000000802.321:10489): avc: denied { write } for pid=7196 comm="syz.1.8674" name="/" dev="configfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1371.036831][ T28] audit: type=1400 audit(2000000802.478:10490): avc: denied { write } for pid=7195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1371.083866][ T28] audit: type=1400 audit(2000000802.525:10491): avc: denied { write } for pid=7216 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1371.144657][ T28] audit: type=1400 audit(2000000802.543:10492): avc: denied { getopt } for pid=7215 comm="syz.6.8677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1371.213430][ T7217] bridge_slave_0: left allmulticast mode [ 1371.219192][ T7217] bridge_slave_0: left promiscuous mode [ 1371.263724][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.304504][ T7217] bridge_slave_1: left allmulticast mode [ 1371.338475][ T7217] bridge_slave_1: left promiscuous mode [ 1371.366974][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.410864][ T7217] bond0: (slave bond_slave_0): Releasing backup interface [ 1371.464862][ T7217] bond0: (slave bond_slave_1): Releasing backup interface [ 1371.485419][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8677'. [ 1371.562953][ T7217] team0: Port device team_slave_0 removed [ 1371.597787][ T7217] team0: Port device team_slave_1 removed [ 1371.617202][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.645072][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.678896][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.695976][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.730242][ T7217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1371.872801][ T7247] loop1: detected capacity change from 0 to 1024 [ 1371.891130][ T7253] FAULT_INJECTION: forcing a failure. [ 1371.891130][ T7253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.939037][ T7247] EXT4-fs: quotafile must be on filesystem root [ 1371.972680][ T7253] CPU: 1 UID: 0 PID: 7253 Comm: syz.5.8681 Tainted: G W syzkaller #0 PREEMPT(full) [ 1371.972803][ T7253] Tainted: [W]=WARN [ 1371.972813][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1371.972830][ T7253] Call Trace: [ 1371.972838][ T7253] [ 1371.972849][ T7253] __dump_stack+0x1d/0x30 [ 1371.972880][ T7253] dump_stack_lvl+0x95/0xd0 [ 1371.972907][ T7253] dump_stack+0x15/0x1b [ 1371.972941][ T7253] should_fail_ex+0x263/0x280 [ 1371.973035][ T7253] should_fail+0xb/0x20 [ 1371.973096][ T7253] should_fail_usercopy+0x1a/0x20 [ 1371.973126][ T7253] _copy_from_user+0x1c/0xb0 [ 1371.973165][ T7253] generic_map_update_batch+0x4f1/0x680 [ 1371.973268][ T7253] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1371.973302][ T7253] bpf_map_do_batch+0x25c/0x380 [ 1371.973337][ T7253] __sys_bpf+0x6a2/0x7e0 [ 1371.973367][ T7253] __x64_sys_bpf+0x41/0x50 [ 1371.973466][ T7253] x64_sys_call+0x10cb/0x3020 [ 1371.973490][ T7253] do_syscall_64+0x12c/0x3b0 [ 1371.973550][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.973572][ T7253] RIP: 0033:0x7ffa0228ce59 [ 1371.973588][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.973606][ T7253] RSP: 002b:00007ffa00ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1371.973662][ T7253] RAX: ffffffffffffffda RBX: 00007ffa02505fa0 RCX: 00007ffa0228ce59 [ 1371.973680][ T7253] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 1371.973697][ T7253] RBP: 00007ffa00ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.973714][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.973729][ T7253] R13: 00007ffa02506038 R14: 00007ffa02505fa0 R15: 00007ffcf9814208 [ 1371.973753][ T7253] [ 1372.328213][ T7247] loop1: detected capacity change from 0 to 256 [ 1373.066522][ T7319] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1373.110082][ T7319] SELinux: failed to load policy [ 1373.573936][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8697'. [ 1373.694753][ T7372] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8701'. [ 1373.715512][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8700'. [ 1373.780843][ T7379] gtp0: entered promiscuous mode [ 1373.786004][ T7379] team0: Device gtp0 is of different type [ 1373.811788][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8701'. [ 1373.858925][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8701'. [ 1374.006188][ T7396] loop6: detected capacity change from 0 to 512 [ 1374.006753][T24751] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1374.059030][ T7400] netlink: 'syz.1.8708': attribute type 21 has an invalid length. [ 1374.199979][ T7396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1374.671556][ T7414] loop9: detected capacity change from 0 to 1024 [ 1374.699310][ T7414] EXT4-fs: Ignoring removed bh option [ 1374.756920][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8707'. [ 1374.831162][ T7414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.218535][ T28] kauditd_printk_skb: 460 callbacks suppressed [ 1375.246902][ T7420] loop1: detected capacity change from 0 to 256 [ 1375.253392][ T28] audit: type=1326 audit(2000000806.357:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.9.8706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1375.353400][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1375.390095][ T28] audit: type=1326 audit(2000000806.357:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.9.8706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1375.448063][ T7426] loop1: detected capacity change from 0 to 512 [ 1375.488289][ T28] audit: type=1400 audit(2000000806.431:10955): avc: denied { write } for pid=7390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1375.579785][ T28] audit: type=1400 audit(2000000806.468:10956): avc: denied { write } for pid=7423 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.130112][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.335984][ T28] audit: type=1400 audit(2000000807.396:10957): avc: denied { write } for pid=7430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.387679][ T28] audit: type=1400 audit(2000000807.443:10958): avc: denied { write } for pid=7449 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.968929][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1377.316225][ T7473] loop6: detected capacity change from 0 to 164 [ 1377.336236][ T7473] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1377.377814][ T7477] loop1: detected capacity change from 0 to 512 [ 1377.386402][ T28] audit: type=1400 audit(2000000808.371:10959): avc: denied { write } for pid=7460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.504016][ T28] audit: type=1400 audit(2000000808.473:10960): avc: denied { write } for pid=7485 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.578687][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1377.618162][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8720'. [ 1377.659588][ T7494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7494 comm=syz.6.8720 [ 1377.701693][ T7495] netlink: 'syz.6.8720': attribute type 39 has an invalid length. [ 1377.726543][ T28] audit: type=1326 audit(2000000808.686:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7506 comm="syz.9.8721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x0 [ 1377.865457][ T28] audit: type=1400 audit(2000000808.816:10962): avc: denied { write } for pid=7502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.981635][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1378.505587][ T7621] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1378.533169][ T7621] SELinux: failed to load policy [ 1379.041711][ T7639] loop6: detected capacity change from 0 to 128 [ 1379.072782][ T7639] x_tables: duplicate underflow at hook 1 [ 1379.205828][ T7658] loop6: detected capacity change from 0 to 512 [ 1379.234161][ T7658] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8737: bg 0: block 169: padding at end of block bitmap is not set [ 1379.305602][ T7658] loop6: lost filesystem error report for type 5 error -117 [ 1379.305914][ T7658] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.8737: Failed to acquire dquot type 0 [ 1379.313330][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1379.313368][ C0] EXT4-fs (loop6): initial error at time 2000000810: ext4_validate_block_bitmap:441 [ 1379.313397][ C0] EXT4-fs (loop6): last error at time 2000000810: ext4_validate_block_bitmap:441 [ 1379.388405][ T7658] loop6: lost filesystem error report for type 5 error -117 [ 1379.389070][ T7658] EXT4-fs (loop6): 1 truncate cleaned up [ 1379.409281][ T7658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.438418][ T7658] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1379.449513][ T7665] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1379.489503][ T7658] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.8737: Failed to acquire dquot type 0 [ 1379.587891][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.819443][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1379.843678][ T7687] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1379.877145][ T7687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.901128][ T7687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.926237][ T7687] bond0 (unregistering): Released all slaves [ 1380.031835][ T7693] siw: device registration error -23 [ 1380.463354][ T7696] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.8749'. [ 1380.507487][ T7696] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.8749'. [ 1380.571582][T24748] Bluetooth: hci0: Frame reassembly failed (-84) [ 1380.621768][ T7703] loop9: detected capacity change from 0 to 128 [ 1380.649830][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8751'. [ 1380.734371][ T7705] loop1: detected capacity change from 0 to 512 [ 1380.914260][ T7708] wg1 speed is unknown, defaulting to 1000 [ 1380.929159][ T7708] lo speed is unknown, defaulting to 1000 [ 1380.953207][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1380.953224][ T28] audit: type=1400 audit(2000000811.685:10967): avc: denied { bind } for pid=7706 comm="syz.9.8753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1381.079233][ T7714] SELinux: failed to load policy [ 1381.178221][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1381.258299][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8758'. [ 1381.286289][ T7721] loop1: detected capacity change from 0 to 128 [ 1381.336669][ T7721] sit2: entered allmulticast mode [ 1381.380629][ T7723] loop1: detected capacity change from 0 to 512 [ 1381.674019][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1381.729286][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1381.808300][ T7728] SELinux: failed to load policy [ 1381.889807][ T7737] syzkaller0: entered promiscuous mode [ 1381.895391][ T7737] syzkaller0: entered allmulticast mode [ 1381.970913][ T28] audit: type=1400 audit(2000000812.623:10968): avc: denied { write } for pid=7733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1382.018381][ T7753] loop9: detected capacity change from 0 to 256 [ 1382.029746][ T7753] vfat: Unknown parameter '00000000000000000000004' [ 1382.077075][ T28] audit: type=1400 audit(2000000812.726:10969): avc: denied { write } for pid=7756 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1382.082761][ T7760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1382.110392][ T7759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7759 comm=syz.1.8769 [ 1382.124115][ T28] audit: type=1400 audit(2000000812.753:10970): avc: denied { nlmsg_write } for pid=7757 comm="syz.1.8769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1382.145393][ T7759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7759 comm=syz.1.8769 [ 1382.146173][ T7759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7759 comm=syz.1.8769 [ 1382.178071][ T7765] bond1: option ad_select: unable to set because the bond device is up [ 1382.311612][ T7773] rdma_rxe: rxe_newlink: failed to add wg1 [ 1382.350417][ T7773] wg1 speed is unknown, defaulting to 1000 [ 1382.356711][ T7773] lo speed is unknown, defaulting to 1000 [ 1382.375718][ T7782] loop1: detected capacity change from 0 to 1024 [ 1382.809475][ T7809] wg1 speed is unknown, defaulting to 1000 [ 1382.816877][ T7809] lo speed is unknown, defaulting to 1000 [ 1382.890279][ T7809] loop1: detected capacity change from 0 to 512 [ 1382.897383][ T7809] EXT4-fs: Ignoring removed i_version option [ 1382.910421][ T3757] Bluetooth: hci0: command 0x1003 tx timeout [ 1382.931157][ T839] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1383.465807][ T7815] loop9: detected capacity change from 0 to 128 [ 1383.537749][ T7815] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1383.560552][ T7815] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.585856][ T28] audit: type=1400 audit(2000000814.128:10971): avc: denied { write } for pid=7813 comm="syz.9.8789" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1383.664372][ T28] audit: type=1400 audit(2000000814.156:10972): avc: denied { write } for pid=7813 comm="syz.9.8789" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1383.697900][ T7815] __nla_validate_parse: 1 callbacks suppressed [ 1383.697914][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8789'. [ 1383.719792][ T28] audit: type=1400 audit(2000000814.258:10973): avc: denied { listen } for pid=7813 comm="syz.9.8789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1383.873493][ T5873] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1384.143931][ T7842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7842 comm=syz.5.8798 [ 1384.186750][ T7847] wg1 speed is unknown, defaulting to 1000 [ 1384.202603][ T7847] lo speed is unknown, defaulting to 1000 [ 1384.349616][ T28] audit: type=1400 audit(2000000814.834:10974): avc: denied { ioctl } for pid=7851 comm="syz.9.8801" path="socket:[126856]" dev="sockfs" ino=126856 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1384.379147][ T7854] bridge0: port 3(team0) entered blocking state [ 1384.410723][ T7854] bridge0: port 3(team0) entered disabled state [ 1384.453831][ T7854] team0: entered allmulticast mode [ 1384.493004][ T7854] team_slave_0: entered allmulticast mode [ 1384.503066][ T7861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7861 comm=syz.4.8802 [ 1384.527905][ T7854] team_slave_1: entered allmulticast mode [ 1384.545343][ T7861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7861 comm=syz.4.8802 [ 1384.558709][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8801'. [ 1384.680151][ T7854] team0: entered promiscuous mode [ 1384.686195][ T7854] team_slave_0: entered promiscuous mode [ 1384.693732][ T7854] team_slave_1: entered promiscuous mode [ 1384.703899][ T7854] bridge0: port 3(team0) entered blocking state [ 1384.711088][ T7854] bridge0: port 3(team0) entered forwarding state [ 1384.836776][ T7870] loop1: detected capacity change from 0 to 512 [ 1384.887261][ T7879] loop9: detected capacity change from 0 to 512 [ 1384.904640][ T7879] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1384.915468][ T7879] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1384.922552][ T7879] Quota error (device loop9): dq_insert_tree: Quota tree root isn't allocated! [ 1384.931993][ T7879] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 1384.942361][ T7879] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.8805: Failed to acquire dquot type 1 [ 1384.954066][ T7879] loop9: lost filesystem error report for type 5 error -5 [ 1384.954204][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1384.967827][ C0] EXT4-fs (loop9): initial error at time 2000000815: ext4_acquire_dquot:7034 [ 1384.976647][ C0] EXT4-fs (loop9): last error at time 2000000815: ext4_acquire_dquot:7034 [ 1384.988389][ T7879] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8805: bg 0: block 40: padding at end of block bitmap is not set [ 1385.030061][ T7879] loop9: lost filesystem error report for type 5 error -117 [ 1385.030701][ T7879] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1385.072853][ T7879] loop9: lost filesystem error report for type 5 error -117 [ 1385.073114][ T7879] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #16: comm syz.9.8805: data will be lost [ 1385.120947][ T7879] EXT4-fs (loop9): 1 truncate cleaned up [ 1385.151341][ T7879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1385.232536][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.279687][ T7908] netlink: 'syz.4.8816': attribute type 3 has an invalid length. [ 1385.419100][ T7917] FAULT_INJECTION: forcing a failure. [ 1385.419100][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.445643][ T7870] vhci_hcd vhci_hcd.2: invalid port number 96 [ 1385.461807][ T7870] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 1385.485943][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.4.8819 Tainted: G W syzkaller #0 PREEMPT(full) [ 1385.486006][ T7917] Tainted: [W]=WARN [ 1385.486015][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1385.486032][ T7917] Call Trace: [ 1385.486041][ T7917] [ 1385.486051][ T7917] __dump_stack+0x1d/0x30 [ 1385.486150][ T7917] dump_stack_lvl+0x95/0xd0 [ 1385.486176][ T7917] dump_stack+0x15/0x1b [ 1385.486198][ T7917] should_fail_ex+0x263/0x280 [ 1385.486261][ T7917] ? sctp_add_bind_addr+0x71/0x1e0 [ 1385.486394][ T7917] should_failslab+0x8c/0xb0 [ 1385.486428][ T7917] __kmalloc_cache_noprof+0x5f/0x400 [ 1385.486545][ T7917] sctp_add_bind_addr+0x71/0x1e0 [ 1385.486577][ T7917] sctp_copy_local_addr_list+0x1b3/0x250 [ 1385.486652][ T7917] sctp_copy_one_addr+0x7f/0x280 [ 1385.486728][ T7917] sctp_bind_addr_copy+0x79/0x290 [ 1385.486840][ T7917] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 1385.486869][ T7917] sctp_connect_new_asoc+0x1c3/0x3a0 [ 1385.486919][ T7917] sctp_sendmsg+0x100f/0x1d60 [ 1385.486947][ T7917] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1385.486965][ T7917] ? __pfx_inet_sendmsg+0x10/0x10 [ 1385.487017][ T7917] inet_sendmsg+0xc5/0xd0 [ 1385.487049][ T7917] __sys_sendto+0x3db/0x490 [ 1385.487206][ T7917] __x64_sys_sendto+0x76/0x90 [ 1385.487229][ T7917] x64_sys_call+0x2d35/0x3020 [ 1385.487303][ T7917] do_syscall_64+0x12c/0x3b0 [ 1385.487338][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.487361][ T7917] RIP: 0033:0x7f94d00ace59 [ 1385.487378][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.487411][ T7917] RSP: 002b:00007f94ceaff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1385.487432][ T7917] RAX: ffffffffffffffda RBX: 00007f94d0325fa0 RCX: 00007f94d00ace59 [ 1385.487447][ T7917] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000003 [ 1385.487461][ T7917] RBP: 00007f94ceaff090 R08: 00002000000000c0 R09: 0000000000000010 [ 1385.487519][ T7917] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000001 [ 1385.487533][ T7917] R13: 00007f94d0326038 R14: 00007f94d0325fa0 R15: 00007ffe75ad76a8 [ 1385.487554][ T7917] [ 1385.495081][ T7920] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1385.730155][ T7921] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.8820: inode has both inline data and extents flags [ 1385.749481][ T7921] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1385.749905][ T7921] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.8820: couldn't read orphan inode 15 (err -117) [ 1385.759199][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1385.759222][ C0] EXT4-fs (loop9): initial error at time 2000000816: ext4_orphan_get:1397: inode 15 [ 1385.759261][ C0] EXT4-fs (loop9): last error at time 2000000816: ext4_orphan_get:1397: inode 15 [ 1385.803270][ T7921] loop9: lost filesystem error report for type 5 error -117 [ 1385.804486][ T7921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.033319][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.062719][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8823'. [ 1386.075941][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8823'. [ 1386.130949][ T7932] veth1_virt_wifi: entered promiscuous mode [ 1386.203093][ T7939] SELinux: failed to load policy [ 1386.564476][ T7943] set_capacity_and_notify: 2 callbacks suppressed [ 1386.564512][ T7943] loop6: detected capacity change from 0 to 512 [ 1386.626782][ T7943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1386.671529][ T7943] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.8828: iget: bad extended attribute block 262144 [ 1386.685546][ T7943] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1386.687010][ T7943] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.8828: couldn't read orphan inode 15 (err -117) [ 1386.687376][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1386.716217][ C0] EXT4-fs (loop6): initial error at time 2000000817: ext4_orphan_get:1397: inode 15 [ 1386.726623][ C0] EXT4-fs (loop6): last error at time 2000000817: ext4_orphan_get:1397: inode 15 [ 1386.741919][ T7943] loop6: lost filesystem error report for type 5 error -117 [ 1386.750077][ T7943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.782315][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1386.782335][ T28] audit: type=1400 audit(2000000817.092:10976): avc: denied { write } for pid=7942 comm="syz.6.8828" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1387.001785][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.104346][ T7957] loop6: detected capacity change from 0 to 128 [ 1387.175355][ T7960] loop9: detected capacity change from 0 to 512 [ 1387.182663][ T7960] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1387.199505][ T7957] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1387.216066][ T7960] EXT4-fs (loop9): 1 truncate cleaned up [ 1387.222318][ T7960] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.248874][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8832'. [ 1387.275055][ T7957] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.338677][ T28] audit: type=1400 audit(2000000817.612:10977): avc: denied { write } for pid=7956 comm="syz.6.8831" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1387.367106][ T7958] loop4: detected capacity change from 0 to 512 [ 1387.432860][ T7958] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.8830: corrupted xattr block 95: invalid header [ 1387.462672][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8831'. [ 1387.476525][ T28] audit: type=1400 audit(2000000817.640:10978): avc: denied { write } for pid=7956 comm="syz.6.8831" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1387.521869][ T7958] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1387.523981][ T7958] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8830: bg 0: block 7: invalid block bitmap [ 1387.533596][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1387.533743][ C1] EXT4-fs (loop4): initial error at time 2000000817: ext4_expand_extra_isize_ea:2810: inode 11 [ 1387.534085][ C1] EXT4-fs (loop4): last error at time 2000000817: ext4_expand_extra_isize_ea:2810: inode 11 [ 1387.542045][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.670878][ T7958] loop4: lost filesystem error report for type 5 error -117 [ 1387.671519][ T7958] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1387.725832][ T7967] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1387.732952][ T7958] loop4: lost filesystem error report for type 5 error -117 [ 1387.740477][ T7967] bond0 (unregistering): Released all slaves [ 1387.758252][ T7958] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.8830: corrupted xattr block 95: invalid header [ 1387.816594][ T6840] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1387.828028][ T7958] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1387.832472][ T7958] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 1387.857434][ T7973] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1387.872479][ T7958] EXT4-fs (loop4): 1 orphan inode deleted [ 1387.880814][ T7958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.893969][ T7973] SELinux: failed to load policy [ 1387.927560][ T7978] netlink: 'syz.6.8838': attribute type 21 has an invalid length. [ 1387.943995][ T7980] loop1: detected capacity change from 0 to 1764 [ 1387.986005][ T7976] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1388.011949][ T7976] SELinux: failed to load policy [ 1388.153796][ T7985] loop6: detected capacity change from 0 to 512 [ 1388.896857][ T7985] FAULT_INJECTION: forcing a failure. [ 1388.896857][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.052903][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.6.8841 Tainted: G W syzkaller #0 PREEMPT(full) [ 1389.052956][ T7985] Tainted: [W]=WARN [ 1389.053005][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1389.053099][ T7985] Call Trace: [ 1389.053109][ T7985] [ 1389.053121][ T7985] __dump_stack+0x1d/0x30 [ 1389.053151][ T7985] dump_stack_lvl+0x95/0xd0 [ 1389.053178][ T7985] dump_stack+0x15/0x1b [ 1389.053202][ T7985] should_fail_ex+0x263/0x280 [ 1389.053240][ T7985] should_failslab+0x8c/0xb0 [ 1389.053270][ T7985] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 1389.053388][ T7985] ? __d_alloc+0x37/0x340 [ 1389.053421][ T7985] __d_alloc+0x37/0x340 [ 1389.053452][ T7985] d_alloc_parallel+0x54/0xce0 [ 1389.053477][ T7985] ? __rcu_read_unlock+0x4e/0x70 [ 1389.053537][ T7985] ? __d_lookup+0x316/0x340 [ 1389.053575][ T7985] path_openat+0x8b9/0x2050 [ 1389.053618][ T7985] do_file_open+0x16c/0x290 [ 1389.053664][ T7985] do_sys_openat2+0x94/0x130 [ 1389.053726][ T7985] __x64_sys_open+0xe6/0x110 [ 1389.053755][ T7985] x64_sys_call+0x14b9/0x3020 [ 1389.053798][ T7985] do_syscall_64+0x12c/0x3b0 [ 1389.053838][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.053938][ T7985] RIP: 0033:0x7fb69d4cce59 [ 1389.053954][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.053977][ T7985] RSP: 002b:00007fb69bf27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1389.054001][ T7985] RAX: ffffffffffffffda RBX: 00007fb69d745fa0 RCX: 00007fb69d4cce59 [ 1389.054017][ T7985] RDX: 0000000000000088 RSI: 0000000000147842 RDI: 0000200000000100 [ 1389.054029][ T7985] RBP: 00007fb69bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.054041][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.054071][ T7985] R13: 00007fb69d746038 R14: 00007fb69d745fa0 R15: 00007ffde2932ed8 [ 1389.054118][ T7985] [ 1389.285643][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.452480][ T8011] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1389.459876][ T5936] IPVS: starting estimator thread 0... [ 1389.525907][ T28] audit: type=1400 audit(2000000819.647:10979): avc: denied { write } for pid=7995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.619957][ T28] audit: type=1400 audit(2000000819.684:10980): avc: denied { write } for pid=8028 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.679995][ T8018] IPVS: using max 1824 ests per chain, 91200 per kthread [ 1389.709803][ T8039] SELinux: failed to load policy [ 1389.833901][ T28] audit: type=1400 audit(2000000819.935:10981): avc: denied { write } for pid=8037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.912690][ T28] audit: type=1400 audit(2000000820.000:10982): avc: denied { write } for pid=8071 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.947193][ T8073] netlink: 'syz.5.8858': attribute type 3 has an invalid length. [ 1389.961966][ T8073] netlink: 'syz.5.8858': attribute type 1 has an invalid length. [ 1389.970221][ T8073] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8858'. [ 1389.990070][ T8073] NCSI netlink: No device for ifindex 0 [ 1389.999357][ T8076] loop1: detected capacity change from 0 to 512 [ 1390.012569][ T8076] EXT4-fs: inline encryption not supported [ 1390.064633][ T8076] EXT4-fs: inline encryption not supported [ 1390.122124][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8861'. [ 1390.134580][ T28] audit: type=1400 audit(2000000820.214:10983): avc: denied { write } for pid=8078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1390.162304][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8861'. [ 1390.191356][ T28] audit: type=1400 audit(2000000820.261:10984): avc: denied { write } for pid=8097 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1390.200250][ T8092] erspan1: entered promiscuous mode [ 1390.224783][ T8099] FAULT_INJECTION: forcing a failure. [ 1390.224783][ T8099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.237899][ T8099] CPU: 1 UID: 0 PID: 8099 Comm: syz.1.8864 Tainted: G W syzkaller #0 PREEMPT(full) [ 1390.238093][ T8099] Tainted: [W]=WARN [ 1390.238103][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1390.238119][ T8099] Call Trace: [ 1390.238129][ T8099] [ 1390.238140][ T8099] __dump_stack+0x1d/0x30 [ 1390.238224][ T8099] dump_stack_lvl+0x95/0xd0 [ 1390.238251][ T8099] dump_stack+0x15/0x1b [ 1390.238272][ T8099] should_fail_ex+0x263/0x280 [ 1390.238325][ T8099] should_fail+0xb/0x20 [ 1390.238356][ T8099] should_fail_usercopy+0x1a/0x20 [ 1390.238395][ T8099] strncpy_from_user+0x27/0x250 [ 1390.238419][ T8099] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 1390.238494][ T8099] do_getname+0x59/0x1c0 [ 1390.238517][ T8099] getname_flags+0x1d/0x30 [ 1390.238551][ T8099] __x64_sys_getxattr+0xfd/0x150 [ 1390.238595][ T8099] x64_sys_call+0x24ce/0x3020 [ 1390.238620][ T8099] do_syscall_64+0x12c/0x3b0 [ 1390.238657][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.238698][ T8099] RIP: 0033:0x7fe9f469ce59 [ 1390.238730][ T8099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.238797][ T8099] RSP: 002b:00007fe9f30f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 1390.238825][ T8099] RAX: ffffffffffffffda RBX: 00007fe9f4915fa0 RCX: 00007fe9f469ce59 [ 1390.238845][ T8099] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000000c0 [ 1390.238863][ T8099] RBP: 00007fe9f30f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.238920][ T8099] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1390.238938][ T8099] R13: 00007fe9f4916038 R14: 00007fe9f4915fa0 R15: 00007ffe4bcde188 [ 1390.238965][ T8099] [ 1390.248065][ T8092] erspan1: entered allmulticast mode [ 1390.386139][ T8103] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1390.444165][ T8103] SELinux: failed to load policy [ 1390.506304][ T8112] loop6: detected capacity change from 0 to 512 [ 1390.523824][ T8104] wg1 speed is unknown, defaulting to 1000 [ 1390.574168][ T8104] lo speed is unknown, defaulting to 1000 [ 1390.651218][ T8130] netlink: 'syz.6.8870': attribute type 3 has an invalid length. [ 1390.674268][ T8132] loop1: detected capacity change from 0 to 1024 [ 1390.692441][ T8132] EXT4-fs: Ignoring removed bh option [ 1390.692622][ T28] audit: type=1400 audit(2000000820.725:10985): avc: denied { write } for pid=8107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1390.710647][ T8130] netlink: 'syz.6.8870': attribute type 1 has an invalid length. [ 1390.771924][ T8132] loop1: detected capacity change from 0 to 512 [ 1390.816399][ T8130] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8870'. [ 1390.858107][ T8130] NCSI netlink: No device for ifindex 0 [ 1390.939757][ T8147] SELinux: failed to load policy [ 1391.074790][ T8163] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1391.084607][ T8163] SELinux: failed to load policy [ 1391.407633][ T8188] IPVS: Error connecting to the multicast addr [ 1392.347786][ T8252] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1392.388400][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1392.388415][ T28] audit: type=1326 audit(2000000822.303:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.9.8884" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd7fedce59 code=0x0 [ 1392.415017][ T8252] SELinux: failed to load policy [ 1392.521885][ T8258] loop6: detected capacity change from 0 to 512 [ 1392.544222][ T8258] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 1393.269030][ T8274] loop1: detected capacity change from 0 to 512 [ 1393.278353][ T8274] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 1393.373373][ T8278] loop4: detected capacity change from 0 to 128 [ 1393.947971][ T8294] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1394.006217][ T8294] SELinux: failed to load policy [ 1394.046060][ T8298] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8901'. [ 1394.253550][ T8296] wg1 speed is unknown, defaulting to 1000 [ 1394.259897][ T8296] lo speed is unknown, defaulting to 1000 [ 1394.327737][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8907'. [ 1394.350314][ T8310] loop1: detected capacity change from 0 to 256 [ 1394.506622][ T8319] FAULT_INJECTION: forcing a failure. [ 1394.506622][ T8319] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.532984][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.9.8910 Tainted: G W syzkaller #0 PREEMPT(full) [ 1394.533020][ T8319] Tainted: [W]=WARN [ 1394.533063][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1394.533078][ T8319] Call Trace: [ 1394.533086][ T8319] [ 1394.533095][ T8319] __dump_stack+0x1d/0x30 [ 1394.533121][ T8319] dump_stack_lvl+0x95/0xd0 [ 1394.533141][ T8319] dump_stack+0x15/0x1b [ 1394.533159][ T8319] should_fail_ex+0x263/0x280 [ 1394.533207][ T8319] should_failslab+0x8c/0xb0 [ 1394.533243][ T8319] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 1394.533323][ T8319] ? xfrm_add_sa+0x1af3/0x25d0 [ 1394.533432][ T8319] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 1394.533553][ T8319] kmemdup_noprof+0x2b/0x70 [ 1394.533633][ T8319] xfrm_add_sa+0x1af3/0x25d0 [ 1394.533667][ T8319] xfrm_user_rcv_msg+0x576/0x670 [ 1394.533706][ T8319] ? __kfree_skb+0x109/0x150 [ 1394.533756][ T8319] ? nlmon_xmit+0x4f/0x60 [ 1394.533789][ T8319] ? consume_skb+0x4b/0x130 [ 1394.533891][ T8319] netlink_rcv_skb+0x123/0x220 [ 1394.533922][ T8319] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1394.534002][ T8319] xfrm_netlink_rcv+0x48/0x60 [ 1394.534044][ T8319] netlink_unicast+0x5a8/0x680 [ 1394.534077][ T8319] netlink_sendmsg+0x5c8/0x6f0 [ 1394.534232][ T8319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.534304][ T8319] ____sys_sendmsg+0x563/0x5b0 [ 1394.534366][ T8319] ___sys_sendmsg+0x195/0x1e0 [ 1394.534405][ T8319] __x64_sys_sendmsg+0xd4/0x160 [ 1394.534505][ T8319] x64_sys_call+0x194c/0x3020 [ 1394.534608][ T8319] do_syscall_64+0x12c/0x3b0 [ 1394.534687][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.534711][ T8319] RIP: 0033:0x7fdd7fedce59 [ 1394.534730][ T8319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.534768][ T8319] RSP: 002b:00007fdd7e92f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.534790][ T8319] RAX: ffffffffffffffda RBX: 00007fdd80155fa0 RCX: 00007fdd7fedce59 [ 1394.534806][ T8319] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1394.534820][ T8319] RBP: 00007fdd7e92f090 R08: 0000000000000000 R09: 0000000000000000 [ 1394.534890][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.534906][ T8319] R13: 00007fdd80156038 R14: 00007fdd80155fa0 R15: 00007ffe60553738 [ 1394.534931][ T8319] [ 1394.816716][ T8329] loop4: detected capacity change from 0 to 512 [ 1394.902720][ T8329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.915404][ T8329] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.935020][ T28] audit: type=1400 audit(2000000824.668:10998): avc: denied { write } for pid=8328 comm="syz.4.8915" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1394.989273][ T8341] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1395.022438][ T8341] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 1395.042370][ T8341] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1395.042370][ T8341] [ 1395.054776][ T8341] EXT4-fs (loop4): Total free blocks count 0 [ 1395.092384][ T8341] EXT4-fs (loop4): Free/Dirty block details [ 1395.101176][ T5929] hid_parser_main: 14 callbacks suppressed [ 1395.101197][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.104792][ T8341] EXT4-fs (loop4): free_blocks=65280 [ 1395.107208][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.115822][ T8341] EXT4-fs (loop4): dirty_blocks=33 [ 1395.138329][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.147634][ T8341] EXT4-fs (loop4): Block reservation details [ 1395.161803][ T8354] FAULT_INJECTION: forcing a failure. [ 1395.161803][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.166905][ T8341] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 1395.190545][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.194985][ T8356] loop1: detected capacity change from 0 to 1024 [ 1395.205097][ T8356] EXT4-fs: test_dummy_encryption option not supported [ 1395.217554][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.5.8922 Tainted: G W syzkaller #0 PREEMPT(full) [ 1395.217714][ T8354] Tainted: [W]=WARN [ 1395.217724][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1395.217741][ T8354] Call Trace: [ 1395.217749][ T8354] [ 1395.217759][ T8354] __dump_stack+0x1d/0x30 [ 1395.217790][ T8354] dump_stack_lvl+0x95/0xd0 [ 1395.217855][ T8354] dump_stack+0x15/0x1b [ 1395.217939][ T8354] should_fail_ex+0x263/0x280 [ 1395.218007][ T8354] should_fail+0xb/0x20 [ 1395.218039][ T8354] should_fail_usercopy+0x1a/0x20 [ 1395.218097][ T8354] _copy_from_user+0x1c/0xb0 [ 1395.218131][ T8354] ___sys_sendmsg+0xc1/0x1e0 [ 1395.218179][ T8354] __x64_sys_sendmsg+0xd4/0x160 [ 1395.218241][ T8354] x64_sys_call+0x194c/0x3020 [ 1395.218346][ T8354] do_syscall_64+0x12c/0x3b0 [ 1395.218386][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.218410][ T8354] RIP: 0033:0x7ffa0228ce59 [ 1395.218427][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.218450][ T8354] RSP: 002b:00007ffa00ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1395.218525][ T8354] RAX: ffffffffffffffda RBX: 00007ffa02505fa0 RCX: 00007ffa0228ce59 [ 1395.218543][ T8354] RDX: 0000000004000040 RSI: 0000200000002580 RDI: 0000000000000004 [ 1395.218615][ T8354] RBP: 00007ffa00ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.218631][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.218646][ T8354] R13: 00007ffa02506038 R14: 00007ffa02505fa0 R15: 00007ffcf9814208 [ 1395.218670][ T8354] [ 1395.227296][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.403433][ T8361] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1395.430338][ T8361] SELinux: failed to load policy [ 1395.445210][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.452683][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.467895][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.475409][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.484512][ T5929] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 1395.512216][ T8368] bond0 (unregistering): Released all slaves [ 1395.533487][ T5929] hid-generic 0103:0004:0000.0004: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1395.731942][ T8388] loop6: detected capacity change from 0 to 512 [ 1395.739729][ T8388] EXT4-fs: Ignoring removed i_version option [ 1395.746927][ T8388] EXT4-fs: Ignoring removed nobh option [ 1395.755000][ T8388] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1395.777328][ T8388] EXT4-fs (loop6): 1 truncate cleaned up [ 1395.796638][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.802033][ T8388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1395.820591][ T28] audit: type=1400 audit(2000000825.485:10999): avc: denied { write } for pid=8387 comm="syz.6.8934" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1395.862663][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.871833][ T8394] loop1: detected capacity change from 0 to 512 [ 1395.878495][ T8394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1395.984168][ T8399] SELinux: failed to load policy [ 1396.206595][ T8424] netem: change failed [ 1396.333782][ T8427] wg1 speed is unknown, defaulting to 1000 [ 1396.350079][ T8427] lo speed is unknown, defaulting to 1000 [ 1396.513584][ T8412] loop4: detected capacity change from 0 to 512 [ 1396.565755][ T8412] EXT4-fs: Ignoring removed oldalloc option [ 1396.577305][ T8412] ext4: Unknown parameter 'subj_type' [ 1396.828436][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8953'. [ 1396.838361][ T8438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.904144][ T8440] SELinux: failed to load policy [ 1397.268862][ T5929] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1397.323442][ T8458] macvlan2: entered promiscuous mode [ 1397.637740][ T8469] SELinux: failed to load policy [ 1398.265486][ T8486] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8973'. [ 1398.286463][ T8484] loop6: detected capacity change from 0 to 2048 [ 1398.312634][ T8484] msdos: Unknown parameter 'audit' [ 1398.448668][ T8491] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8972'. [ 1399.182655][ T8504] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1399.208403][ T8504] SELinux: failed to load policy [ 1399.384740][ T8508] SELinux: failed to load policy [ 1399.469113][ T8510] syzkaller0: entered promiscuous mode [ 1399.486343][ T8510] syzkaller0: entered allmulticast mode [ 1399.566681][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8983'. [ 1399.644011][ T8517] loop9: detected capacity change from 0 to 1764 [ 1399.833082][ T8521] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8986'. [ 1400.420853][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1400.731011][ T8544] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1400.761127][ T8544] SELinux: failed to load policy [ 1400.812063][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8991'. [ 1400.944761][ T8548] SELinux: failed to load policy [ 1401.087219][ T8556] loop9: detected capacity change from 0 to 128 [ 1401.101498][ T8556] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1401.120528][ T2287] udevd[2287]: incorrect ext4 checksum on /dev/loop9 [ 1401.210647][ T8566] SELinux: failed to load policy [ 1401.285506][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8996'. [ 1402.090456][ T8590] wg1 speed is unknown, defaulting to 1000 [ 1402.098768][ T8590] lo speed is unknown, defaulting to 1000 [ 1402.703155][ T8596] loop6: detected capacity change from 0 to 256 [ 1403.151203][ T8601] SELinux: failed to load policy [ 1403.181278][ T8604] loop4: detected capacity change from 0 to 512 [ 1403.202321][ T8604] tmpfs: Bad value for 'mpol' [ 1403.203360][ T28] audit: type=1400 audit(2000000832.332:11000): avc: denied { mounton } for pid=8603 comm="syz.4.9006" path="/179/file0/file0" dev="loop4" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1403.422311][ T8609] loop1: detected capacity change from 0 to 128 [ 1403.756175][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9016'. [ 1403.765403][ T8629] netlink: 'syz.4.9016': attribute type 30 has an invalid length. [ 1403.782640][ T7577] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.795458][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9016'. [ 1403.805374][ T7577] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.814554][ T8629] netlink: 'syz.4.9016': attribute type 30 has an invalid length. [ 1403.823076][ T7577] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.840487][ T7577] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1403.912148][ T8633] SELinux: failed to load policy [ 1404.345483][ T8643] tmpfs: Bad value for 'mpol' [ 1404.487068][ T8658] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.557346][ T8660] loop6: detected capacity change from 0 to 512 [ 1404.564147][ T8660] EXT4-fs: Ignoring removed nobh option [ 1404.589672][ T8660] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 1: comm syz.6.9028: invalid block [ 1404.605526][ T8660] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1404.610894][ T8660] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.9028: couldn't read orphan inode 11 (err -117) [ 1404.620193][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1404.620214][ C1] EXT4-fs (loop6): initial error at time 2000000833: __ext4_iget:5481: inode 11: block 1 [ 1404.620257][ C1] EXT4-fs (loop6): last error at time 2000000833: __ext4_iget:5481: inode 11: block 1 [ 1404.661818][ T8660] loop6: lost filesystem error report for type 5 error -117 [ 1404.662944][ T8658] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.683411][ T8660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1404.760550][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9028'. [ 1404.771921][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9028'. [ 1404.903549][ T8658] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.924154][ T8669] geneve2: entered promiscuous mode [ 1404.938095][ T8663] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1404.940340][ T8669] geneve2: entered allmulticast mode [ 1404.977627][ T8674] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1405.017248][ T8668] wg1 speed is unknown, defaulting to 1000 [ 1405.025291][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.038057][ T8668] lo speed is unknown, defaulting to 1000 [ 1405.053278][T24744] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.085851][T24744] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.112346][T24744] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.147028][T24744] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.225200][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9037'. [ 1405.293914][ T8687] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1405.319896][ T8687] team0: Failed to send options change via netlink (err -105) [ 1405.349859][ T8687] team0: Port device dummy0 added [ 1405.468977][ T8697] loop6: detected capacity change from 0 to 512 [ 1405.475661][ T8697] ext4: Unknown parameter 'subj_role' [ 1405.538637][ T8706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9044'. [ 1405.697246][ T8697] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 1405.730330][ T8706] loop4: detected capacity change from 0 to 8192 [ 1405.747135][ T8706] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1405.788025][ T8706] ieee802154 phy0 wpan0: encryption failed: -22 [ 1406.007825][ T8707] loop9: detected capacity change from 0 to 512 [ 1406.024414][ T8714] loop4: detected capacity change from 0 to 2048 [ 1406.045586][ T8707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1406.106287][ T8707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.107687][ T8714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1406.135592][ T28] audit: type=1400 audit(2000000835.062:11001): avc: denied { write } for pid=8713 comm="syz.4.9046" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1406.147563][ T8714] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 1406.157803][ T28] audit: type=1400 audit(2000000835.071:11002): avc: denied { write } for pid=8713 comm="syz.4.9046" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1406.198836][ T8718] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1406.215135][ T8707] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.225593][ T8718] SELinux: failed to load policy [ 1406.238334][ T28] audit: type=1400 audit(2000000835.155:11003): avc: denied { write } for pid=8689 comm="syz.9.9039" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1406.272700][ T28] audit: type=1400 audit(2000000835.183:11004): avc: denied { write } for pid=8689 comm="syz.9.9039" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1406.329647][ T8690] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.9039: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 1406.353420][ T28] audit: type=1400 audit(2000000835.238:11005): avc: denied { write } for pid=8689 comm="syz.9.9039" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1406.384070][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.475291][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.560222][ T8725] loop6: detected capacity change from 0 to 512 [ 1406.566905][ T8725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1406.585121][ T8735] FAULT_INJECTION: forcing a failure. [ 1406.585121][ T8735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.598290][ T8735] CPU: 1 UID: 0 PID: 8735 Comm: syz.1.9051 Tainted: G W syzkaller #0 PREEMPT(full) [ 1406.598367][ T8735] Tainted: [W]=WARN [ 1406.598374][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1406.598468][ T8735] Call Trace: [ 1406.598476][ T8735] [ 1406.598486][ T8735] __dump_stack+0x1d/0x30 [ 1406.598519][ T8735] dump_stack_lvl+0x95/0xd0 [ 1406.598581][ T8735] dump_stack+0x15/0x1b [ 1406.598654][ T8735] should_fail_ex+0x263/0x280 [ 1406.598718][ T8735] should_fail+0xb/0x20 [ 1406.598766][ T8735] should_fail_usercopy+0x1a/0x20 [ 1406.598804][ T8735] _copy_to_user+0x20/0xa0 [ 1406.598840][ T8735] simple_read_from_buffer+0xb5/0x130 [ 1406.598879][ T8735] proc_fail_nth_read+0x10e/0x150 [ 1406.599047][ T8735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1406.599082][ T8735] vfs_read+0x1ab/0x7f0 [ 1406.599117][ T8735] ? __rcu_read_unlock+0x4e/0x70 [ 1406.599183][ T8735] ? __fget_files+0x184/0x1c0 [ 1406.599208][ T8735] ? up_write+0x18/0x60 [ 1406.599234][ T8735] ? mutex_lock+0x57/0x90 [ 1406.599413][ T8735] ksys_read+0xdc/0x1a0 [ 1406.599441][ T8735] __x64_sys_read+0x40/0x50 [ 1406.599508][ T8735] x64_sys_call+0x2886/0x3020 [ 1406.599536][ T8735] do_syscall_64+0x12c/0x3b0 [ 1406.599573][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.599601][ T8735] RIP: 0033:0x7fe9f465d68e [ 1406.599639][ T8735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1406.599661][ T8735] RSP: 002b:00007fe9f30f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1406.599686][ T8735] RAX: ffffffffffffffda RBX: 00007fe9f30f76c0 RCX: 00007fe9f465d68e [ 1406.599705][ T8735] RDX: 000000000000000f RSI: 00007fe9f30f70a0 RDI: 0000000000000007 [ 1406.599722][ T8735] RBP: 00007fe9f30f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.599739][ T8735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.599760][ T8735] R13: 00007fe9f4916038 R14: 00007fe9f4915fa0 R15: 00007ffe4bcde188 [ 1406.599781][ T8735] [ 1406.609707][ T8725] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1406.837333][ T8743] loop4: detected capacity change from 0 to 512 [ 1406.855858][ T8743] EXT4-fs: inline encryption not supported [ 1406.877636][ T8725] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.9047: corrupted in-inode xattr: e_value size too large [ 1406.917525][ T8743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1406.931017][ T8725] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1406.931241][ T8725] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.9047: couldn't read orphan inode 15 (err -117) [ 1406.952376][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1406.952401][ C1] EXT4-fs (loop6): initial error at time 2000000835: ext4_iget_extra_inode:5128: inode 15 [ 1406.952433][ C1] EXT4-fs (loop6): last error at time 2000000835: ext4_iget_extra_inode:5128: inode 15 [ 1406.982769][ T8743] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1406.995198][ T8725] loop6: lost filesystem error report for type 5 error -117 [ 1406.995909][ T8725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.019189][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9047'. [ 1407.029599][ T8743] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1407.045660][ T8743] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1407.061687][ T8743] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.9052: Failed to acquire dquot type 1 [ 1407.073181][ T8743] loop4: lost filesystem error report for type 5 error -5 [ 1407.080773][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1407.096216][ C0] EXT4-fs (loop4): initial error at time 2000000835: ext4_acquire_dquot:7034 [ 1407.106491][ C0] EXT4-fs (loop4): last error at time 2000000835: ext4_acquire_dquot:7034 [ 1407.119728][ T8743] EXT4-fs (loop4): Remounting filesystem read-only [ 1407.126312][ T8743] EXT4-fs (loop4): 1 truncate cleaned up [ 1407.132608][ T8743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.158830][ T8756] loop1: detected capacity change from 0 to 512 [ 1407.179311][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.189170][ T8756] EXT4-fs: Ignoring removed oldalloc option [ 1407.272268][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.907193][ T8782] loop1: detected capacity change from 0 to 1024 [ 1407.918945][ T8782] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1408.027146][ T8782] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1408.038077][ T8782] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.9062: inode #1: comm syz.1.9062: iget: illegal inode # [ 1408.118051][ T8782] loop1: lost filesystem error report for type 5 error -117 [ 1408.118173][ T8782] EXT4-fs (loop1): no journal found [ 1408.158193][ T8782] EXT4-fs (loop1): can't get journal size [ 1408.256599][ T8787] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1408.266203][ T8787] SELinux: failed to load policy [ 1408.277912][ T8782] EXT4-fs (loop1): failed to initialize system zone (-22) [ 1408.313427][ T8782] EXT4-fs (loop1): mount failed [ 1408.345324][ T8782] tipc: Started in network mode [ 1408.350251][ T8782] tipc: Node identity ac14140f, cluster identity 4711 [ 1408.357149][ T8782] tipc: New replicast peer: 172.30.0.2 [ 1408.382166][ T8782] tipc: Enabled bearer , priority 10 [ 1408.690680][ T8801] loop6: detected capacity change from 0 to 512 [ 1408.773998][ T8801] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.9071: corrupted in-inode xattr: invalid ea_ino [ 1408.842911][ T8801] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1408.844618][ T8801] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.9071: couldn't read orphan inode 15 (err -117) [ 1408.853938][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1408.853959][ C0] EXT4-fs (loop6): initial error at time 2000000837: ext4_iget_extra_inode:5128: inode 15 [ 1408.854008][ C0] EXT4-fs (loop6): last error at time 2000000837: ext4_iget_extra_inode:5128: inode 15 [ 1409.048665][ T8815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9076'. [ 1409.086127][ T8801] loop6: lost filesystem error report for type 5 error -117 [ 1409.086793][ T8801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.211558][ T8801] bridge0: port 1(vlan2) entered blocking state [ 1409.242557][ T8801] bridge0: port 1(vlan2) entered disabled state [ 1409.280199][ T8801] vlan2: entered allmulticast mode [ 1409.310520][ T8801] geneve0: entered allmulticast mode [ 1409.422943][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.454450][ T5926] tipc: Node number set to 2886997007 [ 1411.809254][ T8851] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1411.831173][ T8851] bond2 (unregistering): Released all slaves [ 1411.878841][ T5927] hid_parser_main: 15 callbacks suppressed [ 1411.878865][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1411.897115][ T8855] netem: change failed [ 1412.083154][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.108334][ T8862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9088'. [ 1412.112463][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.126023][ T8860] syz.6.9087 (8860) used obsolete PPPIOCDETACH ioctl [ 1412.143863][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.143899][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.143967][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.144057][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.144081][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.144109][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.144139][ T5927] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 1412.148783][ T5927] hid-generic 0103:0004:0000.0006: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1412.213766][ T28] audit: type=1326 audit(2000000840.709:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8865 comm="syz.6.9090" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb69d4cce59 code=0x0 [ 1412.224808][ T8864] fido_id[8864]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1412.297990][ T8863] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1412.311630][ T28] audit: type=1400 audit(2000000840.774:11007): avc: denied { setattr } for pid=8870 comm="syz.5.9092" name="KCM" dev="sockfs" ino=131108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1412.323979][ T8863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1412.353453][ T8874] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 1412.353453][ T8874] program syz.9.9093 not setting count and/or reply_len properly [ 1412.373069][ T8873] bond2: option primary_reselect: invalid value (254) [ 1412.384056][ T8873] bond2 (unregistering): Released all slaves [ 1412.445161][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9090'. [ 1412.657164][ T8890] set_capacity_and_notify: 3 callbacks suppressed [ 1412.664520][ T8890] loop9: detected capacity change from 0 to 512 [ 1412.910610][ T8890] EXT4-fs: inline encryption not supported [ 1412.929219][ T8890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1412.939458][ T8890] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1412.982494][ T8890] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1412.994004][ T8890] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1413.026790][ T8890] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.9098: Failed to acquire dquot type 1 [ 1413.054477][ T8890] loop9: lost filesystem error report for type 5 error -5 [ 1413.054939][ T8890] EXT4-fs (loop9): Remounting filesystem read-only [ 1413.062175][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1413.062191][ C0] EXT4-fs (loop9): initial error at time 2000000841: ext4_acquire_dquot:7034 [ 1413.062231][ C0] EXT4-fs (loop9): last error at time 2000000841: ext4_acquire_dquot:7034 [ 1413.094612][ T8890] EXT4-fs (loop9): 1 truncate cleaned up [ 1413.210307][ T8890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.504864][ T8898] loop1: detected capacity change from 0 to 256 [ 1414.790223][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.965268][ T28] audit: type=1326 audit(2000000843.186:11008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.6.9100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d4cce59 code=0x7ffc0000 [ 1415.008391][ T8923] loop9: detected capacity change from 0 to 512 [ 1415.047968][ T8923] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1415.062366][T23187] hid-generic 0103:0004:0000.0007: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1415.108928][ T8923] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.9105: Allocating blocks 41-42 which overlap fs metadata [ 1415.127985][ T28] audit: type=1326 audit(2000000843.186:11009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.6.9100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d4cce59 code=0x7ffc0000 [ 1415.209407][ T8923] loop9: lost filesystem error report for type 5 error -117 [ 1415.211225][ T8923] Quota error (device loop9): write_blk: dquota write failed [ 1415.218617][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1415.218639][ C0] EXT4-fs (loop9): initial error at time 2000000843: ext4_mb_mark_diskspace_used:4222 [ 1415.218661][ C0] EXT4-fs (loop9): last error at time 2000000843: ext4_mb_mark_diskspace_used:4222 [ 1415.261627][ T8926] fido_id[8926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1415.310529][ T28] audit: type=1326 audit(2000000843.186:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.6.9100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d4cce59 code=0x7ffc0000 [ 1415.410417][ T28] audit: type=1326 audit(2000000843.186:11011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.6.9100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d4cce59 code=0x7ffc0000 [ 1415.444814][ T8923] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 1415.477371][ T8923] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.9105: Allocating blocks 41-42 which overlap fs metadata [ 1415.477402][ T8923] loop9: lost filesystem error report for type 5 error -117 [ 1415.477676][ T8923] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.9105: Failed to acquire dquot type 1 [ 1415.477704][ T8923] loop9: lost filesystem error report for type 5 error -117 [ 1415.479604][ T8923] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1415.479666][ T8923] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.9105: corrupted inode contents [ 1415.479698][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.504929][ T8923] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #12: comm syz.9.9105: mark_inode_dirty error [ 1415.504978][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.506798][ T8923] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.9105: corrupted inode contents [ 1415.506826][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.507034][ T8923] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.9105: mark_inode_dirty error [ 1415.507058][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.507196][ T8923] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.9105: corrupted inode contents [ 1415.507219][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.507376][ T8923] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1415.507393][ T8923] loop9: lost filesystem error report for type 5 error -117 [ 1415.507536][ T8923] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.9105: corrupted inode contents [ 1415.507631][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.507803][ T8923] EXT4-fs error (device loop9): ext4_truncate:4690: inode #12: comm syz.9.9105: mark_inode_dirty error [ 1415.507839][ T8923] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1415.507963][ T8923] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1415.507987][ T8923] loop9: lost filesystem error report for type 5 error -117 [ 1415.508322][ T8923] EXT4-fs (loop9): 1 truncate cleaned up [ 1415.508780][ T8923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.509682][ T8923] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.733067][ T8940] loop9: detected capacity change from 0 to 512 [ 1415.778088][ T8940] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1415.917850][ T8940] EXT4-fs (loop9): 1 truncate cleaned up [ 1415.942943][ T8940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1415.993537][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9110'. [ 1416.206895][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9112'. [ 1416.289929][ T8952] loop4: detected capacity change from 0 to 512 [ 1416.299627][ T8952] EXT4-fs: Mount option(s) incompatible with ext3 [ 1416.324071][ T8952] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1416.364976][ T8956] SELinux: failed to load policy [ 1416.586308][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.671736][ T8964] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 1416.671736][ T8964] program syz.1.9121 not setting count and/or reply_len properly [ 1417.475634][ T8995] SELinux: failed to load policy [ 1417.567883][ T8999] bridge0: port 3(team0) entered disabled state [ 1417.574617][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.581891][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.688288][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 1417.688303][ T28] audit: type=1326 audit(2000000845.784:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.722026][ T28] audit: type=1326 audit(2000000845.821:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.748375][ T28] audit: type=1326 audit(2000000845.821:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.796697][ T28] audit: type=1326 audit(2000000845.821:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.836079][ T28] audit: type=1326 audit(2000000845.821:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.863161][ T28] audit: type=1326 audit(2000000845.821:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.885409][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9137'. [ 1417.891785][ T28] audit: type=1326 audit(2000000845.821:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1417.979506][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1418.278280][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.288890][ T8999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.332625][ T8999] ip6gretap1: left promiscuous mode [ 1418.343344][ T8999] ip6gretap1: left allmulticast mode [ 1418.361670][ T8999] erspan1: left promiscuous mode [ 1418.368183][ T8999] erspan1: left allmulticast mode [ 1418.382068][ T7577] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.407257][ T7577] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.428640][ T7577] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.437126][ T28] audit: type=1326 audit(2000000846.470:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1418.462869][ T7577] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.471320][ T28] audit: type=1326 audit(2000000846.470:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.5.9137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0228ce59 code=0x7ffc0000 [ 1418.517798][ T9021] loop6: detected capacity change from 0 to 128 [ 1418.554170][ T9024] xt_hashlimit: max too large, truncated to 1048576 [ 1418.638118][ T9028] netlink: 'syz.1.9141': attribute type 3 has an invalid length. [ 1418.652106][ T9028] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9141'. [ 1418.690988][ T28] audit: type=1400 audit(2000000846.712:11118): avc: denied { connect } for pid=9032 comm="syz.1.9144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1419.161891][ T9038] loop6: detected capacity change from 0 to 1024 [ 1419.182976][ T9038] EXT4-fs: Ignoring removed bh option [ 1419.754730][ T9038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1419.938310][ T9038] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9145'. [ 1420.104794][ T6840] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /91/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1420.651529][ T9053] siw: device registration error -23 [ 1420.673217][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1420.701667][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1420.816529][ T6840] EXT4-fs (loop6): Remounting filesystem read-only [ 1420.832214][ T9055] loop9: detected capacity change from 0 to 164 [ 1420.879625][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.143540][ T9057] syzkaller0: entered promiscuous mode [ 1421.152099][ T9057] syzkaller0: entered allmulticast mode [ 1421.223968][ T9070] netlink: 'syz.9.9154': attribute type 3 has an invalid length. [ 1421.233163][ T9070] netlink: 236 bytes leftover after parsing attributes in process `syz.9.9154'. [ 1421.608437][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9157'. [ 1421.819526][ T9082] wg1 speed is unknown, defaulting to 1000 [ 1422.379667][ T9082] lo speed is unknown, defaulting to 1000 [ 1422.390061][ T9092] netlink: 'syz.9.9161': attribute type 3 has an invalid length. [ 1422.922562][ T9083] wg1 speed is unknown, defaulting to 1000 [ 1423.392479][ T9083] lo speed is unknown, defaulting to 1000 [ 1425.974334][ T9104] netlink: 'syz.6.9165': attribute type 3 has an invalid length. [ 1426.003375][ T9104] netlink: 236 bytes leftover after parsing attributes in process `syz.6.9165'. [ 1426.129951][ T9110] netlink: 3100 bytes leftover after parsing attributes in process `syz.6.9168'. [ 1426.234020][ T9106] loop1: detected capacity change from 0 to 512 [ 1426.291180][ T9114] loop6: detected capacity change from 0 to 512 [ 1426.323337][ T9116] loop1: detected capacity change from 0 to 4096 [ 1426.367422][ T9114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1426.409022][ T9114] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.428108][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1426.428156][ T28] audit: type=1400 audit(2000000853.896:11131): avc: denied { write } for pid=9113 comm="syz.6.9170" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1426.485502][ T28] audit: type=1326 audit(2000000853.943:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.514674][ T28] audit: type=1400 audit(2000000853.943:11133): avc: denied { write } for pid=9113 comm="syz.6.9170" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1426.538575][ T28] audit: type=1326 audit(2000000853.952:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.566751][ T28] audit: type=1326 audit(2000000853.952:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.597217][ T28] audit: type=1326 audit(2000000853.952:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.624479][ T28] audit: type=1326 audit(2000000853.952:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.652447][ T28] audit: type=1326 audit(2000000853.952:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.679614][T24751] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.691564][T24751] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.713711][T24751] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.730414][T24751] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1426.755028][ T28] audit: type=1326 audit(2000000853.952:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.782328][ T28] audit: type=1326 audit(2000000853.952:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.9.9172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd7fedce59 code=0x7ffc0000 [ 1426.836206][ T5935] hid_parser_main: 38 callbacks suppressed [ 1426.836227][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1426.858550][ T6840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.898051][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1426.930977][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1426.961384][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1426.971266][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9181'. [ 1426.990444][ T9143] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.9180'. [ 1427.004950][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1427.009835][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9181'. [ 1427.026885][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1427.034755][ T9143] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.9180'. [ 1427.057239][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9183'. [ 1427.058470][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1427.091672][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1427.114029][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1427.138524][ T5935] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 1427.151972][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=9154 comm=syz.5.9183 [ 1427.157538][ T5935] hid-generic 0103:0004:0000.0008: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1427.249462][ T9159] fido_id[9159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1427.284045][ T9156] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1427.318526][ T9156] SELinux: failed to load policy [ 1427.796010][ T5928] hid-generic 0103:0004:0000.0009: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1427.874768][ T9191] fido_id[9191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1427.993507][ T9195] loop1: detected capacity change from 0 to 1024 [ 1428.478330][ T9203] loop6: detected capacity change from 0 to 128 [ 1428.491251][ T9203] EXT4-fs: test_dummy_encryption option not supported [ 1428.967889][ T9216] loop9: detected capacity change from 0 to 4096 [ 1429.035353][ T9216] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.474353][ T9226] loop4: detected capacity change from 0 to 1024 [ 1429.496765][ T9226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.613719][ T4426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.670412][ T9216] ================================================================== [ 1429.678564][ T9216] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 1429.686499][ T9216] [ 1429.688826][ T9216] write to 0xffff88814c575b14 of 4 bytes by task 9222 on cpu 1: [ 1429.696483][ T9216] xas_set_mark+0x12b/0x140 [ 1429.700997][ T9216] __folio_start_writeback+0x17b/0x370 [ 1429.706462][ T9216] ext4_bio_write_folio+0x5a6/0xa20 [ 1429.711669][ T9216] mpage_process_page_bufs+0x4a1/0x620 [ 1429.717135][ T9216] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 1429.722948][ T9216] ext4_do_writepages+0x6fe/0x2770 [ 1429.728071][ T9216] ext4_writepages+0x18f/0x320 [ 1429.732862][ T9216] do_writepages+0x1c6/0x310 [ 1429.737461][ T9216] file_write_and_wait_range+0x178/0x2f0 [ 1429.743103][ T9216] mmb_fsync_noflush+0x48/0x140 [ 1429.747953][ T9216] ext4_sync_file+0x1f1/0x6b0 [ 1429.752631][ T9216] vfs_fsync_range+0xc5/0xe0 [ 1429.757222][ T9216] ext4_buffered_write_iter+0x447/0x4c0 [ 1429.762782][ T9216] ext4_file_write_iter+0x380/0xfa0 [ 1429.767994][ T9216] iter_file_splice_write+0x6c4/0xa80 [ 1429.773386][ T9216] direct_splice_actor+0x156/0x2a0 [ 1429.778667][ T9216] splice_direct_to_actor+0x311/0x670 [ 1429.784073][ T9216] do_splice_direct+0x119/0x1a0 [ 1429.788938][ T9216] do_sendfile+0x382/0x650 [ 1429.793355][ T9216] __x64_sys_sendfile64+0x105/0x150 [ 1429.798584][ T9216] x64_sys_call+0x2dc4/0x3020 [ 1429.803268][ T9216] do_syscall_64+0x12c/0x3b0 [ 1429.807870][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.813765][ T9216] [ 1429.816088][ T9216] read to 0xffff88814c575b14 of 4 bytes by task 9216 on cpu 0: [ 1429.823631][ T9216] __writeback_single_inode+0x1f1/0x650 [ 1429.829190][ T9216] writeback_single_inode+0x16d/0x3f0 [ 1429.834572][ T9216] sync_inode_metadata+0x6e/0xa0 [ 1429.839517][ T9216] mmb_fsync_noflush+0xfa/0x140 [ 1429.844371][ T9216] ext4_sync_file+0x1f1/0x6b0 [ 1429.849046][ T9216] vfs_fsync_range+0xc5/0xe0 [ 1429.853641][ T9216] ext4_buffered_write_iter+0x447/0x4c0 [ 1429.859198][ T9216] ext4_file_write_iter+0x380/0xfa0 [ 1429.864412][ T9216] iter_file_splice_write+0x6c4/0xa80 [ 1429.869804][ T9216] direct_splice_actor+0x156/0x2a0 [ 1429.874936][ T9216] splice_direct_to_actor+0x311/0x670 [ 1429.880361][ T9216] do_splice_direct+0x119/0x1a0 [ 1429.885249][ T9216] do_sendfile+0x382/0x650 [ 1429.889664][ T9216] __x64_sys_sendfile64+0x105/0x150 [ 1429.894874][ T9216] x64_sys_call+0x2dc4/0x3020 [ 1429.899557][ T9216] do_syscall_64+0x12c/0x3b0 [ 1429.904175][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.910075][ T9216] [ 1429.912394][ T9216] value changed: 0x0a000021 -> 0x04000021 [ 1429.918108][ T9216] [ 1429.920431][ T9216] Reported by Kernel Concurrency Sanitizer on: [ 1429.926579][ T9216] CPU: 0 UID: 0 PID: 9216 Comm: syz.9.9204 Tainted: G W syzkaller #0 PREEMPT(full) [ 1429.937517][ T9216] Tainted: [W]=WARN [ 1429.941319][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1429.951460][ T9216] ================================================================== [ 1429.978994][ T9231] program syz.4.9207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1430.196819][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.