last executing test programs: 1m34.798815581s ago: executing program 4 (id=1178): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xd4ef, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 1m34.728175252s ago: executing program 4 (id=1179): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020852500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x14, 0x3, 0x0, 0x400, 0x5}, &(0x7f00000001c0)=0x5a) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r11, 0x6}, 0x8) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r12, 0x406, r9) 1m32.431752327s ago: executing program 4 (id=1186): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getrlimit(0xf, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r2) write$tun(r4, &(0x7f0000000300)={@void, @void, @mpls={[{0x1ff, 0x0, 0x1}, {0x3195}, {0x826, 0x0, 0x1}], @ipv4=@udp={{0x37, 0x4, 0x2, 0x2d, 0x1e2, 0x68, 0x0, 0x0, 0x11, 0x0, @private=0x2, @broadcast, {[@end, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0xd, [{@remote}, {@empty, 0x3}, {@empty}]}, @ssrr={0x89, 0x1b, 0xe9, [@remote, @empty, @broadcast, @private=0xa010102, @empty, @local]}, @rr={0x7, 0x23, 0x20, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @rand_addr=0x64010102, @loopback, @local]}, @lsrr={0x83, 0x1f, 0xd3, [@dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, @remote]}, @lsrr={0x83, 0x1f, 0x88, [@empty, @remote, @empty, @remote, @multicast1, @private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x0, [{@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}]}, @timestamp={0x44, 0xc, 0xc9, 0x0, 0x0, [0x9, 0x5]}, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0xd, [{@private=0xa010100}]}]}}, {0x4e23, 0x4e24, 0x106, 0x0, @opaque="f4fa9484ea162f7fb68bffdf5bb102cd8bcf3086e5c92784e84bc06faaa65ad6f19b2af61fcd1bf63c38bae675d5455eb31401927df4ad3ee27ea7a8df30a94074f6cb4a1acad2e8453976489e8aaf3edbc48b1ac5d273b44f4d268ada21157848ebf255259059bcebe912b8b160248d382d27807d1152fdf73f0a4604167b67c58ebcddae0a3348dfa8a374ccf237d449ae0a0519bf79f54c116777854fa4e973017bc638d6948176269c3ec926fb1692c03b7068265c04bc83f365e57032624a2efa67be40825631ad6966d36307acd495a1b4696023cdd8547459a7b5e32370e2b8616c5328d9cdd872b2e04c1e796fc7263e4833a6f832d7b4cf1e16"}}}}, 0x1ee) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 1m29.228185991s ago: executing program 4 (id=1193): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x9f6, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xfb, 0xa0000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000009900)={0x5, 0x80, 0x6, 0x5, 0x3, 0x3, 0x0, 0x74fb, 0x4600, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101, 0x1}, 0x42a, 0x7fff, 0x7fffffff, 0x5, 0x80, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x8) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1m27.019506134s ago: executing program 4 (id=1200): pipe2$9p(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) creat(&(0x7f00000000c0)='./file1\x00', 0x2d) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x4, 0x1, 0x2}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000200)=[{0xfff9, 0x1, 0x9, 0x4}, {0x8, 0x1, 0x18, 0xecd}, {0x617, 0x5, 0x0, 0x2}, {0x6b5f, 0x5, 0x1, 0x6}, {0x2, 0xf, 0xea, 0xa}, {0xb, 0x0, 0x3, 0x8}, {0x400, 0x0, 0x8, 0x8}, {0x7, 0x2, 0x7, 0x80}, {0x0, 0xc, 0x8}]}) membarrier(0x10, 0x0) write(0xffffffffffffffff, 0x0, 0x0) membarrier(0x8, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1fffff}, 0xffffffffffffffff, 0x0, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd0300110000000000feff60ec97000f982c0020010000000000000000000000000002ff0200000000000000000000000000013a000000fdffffff0100907809000000699951a5"], 0xfce) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) mknodat$loop(r6, &(0x7f0000000240)='./file0\x00', 0x1000, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) 1m26.026170054s ago: executing program 4 (id=1203): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x142a0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrandom(0x0, 0x0, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x2, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETSTEERINGEBPF(r3, 0x40047459, 0x0) socket(0x1e, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) 1m20.491836883s ago: executing program 0 (id=1247): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(camellia)\x00'}}}]}, 0x138}}, 0x44050) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000000)=0x10a2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8905, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m19.066868721s ago: executing program 0 (id=1253): r0 = socket$inet6(0xa, 0x2, 0x23) close(r0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x100200, 0x0, 0x0, 0x2, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}, {&(0x7f00000003c0)}, {0x0}], 0x3}, 0x4040010) 1m18.247449887s ago: executing program 0 (id=1254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m18.048219251s ago: executing program 0 (id=1256): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0300004e234e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050100000000000000000100000000000800030011"], 0x54}}, 0x20004010) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffe, 0x0, 0x100}, 0x1c) mount_setattr(r1, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r1}}, 0x20) umount2(0x0, 0xa) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4044454) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd6e2}]}, 0x3c}, 0x1, 0xba01}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x8, 0x0, 'queue1\x00', 0xee2e}) 1m16.888048134s ago: executing program 0 (id=1262): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000"], 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x244f4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x244f4, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8008, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2c0, &(0x7f0000000080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd72}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xffffffffffffffdb, 0x0, &(0x7f0000000100)="0806547ed387dbe9abc89b6f5bec", 0x0, 0x40108, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xffffffffffffffdb, 0x0, &(0x7f0000000100)="0806547ed387dbe9abc89b6f5bec", 0x0, 0x40108, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0x80, 0x0, 0x20002fa}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) socket$inet(0x2, 0x6, 0x84) (async) r4 = socket$inet(0x2, 0x6, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0) 1m16.289584235s ago: executing program 0 (id=1267): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb01ff0f005e017538e486dd"], 0xfdef) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040844) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xac, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {0x4}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x2, 0xf9, 0x8, 0x9, 0x0, 0xfffffff9, 0x10001, 0x9}}, {0x16, 0x2, [0x5, 0x4, 0x0, 0x9, 0x80, 0x8001, 0x59f, 0x2, 0xff]}}, {{0x1c, 0x1, {0xe, 0x2, 0x38, 0xea, 0x0, 0x3, 0x8001, 0x1}}, {0x6, 0x2, [0x7ff]}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000c00) 1m16.276138036s ago: executing program 32 (id=1267): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb01ff0f005e017538e486dd"], 0xfdef) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040844) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xac, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {0x4}, {0x10, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x2, 0xf9, 0x8, 0x9, 0x0, 0xfffffff9, 0x10001, 0x9}}, {0x16, 0x2, [0x5, 0x4, 0x0, 0x9, 0x80, 0x8001, 0x59f, 0x2, 0xff]}}, {{0x1c, 0x1, {0xe, 0x2, 0x38, 0xea, 0x0, 0x3, 0x8001, 0x1}}, {0x6, 0x2, [0x7ff]}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000c00) 1m11.00608214s ago: executing program 33 (id=1203): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x142a0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrandom(0x0, 0x0, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x2, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETSTEERINGEBPF(r3, 0x40047459, 0x0) socket(0x1e, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) 1m6.092114557s ago: executing program 3 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x3}}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x4, 0x1, 0x6, 0x1, 0x4, 0xfffff0b7, 0x3}}, {0xa, 0x2, [0x5, 0xfffc, 0x7]}}, {{0x1c, 0x1, {0x3, 0x7, 0x3, 0x10000, 0x0, 0x6, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x26}}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000801}, 0x2404c810) r5 = socket(0x2, 0x400000000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={@mcast1, 0x8, r8}) setsockopt(r5, 0x0, 0x82, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4890) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) symlink(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000000)='./file0\x00') lgetxattr(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000440)=@random={'btrfs.'}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a3100000000090002"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r9, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa5a, 0x2f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 1m6.091888647s ago: executing program 3 (id=1338): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) clock_getres(0x7, &(0x7f0000000080)) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket(0xa, 0x3, 0xff) 1m5.249193924s ago: executing program 3 (id=1349): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) close_range(r0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x20000000, 0xfffffff8, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x4000, 0x6, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x101042, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x100, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000) mknod$loop(0x0, 0x6000, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x40081271, 0x0) recvmmsg(r4, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/180, 0xb4}], 0x1}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000002, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1m3.973287509s ago: executing program 3 (id=1353): mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) unshare(0x28000600) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_getattr(r2, 0x0, &(0x7f0000006040), 0x27, 0x1000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9c55) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x70003, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x5452, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xaa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x45, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) 1m2.210095313s ago: executing program 3 (id=1362): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x123d, &(0x7f00000024c0)="$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") mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x191d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000000c0)=0x8253, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00), 0x0, 0x0) mremap(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 59.760168022s ago: executing program 3 (id=1369): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x11, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x11}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa330040"], 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='5\x00']) bpf$MAP_CREATE(0x0, 0x0, 0x50) 59.750515992s ago: executing program 34 (id=1369): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x11, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x11}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa330040"], 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='5\x00']) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.774769785s ago: executing program 6 (id=1852): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x101, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x40, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0xfffffffd, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r11, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r12 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xd4ef, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.738252216s ago: executing program 6 (id=1853): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x4040014) 2.701842086s ago: executing program 6 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030603000000d600000000000100000305000100070000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) 2.676209967s ago: executing program 6 (id=1858): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 2.604128498s ago: executing program 6 (id=1860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}]}, &(0x7f00000002c0)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)) r5 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xce, 0xe, 0x7ff}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(0x0, 0x1) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002100010000000000000000000220007ffe000000c969430408000100ac1414aa080006"], 0x2c}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000380)=0xb, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0102000000000000000000000000140000001100010000000000000000000000000ad33615a38ef88a50b88beececc307fc7a67b06bf307ece36eaf5f1c706369e62b421b212cc32d789c31c9977b1262463e963ce"], 0x3c}}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r7, 0x5405, &(0x7f00000011c0)) bpf$ENABLE_STATS(0x20, &(0x7f0000001180), 0x4) 2.251705596s ago: executing program 1 (id=1864): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b00000001800010000000000fedbdf25020000000001000900000000060015000400000014001680100008800c00018006"], 0xb0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x2, 0x89f, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, {0x800, 0xb1}, 0xe}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) r5 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.240695015s ago: executing program 1 (id=1865): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000200), 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x4, 0x3, {{0x12, 0x4, 0x2, 0x9, 0x48, 0x66, 0x0, 0x8, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x4f, [@private=0xa010100, @empty]}, @lsrr={0x83, 0x17, 0xcb, [@multicast2, @loopback, @multicast2, @loopback, @private=0xa010101]}, @cipso={0x86, 0xf, 0x2, [{0x1, 0x9, "bac1bef421a268"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x2f, 0x69, 0x4, 0x80000001, 0x0, @loopback, @mcast1, 0x8008, 0x8000, 0x9, 0xf261}}) 2.227688016s ago: executing program 1 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x1407, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) syz_clone3(&(0x7f0000001900)={0x40000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x40}, &(0x7f0000000800)=""/4096, 0x1000, &(0x7f0000001800)=""/156, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000240)=0x8008, 0x4) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)={0x143c, 0x1e, 0x200, 0x70bd2b, 0x0, {0xa}, [@generic="7680a8861c018ceb21c6aeb784d386949b54e91c9a008d9c7ec84070152edbc351dc85053bdae070ec641ad908eeadc3e6e1a2728420f44f0b716c4355f99e83361baa59875f5070e910242044995350cf0d6956c937f017c6ff501441fd23b04bf9a3fc9ac0b356bf2f0482e4fca9ad5603f092745f595df276a0d89c156714cb4993f07ddce4b0dad9e5cf78f266fd7e4f1a2a7321f93d31812b9c056b362652ea6099", @nested={0x1384, 0x69, 0x0, 0x1, [@generic="3dbbc2778dd20ed430b6f1b91ee951308408577d98a6f2707592333b7009d201ac6fb7b580aeac247b20e86d9b363c3ac058f76472e912044f2d69698c7bc4bf4bd057bd75bbf21f7bcbc889502dee7c4893b8f8c3717dfb26ec2a343956f2a6193d35d009439eecfc8a61404d364891126757b473e3e59ca3a1f30c49af0229bc03ce417e7d190ab7f3a5180a43bdedc1a0d25e31f295496ee2762e3c453d15919abc7d35e1074179a42eeccd96a880c436c481be13b783084a4702cb1bc6ee27c00322650ab3baaaa8b28fa4be3c66", @typed={0x8, 0xeb, 0x0, 0x0, @pid=r3}, @nested={0x8, 0x70, 0x0, 0x1, [@typed={0x4, 0x4a}]}, @nested={0x1141, 0x14, 0x0, 0x1, [@typed={0x7a, 0xe3, 0x0, 0x0, @binary="f70ff8e82579c3a0a840446b03c45aac770b030ceca42464dd2b235f9e2015404933011d6eceefaef6158a271d1746c3fb89e61c64a2a6fa0eb526c3d6c99838a1ae72d29e40fb923326b3ce11c7db1b6a390de7274131b8333aad37fcbf3472b7ff269f26b8809139d1f17572952666fa86dcb1e46f"}, @generic="2ac07680ce12660d7d54849ed831b08288b2e48867a0b52a08293f960e3d880a44205f875981b40d420af92378b5e25daa1249d30290909078ee0af3b95b4c25dcce5fcb07812c5b1ed000fe61f50d038eb0964acddfc436402822ce2293f8fc1aa7a8b0050e9a3fa88f22baa869bad207e2ebce44335f09952ec11d6f4b538503eb06ca62d786cf102b3a0e41c50a801548e4dba5592f156e850c52e9864aaaf2e4a2d7dc56be1cdcefcff7c0", @generic="1b6098a313580831d360880e9748460f307594df69eef95cae98dd1604e0b7d3328e7e18e74dd3edf287ae97c870607327092c4e057d3e5d1491aabe33f7faf808537caa2eaa1fa26bef42d1be274e39082a8dead87881029d0ea3a969a0aba0ea60917fc36cfe6297de94d2d521c3c3eadf66576b4c3c59ccfb3688451066440d1261dd05728b6c01e722036636a2a4fd7c717ac597d9fe73ee1d4739f671dec0994b94ac0ec3a6ff4cbdce950a76d1395331555d8563cd81882beeeae8821fbc1ec90ebbb8c944e85b1ec778e5d033c789156df47ee2162372211d1a80e623c11ea78d53c05b961cb9cd0017c170be6db2bfc1af4926f9dedfb428aa0d04dceb8f1d68de2b807059e6be60ccc367ece5ec267be8f27a14f9b39e51368146c5ded58482059fadeda97c13e0197228a50abf057628df36f867b52757d70ddb643881b5a35a08892a0239f588ea565798191e94c5dd2fc88d715a9e38e6494f6c514eee8973bf94e6a54308b25f906382698399322e363f9da39271c7f888f0d58ac6fbd1917933649afdb469c3f2476304428519dc2b11b22581795cd558ab153923e36b01a249bd6de301ca4cbfa49c9e361919a7131c40fa84eb95ff468dfe831edb99f512b06bf6c01f392b72f3c63f1ca5228f6fc60b4fe17e967c5b427b46105c18fd840e5a052e66da7966a6c2f120e9ae0f801c7a661db82ff624c4fe6e03fc8ca17480672200aed6bca20a1f8494402276796a29ff7ba166ca87966fced0ba6aaf47fb1043bbd10d9c89074ab0e59fe6598c6fbe18e48b54a624f33dedef9aaacf57f4a47d730811dd22b7cd48db5992f91824651ad130b561e6b773f9b1c1a81de5609beefa6935812d5880e1e62d58786d1b427f835a0d9216639511e89c817f0124312552293a3759fc17deb615004ecfd748f545bbe761beeb4fb680ecb3c4fbce7ca1675338842491b33fc70ebce383a4e7cb118c6b6af8608ffc2fb5dd86a676b31f8f57c0b7c30978ddea7547e5326c7c672c49654992b700d9a1f9aa941adbc7f371e5e5cc1eff3ff8b78b21b0d783824923759fd1ea45665c3db596bdd2271cc624eb4d3a6cf5fe51a0595912044201ef4dee98bf3ec2c73d4da2fbdb40bd52841e43194c9abb5df8e43eafe8925e1f8264d9eb8d82adc8695873f3a7b5238c78e6e5a21616e260efacb14af4f550d384329cb31ee2ffa35d664338bd7a897e4cd932fd79c9d29d5f1f2da99a98fa5a4f8c4b9fb7c8f23755666833f8265ac5bf9263747fbabc6e54165fc461b5fa8be74ca9014713be3598935a6f08d7fad981eacda53eb957056d4b46cae38c893fd63f9f3981d390e3022d50827b77694a2bd4c3ecfbcd7aca139661e313c544194591565049a798943ed9bb06c0199606791b960d5891f5bb425ebbd6d6a5cc01496ccdbb3d78333863dc238cc4fa94f1654beec15f7586e39c75565ca9d91322a1b2b9eb93c76a791c2d394f6cc27039c10f871a0bb20401e3e370326ba14b0c3403b4bf758e16016e54fc3c34f7ed644de83e525234459fe853068273c42f8aa93015dbc6db145164eb3952be745c72d332095956290283379d89bab127a489faed40fc850f38a16e1989ddf195a83d15219ae829be12a31cf54dc2bf67e473aa4ae70a9872f8a95eefc12e1c565a78fff05d8723ffe10710f12553882d3d15abb2a02e8cf62c50b62ff364af4428783a40752166da5471c93085c9ef97bae8ce85e156035f638cb3af17e1e538f7696c6fcb8ea946be764a53d90ad698628b4b3503f8cb44e1ac3c2f127fd2a5226e689ca451dfcf2c73007298061068e16003f2b659babf0583125153dd031f8c33b1f87371ae9d3f486391741f81d83fd7660a74d0acc2b3dda3dc8e044c47693f7e1ae881de74ce0eb9fa76ad13b7793687c2870f3c979aa1dc9ee9c3559ae0f6ae947e4f47bcd966f1bd454b5601754cc0c2cac99718f040d0da9864fa6f7a28a73d078c97406d3085adc9726f4fb42aa1ee0d286bd6877cfb90e8f477e3f35d598fedfe207bd2e7560f39b6246d29deab9ca37c6922a23e6e542ae2ce11ac89eeddb01af85f938b70e4d98dfcaa9e780486df2de95911aad831637def4a5c797b32f96111bfcdb8a312747997e0c3deb6157013a1687b570aa5c2e2e1d071e47619da42b122494ef782f9f50c5ce5f9ae08d626256fb22ea151f4147e79b30c35c7deb12734891819743567a34739d2c40848bd1847317e211f98353817dfb9f3fc18cc62a27ef63c5fb365aa1948b3ab4cd525f912ad32eadc873aa7a8a8df827684e785c37b361733fa939d69bd81a8677f1217b235f6932b0cb20ec73a375b47dcd57c9c1ad323410c0306467cae2c5cfc7c1bad42dc8581e9fd6a5cb30112df40605cb17670cf02125bb8a66d9d8d6f6ab4d935cd36d38f61f82b81dffc10b5f5f9a56ba5dadbf70fdb0a729ba6762eda3629300002a5fac1ca23a4e7b3999e6e09ebfcfd2e9f25f423e5d4be06c4633c92d309692ba8644190cff159c3cf139c941283708c4930f94a101fe61c9617486738dd73007eeae7a93a34d41f3923293d007ae17b5f261ae3ab38628192161de2118ac13dc831551b9f9ab0a5419096f203d7be7cd1fa296fcd9aa32aeef6f4e311434eba254fdf860acc87b050509eb4f42685ada483e297a38809abd138cf3ea78a468e886b11feb2299c6e791cd92eaf57fa9988084a8d8a4d9ea042d01889982f7abdb0b145594b7085fac914dddbf0eabcfbd7fb2efdb4e3933bc49aee7df7f653530eb8c668f6999d1b320cbfb170b39bbef419dbb8f9a1cea0bedb7e8c1195ab76b4745b094a859b42e47ebb7176976185af6e6c301ad7cf88a2a6c7dae07378f9be87196b06d9311795b1615c0ea6f1bf3ae11b65fdf8d0045f729006b6b4c1dee17313c75cbca9d4fa473140c6cc69e3e45877e353d8acd9a5195112971224b9adc2a4092e08b2ddb48c782fa1de43644f3caaedfc637966bbb2a3385b7f2ec92194dd0b403e7e1a44c938a5065a92463d1f45ebe3efc635b82677c423a65426fe9897601157943e72b0eaf67331a36002bed2b445ecfb6176c2d9f176e0d61cb8213d83a56906929d5a9d7a2b1625b61d6317f072932331469e39d7ed9e1ca6d75f36d5a65dc315b149827440732c6b86094b63d1b31a4683b21ed763a6a92fea00cbe97f34d829e79bb1fa292b69cfb7c0786250c634c79fe0fad61fb973e607986cd68dced9e268e306238c56e347fcd1e3d2127476bf8700653b91dbddc54e9cda46e7ddf4e0ba556c36725c8e9cd5f04e1e3af7622003d47e5b70c6ce0edda6229a883a8c467814223c0e9540c3dea1e689ddec0e7741f01e4c380a0aebc990cd79de5526487a5746b5bbcb0b77f91adfed2a265b15318c307183795a103024c87f20b70eff59e264773e0522b44d187c429973d927559092fb81356e6c9258d9714ff6923df10db5ddc8345da717e2900a1e4994f488913eaebd7ad14b06fcea21bdfa437382e5522efd724bc029baf7d95eaf08944e808829ff8701b4d69707fe8c6e2294625ce0cd2e5e3f3237358e56371ed41afa0024492aa3e91981fd1ac3d2d6c1fddb7cbbebc0dbb44be2369620ba20099e7d5761fe19dfa9f100c239da6bb08fa8cb46b2d6ef2d9ad1de2a54d4e7b57db3bc38e17ecc1ed2421131fa98a3d53a479ebe46f4f2d24c7e7d49d73d7258c32fed3fee02b0878efe4bf80ded630e04a428a34d2cf22ac944cde4f6ca71ae5a86bb0b5dfd697da9edea0de23ca9d4fa555d63ccf63eec5c3f68a8081c57cc91b318aaf4fb8a62bed076f122ab4a4c518db3cdbf33dac499bda93c45d6d5c85c4df09446105cf6fd7e3cf4edd0499d63d8bec13744084fc10f6a4be7cd10832ffc9afaa976d452994a59c01b0830f3ee7b453877fc5aa2e70473a84c4ceb88cf98563c4d56ae047af75374b934bf3db07175977a50604f5a067d98ee8c56f608089b1554a989dd828caa180c3c7d7d36bae7ffcba172464b30fa4c250b8e86f6125ae91e167c985c84d2aa14d408c0df654e6e330baa35ed8a0389934a5fd79cd927989566ad66b85416e920640b4c3a2c12f4637b5993ce8ad02ecb2061d9ce8ba58ededf08d0f018e1a82bdda7668f14db2741d059f81a7fdd382b1c330cf4fe2adbbe3dbd0cfb3ae58b439056e31309c73be70390ca269d725d7bff9759c3937dd119f83ee4b0624d76b6242bfc11d7a4374901dc686ef7991ce218f6a4b39564ee33bbbe6360f13333ca07851e8389deff72e77bf706e762d603b57c091a430bd834f931c80f795d4c1a9b427dc6c0a50c19168b0cac92dae37fd77d54323903b44538cb329b600367b9ab869a6a8beded43521cd49eac46a1f26aeb8612843b7028ca2973fb21c8014bb27ab01a586e3bb74d74bbcb93b961004bf2dddbd96572b85dae934e6f871d4d662120d47856e383564262b19a8aad0adb8514eab78373f37c5b0385cf4d0a0937d0f08299d25764ce0ca2a2ce43357c1292251a4c4dbda50eee2c3b2bb1d7d1cef16d5392bc70d0b10f098a7984bdc8b6e81a130049b63e988a1fc972967f4bdf0e9bfdec36cafe0c2308287d47444028d28682cce30234b37f865558047b588becf1fa11f831e471a71ba3c99a3c4f21d416d29c34d3fafc4a3ac77dd985814d01ce97cd10cb0c0ebdca85b8b6a222ef649fcbb754eb1c750d898ae986c7b3c875e12cf0fb3bf84e888c4106abea35ca2fb6960485966417a5b51ef86d62a9225ed90158bcb36c826d10786ec9144e363b49487194bc926652efb31e087395bf89a34f5070e0c318ad099acc0875aaa45d29286f8dab8c0d33c4ee5bb297e98859bbcfd2b74f1565c2a6347f1b721597bdc603dd82f06de06768267479570a85d3728b68ba80c84f43dcb63eb5452231a68e477b2b51d77e17c85da163a421d302234725f4ac32972b59aa99a1619facb9dc27a37a15a906dc132009257221e88f629b5ef424d28eab9905329130978b98e0ef24edb76fa27ea2558954decca605e7209ad71cd68bc671d739db558418a6c561149f2ac44af26e2dd32f6dc74eeb767770ee9eedf9dd7b80240568e0aa6d297691df2ef6b7b2e87d753976f2bae9b2407503f77edf0fab9c81ce7017262c781d0d30f1ac9e4b7c8ad5bbe4b090b40109ee7dadd31d72ff818d01874a1214bcdc5204b6198e4b48699d33c121303ec7b5155dd0fda9e1d27135fda402d50e6b3f0b43df193ed9bec7fc8166258f47d81f72193a3ee19c32fce0d579a2fc62ae4bf1db72dd77e3924b3d5c02ab43517a069d5fafa819e0c963e84f6d80a7e8eddbca99e7298d9ab029f7a3aa99709d3b76fafadfe3b6a97fe2633fa285b40ea9aee81c9a32c0bae6c4b70a63ff89f9ec73ab95bd687fab091bd9461d94b5c118e8695015b461aa90e36db8263493b4a4b198df9e36e7521beb7417709599d56e425a7323516d7f32d4859f5df4cc9b673a6ec3c4a09ed255b118b18997c7d1bb4e7448fef4c819d629750650be18f4c3452ed83cff6a68d0354078ddd4153080b95eda9a23e0a6fde80855b550c0f440add78efd05a11a8c4f1588698c50e7d5cc3aacc1e8a25e00cadf97a6c760af10c4fcbfaf62874f512c9111cf9d60d99049b32faba090d14f5005536b392c9fb1ffbcd29e8b8a807e5e53b307a7086d7aea9448ecbcdbddcf25157f38f6d962b8bf9219ae4cec34ce30446ab9415736a019f9ea67c04a1fcff35b", @nested={0x4, 0x59}, @nested={0x4, 0xd1}, @typed={0x8, 0x156, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x28}]}, @generic="db472cad89a513fa732411e6395925fc70cd377f45b1fd06856465b637e98dad8a8c282633661e4127df06f77d2f9daef15526911e8aba39f10f04ca8b6865dd56d8e5589c86f1d896a464ae3f2cbf8ba7f0a7fdc893005c2721ee71355fbeea6ad28c0685b4b78a9801888b7a247503", @nested={0xb8, 0x158, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x83, 0x5a, 0x0, 0x0, @binary="53b0edfc51f27444790d0a140035ea0031f0eaf3e5c71430933aa76f489ab4721f992dd257229d160b9fd43e20de559fb111dab77e39eb446ed3793419186e6ff809239a7cb2aa8743a801fce0ce0f370a1255ebaf3bea85f084e5640e5c1a8d70935bb792660bba452314633d7f83170dfb5e18d56990d0ce01099bb6dbc6"}, @typed={0x6, 0xc5, 0x0, 0x0, @str='}\x00'}]}, @typed={0x34, 0xd5, 0x0, 0x0, @binary="82ab2d97c18caba55524ac2604c42834ff87c89cecbe24a1ae05be9e3bdc8bff9246b0d6abe32b603772c5f4f69796c2"}]}]}, 0x143c}}, 0x4000004) (async) r6 = fsmount(r1, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x410200, 0x0) lseek(r7, 0x1, 0x1) getdents64(r7, 0x0, 0x22) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd76, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40015}, 0x2000c051) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x2}) 2.143966788s ago: executing program 7 (id=1867): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c1eb, 0x0, 0x0, 0x9, 0x6, 0x8001, 0xffd2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x7, 0x3, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0xd, &(0x7f0000000040)={0x14, 0x0, 0x4}) r6 = getpgrp(0x0) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 1.928099642s ago: executing program 1 (id=1870): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 1.915646022s ago: executing program 1 (id=1871): r0 = syz_mount_image$ext4(&(0x7f0000001a80)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x210040, &(0x7f0000000380)={[{@inlinecrypt}, {@dioread_lock}]}, 0xfc, 0x5c8, &(0x7f0000002780)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527000000140030003d53fe6a4edc40915724e1a6ef0813900a0001007770616e3100000005003100fc000000c518df981251f2922510745893792381c2f3ce537f574faf29378260bdda3528e0367f74fd42b151a7dfc15ba65f3f7f39ba70cf8291582aa5897c870b52c6388d42fb2cb3cb9c70e5c071b6ad11efed96fbb1df43c74120a2b431f8da20060b6ec552214b690d1a9ae63d440408756e4a3a3ef082f257b2a817b75b74c5a2970a"], 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = fsopen(&(0x7f0000000180)='cpuset\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000340)='ext4\x00', &(0x7f0000000400)='./file0\x00', r0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet(0x2, 0x2, 0x1) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$cgroup_subtree(r9, 0x0, 0x48) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x3000, 0x100000000000000d) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f72740000000500010007000000050005000a0000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000030603000000d600000000000100000305000100070000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1.679071317s ago: executing program 6 (id=1873): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x240000c4, &(0x7f0000000440)={0x11, 0xf6, r1, 0x1, 0xff, 0x6, @local}, 0x14) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000001c0)={{r3}, 0x2, &(0x7f0000000080)=[0x1ff, 0x7], 0x7, 0x1, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001400350062726964676530000000000000000000180016801400018010000600ffffff7f"], 0x54}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd603000bb00302b00fc020000000000000000000000000000fe8000000000000000000000000000aa3c0000000000000087030000000000000401ee000100c910fc"], 0x0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r8) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r11, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002000}, 0x80080) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x6, 0x0, 0xa, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES32=r7, @ANYBLOB="0c000180"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 1.346389763s ago: executing program 1 (id=1877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000032090000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000180)='trans=rdma,\x8f\x02v\x84\x9c\t\xd7Q+$\xb8M\x06G4\x00\x98\r)YX|\xab#\xb3\xe1\xa7\x7f2\x10v\x9e\x82\xab\xb5\xf1:\x00m\x9f\x88W\x1c\xb6\x01<\xb3\x9e\tAGn\x00\x00\x00\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) write$tcp_mem(r2, &(0x7f0000000380)={0x7fffffffffffffff, 0x20, 0x0, 0x20, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="0003"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) connect$x25(r5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) 1.275354675s ago: executing program 7 (id=1881): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 1.220064726s ago: executing program 7 (id=1882): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 417.759362ms ago: executing program 5 (id=1884): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getrlimit(0xf, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r2) write$tun(r4, &(0x7f0000000300)={@void, @void, @mpls={[{0x1ff, 0x0, 0x1}, {0x3195}, {0x826, 0x0, 0x1}], @ipv4=@udp={{0x31, 0x4, 0x2, 0x2d, 0x1ca, 0x68, 0x0, 0x0, 0x11, 0x0, @private=0x2, @broadcast, {[@end, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0xd, [{@remote}, {@empty, 0x3}, {@empty}]}, @ssrr={0x89, 0x1b, 0xe9, [@remote, @empty, @broadcast, @private=0xa010102, @empty, @local]}, @rr={0x7, 0x23, 0x20, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @rand_addr=0x64010102, @loopback, @local]}, @lsrr={0x83, 0x3, 0xd3}, @lsrr={0x83, 0x1f, 0x88, [@empty, @remote, @empty, @remote, @multicast1, @private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x0, [{@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}]}, @timestamp={0x44, 0x10, 0xc9, 0x0, 0x0, [0x9, 0x7, 0x5]}, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0xd, [{@private=0xa010100}]}]}}, {0x4e23, 0x4e24, 0x106, 0x0, @opaque="f4fa9484ea162f7fb68bffdf5bb102cd8bcf3086e5c92784e84bc06faaa65ad6f19b2af61fcd1bf63c38bae675d5455eb31401927df4ad3ee27ea7a8df30a94074f6cb4a1acad2e8453976489e8aaf3edbc48b1ac5d273b44f4d268ada21157848ebf255259059bcebe912b8b160248d382d27807d1152fdf73f0a4604167b67c58ebcddae0a3348dfa8a374ccf237d449ae0a0519bf79f54c116777854fa4e973017bc638d6948176269c3ec926fb1692c03b7068265c04bc83f365e57032624a2efa67be40825631ad6966d36307acd495a1b4696023cdd8547459a7b5e32370e2b8616c5328d9cdd872b2e04c1e796fc7263e4833a6f832d7b4cf1e16"}}}}, 0x1d6) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 351.780783ms ago: executing program 5 (id=1885): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) (fail_nth: 5) 339.331063ms ago: executing program 7 (id=1886): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x101, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x40, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0xfffffffd, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r13, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r14 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xd4ef, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r14, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 307.249064ms ago: executing program 5 (id=1887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0) (fail_nth: 8) 306.991144ms ago: executing program 5 (id=1888): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getrlimit(0xf, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r2) write$tun(r4, &(0x7f0000000300)={@void, @void, @mpls={[], @ipv4=@udp={{0x34, 0x4, 0x2, 0x2d, 0x1d6, 0x68, 0x0, 0x0, 0x11, 0x0, @private=0x2, @broadcast, {[@end, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0xd, [{@remote}, {@empty, 0x3}, {@empty}]}, @ssrr={0x89, 0x1b, 0xe9, [@remote, @empty, @broadcast, @private=0xa010102, @empty, @local]}, @rr={0x7, 0x1f, 0x20, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @rand_addr=0x64010102, @loopback, @local]}, @lsrr={0x83, 0x1b, 0xd3, [@dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @lsrr={0x83, 0x1f, 0x88, [@empty, @remote, @empty, @remote, @multicast1, @private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x0, [{@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}]}, @timestamp={0x44, 0x10, 0xc9, 0x0, 0x0, [0x9, 0x7, 0x5]}, @timestamp_addr={0x44, 0x4, 0xa3, 0x1, 0xd}]}}, {0x4e23, 0x4e24, 0x106, 0x0, @opaque="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"}}}}, 0x1d6) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) 306.354993ms ago: executing program 2 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x6, r0, 0x0, 0x0, 0x1000}]) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) r4 = fcntl$getown(r3, 0x9) r5 = request_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='*^*}.\x00', r2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500), 0x5, r7}, 0x38) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000300)='logon\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r5}) r8 = syz_open_procfs(r4, &(0x7f0000000000)='net/ptype\x00') close(r3) syz_emit_ethernet(0xf4, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b080045fc00e604fd000000119078ac141440ac14144a0800000000d290782c1104638e006ed1dbc054f199e4cd042a1f6bae31c3d4c65501704818a84fea0fd3314f65880f2800d99800079a791c3b885c0052fd1d19222bb61e689354b7f114d679274363c6923d47bc37f682a9fb38630871b8d4701fa306fc005002b04d7a39eace621bd74abe7b97cad13110f808d603dc2f9fd25ba6c53097e22029b3af86a48e2975057cb44f237eeab3b563fd942d09f6112cc18f02d69c93be53279c75b65e3c034f906d85decc4534c99e1ae8eaf8ff5442e791debbf1780de2f87b0bef12ba2288b848"], 0x0) pread64(r8, &(0x7f0000000100)=""/242, 0xf2, 0x4eb) 226.535066ms ago: executing program 5 (id=1890): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0xe8, 0x308, 0xe8, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6e, 0x9, 0x0, 0x0, 0x0, 0x3, 0x4002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x640, 0x3, 0xd, 0x8, 0x0, 0x200d2a, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 221.373816ms ago: executing program 7 (id=1891): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/4096, 0xbc, 0x1000, 0x0, 0x101}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x80, 0x5, 0x0, {{0x2b, 0x4, 0x0, 0x2, 0xac, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast1, {[@end, @timestamp_prespec={0x44, 0x3c, 0x9d, 0x3, 0x0, [{@empty, 0x7}, {@private=0xa010100}, {@loopback, 0x7}, {@private=0xa010102, 0x5}, {@private=0xa010101, 0x9}, {@rand_addr=0x64010100, 0x1}, {@remote, 0x6}]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x0, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010100, 0xffffffff}, {@local, 0x428a}, {@local, 0xc9b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_prespec={0x44, 0xc, 0x7f, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x4}]}, @timestamp={0x44, 0x20, 0xf0, 0x0, 0x4, [0x705b, 0x5, 0xa, 0x2, 0x46, 0x1, 0x40004000]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x224201, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r4, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x2, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r11) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002740)}], 0x1, &(0x7f0000003780)=[{0x10, 0x6, 0x8}], 0x10}, 0x8000) socket(0x10, 0x3, 0x0) 172.186856ms ago: executing program 2 (id=1892): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 171.782976ms ago: executing program 2 (id=1893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x42) 167.793397ms ago: executing program 2 (id=1894): r0 = socket(0x8000000010, 0x2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2100a, 0x0, 0x3, 0x0, &(0x7f0000006380)) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100080, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_setup(0x6802, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x100) 131.293917ms ago: executing program 2 (id=1895): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x2000000, 0x7}}], 0x18}, 0x20040050) 64.197359ms ago: executing program 2 (id=1896): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 64.029319ms ago: executing program 5 (id=1897): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x6}, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="f585fb8606bed6499332", 0xa}], 0x1) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 7 (id=1898): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000100)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33d}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000000200)="c7", 0x1) sendfile(r4, r3, 0x0, 0x7fff) sendfile(r4, r3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): cated to 1048576 [ 410.787447][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 410.901073][ T8808] loop6: detected capacity change from 0 to 8192 [ 410.913281][ T28] audit: type=1400 audit(1782798250.633:7544): avc: denied { remount } for pid=8804 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 410.923598][ T8774] EXT4-fs error (device loop1): swap_inode_boot_loader:388: inode #5: comm syz.1.1371: iget: bad extra_isize 106 (inode size 256) [ 410.935942][ T28] audit: type=1400 audit(1782798250.633:7545): avc: denied { write } for pid=8804 comm="syz.6.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 410.960550][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.972888][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.980259][ T8776] bridge_slave_0: entered allmulticast mode [ 410.986914][ T8776] bridge_slave_0: entered promiscuous mode [ 411.000214][ T8776] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.007358][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.015983][ T8776] bridge_slave_1: entered allmulticast mode [ 411.016666][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.022827][ T8776] bridge_slave_1: entered promiscuous mode [ 411.058393][ T8776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.077312][ T8776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.110439][ T8776] team0: Port device team_slave_0 added [ 411.132354][ T8776] team0: Port device team_slave_1 added [ 411.144250][ T8823] loop1: detected capacity change from 0 to 512 [ 411.157684][ T8776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.176173][ T8776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.202285][ T8776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.213057][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1380'. [ 411.223035][ T8776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.230001][ T8776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.258665][ T8776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.301392][ T8776] hsr_slave_0: entered promiscuous mode [ 411.327235][ T8776] hsr_slave_1: entered promiscuous mode [ 411.349159][ T8776] debugfs: 'hsr0' already exists in 'hsr' [ 411.354990][ T8776] Cannot create hsr debugfs directory [ 411.360092][ T8831] Set syz1 is full, maxelem 6117 reached [ 411.510262][ T8823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.537345][ T8823] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.587756][ T8776] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 411.596687][ T8776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.604605][ T8776] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 411.614630][ T8776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.622444][ T8776] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 411.643114][ T8776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.651086][ T8776] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 411.734391][ T8776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.743133][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.802138][ T8853] loop2: detected capacity change from 0 to 4096 [ 411.838798][ T8776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.857820][ T8776] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.869890][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.877001][ T5047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.888257][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.905968][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.913116][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.097199][ T8865] loop1: detected capacity change from 0 to 512 [ 412.121690][ T8865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 412.158420][ T8865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 412.175111][ T8865] System zones: 1-12 [ 412.179918][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.193977][ T8865] EXT4-fs (loop1): 1 truncate cleaned up [ 412.200196][ T8865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.216780][ T8776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.233651][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 412.384351][ T8860] EXT4-fs error (device loop1): swap_inode_boot_loader:388: inode #5: comm syz.1.1388: iget: bad extra_isize 106 (inode size 256) [ 412.400233][ T8887] loop2: detected capacity change from 0 to 256 [ 412.408031][ T8887] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.409852][ T8886] loop6: detected capacity change from 0 to 4096 [ 412.440331][ T8886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.602280][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.682616][ T8776] veth0_vlan: entered promiscuous mode [ 412.743910][ T8776] veth1_vlan: entered promiscuous mode [ 412.759302][ T8861] xt_connbytes: Forcing CT accounting to be enabled [ 412.806149][ T8776] veth0_macvtap: entered promiscuous mode [ 412.817468][ T8776] veth1_macvtap: entered promiscuous mode [ 412.837349][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.852826][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.867682][ T8795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.894860][ T8795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.909303][ T8795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.922614][ T8797] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.934861][ T8795] Bluetooth: hci0: Frame reassembly failed (-84) [ 413.276284][ T8927] TCP: TCP_TX_DELAY enabled [ 413.356924][ T8930] loop1: detected capacity change from 0 to 4096 [ 413.380217][ T8930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.632009][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.662095][ T8515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.725640][ T8934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1400'. [ 414.313926][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1405'. [ 414.467105][ T8977] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1412'. [ 414.485668][ T8980] loop6: detected capacity change from 0 to 4096 [ 414.498339][ T8980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.617275][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1416'. [ 414.805889][ T8515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.851566][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1418'. [ 414.879437][ T9000] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1418'. [ 414.973601][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 415.063438][ T9002] loop7: detected capacity change from 0 to 512 [ 415.138426][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 415.138442][ T28] audit: type=1400 audit(1782798254.803:7695): avc: denied { create } for pid=9003 comm="syz.6.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.167798][ T9002] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 415.180257][ T9002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 415.388795][ T9002] System zones: 1-12 [ 415.403829][ T9002] EXT4-fs (loop7): 1 truncate cleaned up [ 415.409873][ T9002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.521917][ T9020] sg_write: data in/out 26588/396 bytes for SCSI command 0x0-- guessing data in; [ 415.521917][ T9020] program syz.7.1419 not setting count and/or reply_len properly [ 415.522301][ T28] audit: type=1400 audit(1782798255.253:7696): avc: denied { write } for pid=9001 comm="syz.7.1419" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.721664][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.018677][ T28] audit: type=1400 audit(1782798255.693:7697): avc: denied { sys_module } for pid=9028 comm="syz.6.1427" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 416.031662][ T9036] loop1: detected capacity change from 0 to 1024 [ 416.177062][ T9036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.246151][ T9053] FAULT_INJECTION: forcing a failure. [ 416.246151][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 416.258806][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.2.1431 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 416.258847][ T9053] Tainted: [W]=WARN [ 416.258905][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.258919][ T9053] Call Trace: [ 416.258926][ T9053] [ 416.258935][ T9053] __dump_stack+0x1d/0x30 [ 416.258961][ T9053] dump_stack_lvl+0x95/0xd0 [ 416.259061][ T9053] dump_stack+0x15/0x1b [ 416.259079][ T9053] should_fail_ex+0x25e/0x270 [ 416.259105][ T9053] should_failslab+0x8c/0xb0 [ 416.259129][ T9053] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 416.259186][ T9053] ? __alloc_skb+0x2db/0x6f0 [ 416.259240][ T9053] ? __alloc_skb+0x2db/0x6f0 [ 416.259339][ T9053] __alloc_skb+0x2db/0x6f0 [ 416.259360][ T9053] ? __alloc_skb+0x205/0x6f0 [ 416.259384][ T9053] netlink_alloc_large_skb+0xbf/0xf0 [ 416.259532][ T9053] netlink_sendmsg+0x40c/0x6f0 [ 416.259691][ T9053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.259748][ T9053] ____sys_sendmsg+0x532/0x580 [ 416.259813][ T9053] ___sys_sendmsg+0x195/0x1e0 [ 416.259917][ T9053] __x64_sys_sendmsg+0xd4/0x160 [ 416.259946][ T9053] x64_sys_call+0x194c/0x3020 [ 416.259968][ T9053] do_syscall_64+0x136/0x3c0 [ 416.260008][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.260107][ T9053] RIP: 0033:0x7f55cd16ce59 [ 416.260126][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.260152][ T9053] RSP: 002b:00007f55cbbc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.260174][ T9053] RAX: ffffffffffffffda RBX: 00007f55cd3e5fa0 RCX: 00007f55cd16ce59 [ 416.260195][ T9053] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000004 [ 416.260209][ T9053] RBP: 00007f55cbbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 416.260224][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.260238][ T9053] R13: 00007f55cd3e6038 R14: 00007f55cd3e5fa0 R15: 00007ffcab8278e8 [ 416.260257][ T9053] [ 416.492730][ T9057] loop2: detected capacity change from 0 to 512 [ 416.504224][ T9057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.522783][ T28] audit: type=1400 audit(1782798256.263:7698): avc: denied { write } for pid=9056 comm="syz.2.1432" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.587913][ T28] audit: type=1400 audit(1782798256.333:7699): avc: denied { write } for pid=9034 comm="syz.1.1428" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.596505][ T9059] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.1432: bg 0: bad block bitmap checksum [ 416.609917][ T28] audit: type=1400 audit(1782798256.333:7700): avc: denied { write } for pid=9056 comm="syz.2.1432" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.931142][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.938420][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.960389][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.971343][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.982657][ T9063] tmpfs: Bad value for 'mpol' [ 416.993727][ T28] audit: type=1400 audit(1782798256.743:7701): avc: denied { ioctl } for pid=9062 comm="syz.1.1434" path="socket:[23038]" dev="sockfs" ino=23038 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 417.041080][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.057187][ T9037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.170122][ T8795] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.199181][ T28] audit: type=1400 audit(1782798256.933:7702): avc: granted { setsecparam } for pid=9074 comm="syz.6.1437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 417.301668][ T9] kernel read not supported for file /avc/cache_threshold (pid: 9 comm: kworker/0:0) [ 417.569567][ T8797] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.588587][ T8797] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.598011][ T8797] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.619586][ T9084] loop7: detected capacity change from 0 to 512 [ 417.660321][ T9084] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 417.686714][ T9088] loop1: detected capacity change from 0 to 512 [ 417.717967][ T9088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 417.738825][ T9084] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 417.751581][ T9084] System zones: 1-12 [ 417.756710][ T9084] EXT4-fs (loop7): 1 truncate cleaned up [ 417.762939][ T9084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.855643][ T28] audit: type=1400 audit(1782798257.383:7703): avc: denied { name_bind } for pid=9085 comm="syz.5.1441" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 417.857132][ T9088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 417.879719][ T28] audit: type=1400 audit(1782798257.413:7704): avc: denied { accept } for pid=9085 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.910826][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.967998][ T9088] System zones: 1-12 [ 417.979198][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1444'. [ 417.998869][ T9088] EXT4-fs (loop1): 1 truncate cleaned up [ 418.005614][ T9088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.090442][ T9100] netlink: 'syz.5.1446': attribute type 1 has an invalid length. [ 418.107133][ T9098] loop6: detected capacity change from 0 to 2048 [ 418.126922][ T9100] bond1: entered promiscuous mode [ 418.137008][ T9098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.151794][ T9100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.185116][ T9098] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.225209][ T9100] ipvlan2: entered allmulticast mode [ 418.230626][ T9100] bond1: entered allmulticast mode [ 418.234507][ T8515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.246814][ T9081] EXT4-fs error (device loop1): swap_inode_boot_loader:388: inode #5: comm syz.1.1439: iget: bad extra_isize 106 (inode size 256) [ 418.260544][ T9100] bond1: (slave bridge2): making interface the new active one [ 418.268158][ T9100] bridge2: entered promiscuous mode [ 418.274120][ T9100] bridge2: entered allmulticast mode [ 418.281274][ T9100] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 418.317059][ T9099] process '/newroot/38/file0' started with executable stack [ 418.514581][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.633032][ T9121] FAULT_INJECTION: forcing a failure. [ 418.633032][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.664939][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.1.1452 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 418.664995][ T9121] Tainted: [W]=WARN [ 418.665002][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.665015][ T9121] Call Trace: [ 418.665023][ T9121] [ 418.665033][ T9121] __dump_stack+0x1d/0x30 [ 418.665059][ T9121] dump_stack_lvl+0x95/0xd0 [ 418.665083][ T9121] dump_stack+0x15/0x1b [ 418.665105][ T9121] should_fail_ex+0x25e/0x270 [ 418.665197][ T9121] should_fail+0xb/0x20 [ 418.665267][ T9121] should_fail_usercopy+0x1a/0x20 [ 418.665297][ T9121] _copy_to_user+0x20/0xa0 [ 418.665326][ T9121] simple_read_from_buffer+0xb5/0x130 [ 418.665354][ T9121] proc_fail_nth_read+0x10e/0x150 [ 418.665404][ T9121] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.665427][ T9121] vfs_read+0x18e/0x7c0 [ 418.665459][ T9121] ? __rcu_read_unlock+0x4e/0x70 [ 418.665512][ T9121] ? __fget_files+0x184/0x1c0 [ 418.665538][ T9121] ? mutex_lock+0x57/0x90 [ 418.665571][ T9121] ksys_read+0xdc/0x1a0 [ 418.665592][ T9121] __x64_sys_read+0x40/0x50 [ 418.665613][ T9121] x64_sys_call+0x2886/0x3020 [ 418.665639][ T9121] do_syscall_64+0x136/0x3c0 [ 418.665724][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.665766][ T9121] RIP: 0033:0x7f23b111d68e [ 418.665784][ T9121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.665805][ T9121] RSP: 002b:00007f23afbaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.665828][ T9121] RAX: ffffffffffffffda RBX: 00007f23afbaf6c0 RCX: 00007f23b111d68e [ 418.665845][ T9121] RDX: 000000000000000f RSI: 00007f23afbaf0a0 RDI: 0000000000000005 [ 418.665859][ T9121] RBP: 00007f23afbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 418.665891][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.665906][ T9121] R13: 00007f23b13d6038 R14: 00007f23b13d5fa0 R15: 00007ffcc8f65b48 [ 418.665927][ T9121] [ 418.901665][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1456'. [ 418.952077][ T9119] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1450'. [ 418.966395][ T9143] loop6: detected capacity change from 0 to 2048 [ 418.974867][ T9143] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.981336][ T9143] ext4: Unknown parameter 'euid<00000000000000000000' [ 419.021355][ T9151] FAULT_INJECTION: forcing a failure. [ 419.021355][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 419.068592][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.2.1460 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 419.068631][ T9151] Tainted: [W]=WARN [ 419.068698][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.068712][ T9151] Call Trace: [ 419.068721][ T9151] [ 419.068730][ T9151] __dump_stack+0x1d/0x30 [ 419.068757][ T9151] dump_stack_lvl+0x95/0xd0 [ 419.068781][ T9151] dump_stack+0x15/0x1b [ 419.068801][ T9151] should_fail_ex+0x25e/0x270 [ 419.068903][ T9151] should_failslab+0x8c/0xb0 [ 419.068928][ T9151] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 419.068953][ T9151] ? __d_alloc+0x34/0x320 [ 419.068983][ T9151] ? __d_alloc+0x34/0x320 [ 419.069058][ T9151] __d_alloc+0x34/0x320 [ 419.069087][ T9151] d_alloc+0x2e/0x100 [ 419.069176][ T9151] lookup_one_qstr_excl+0x95/0x240 [ 419.069248][ T9151] start_dirop+0x3e/0x70 [ 419.069321][ T9151] simple_start_creating+0xa2/0xd0 [ 419.069374][ T9151] debugfs_start_creating+0xda/0x150 [ 419.069400][ T9151] __debugfs_create_file+0x70/0x2b0 [ 419.069425][ T9151] debugfs_create_file_full+0x3f/0x60 [ 419.069449][ T9151] ? __pfx_vxcan_setup+0x10/0x10 [ 419.069553][ T9151] ref_tracker_dir_debugfs+0x10e/0x220 [ 419.069591][ T9151] alloc_netdev_mqs+0x1a9/0xa90 [ 419.069656][ T9151] rtnl_create_link+0x239/0x720 [ 419.069693][ T9151] rtnl_newlink_create+0x175/0x650 [ 419.069716][ T9151] ? security_capable+0x7b/0x90 [ 419.069739][ T9151] ? netlink_ns_capable+0x86/0xa0 [ 419.069840][ T9151] rtnl_newlink+0x1181/0x1400 [ 419.069880][ T9151] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.069929][ T9151] rtnetlink_rcv_msg+0x64b/0x720 [ 419.069967][ T9151] netlink_rcv_skb+0x11e/0x220 [ 419.069987][ T9151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.070089][ T9151] rtnetlink_rcv+0x1c/0x30 [ 419.070121][ T9151] netlink_unicast+0x5a7/0x680 [ 419.070285][ T9151] netlink_sendmsg+0x5be/0x6f0 [ 419.070311][ T9151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.070334][ T9151] ____sys_sendmsg+0x532/0x580 [ 419.070367][ T9151] ___sys_sendmsg+0x195/0x1e0 [ 419.070423][ T9151] __x64_sys_sendmsg+0xd4/0x160 [ 419.070461][ T9151] x64_sys_call+0x194c/0x3020 [ 419.070487][ T9151] do_syscall_64+0x136/0x3c0 [ 419.070543][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.070567][ T9151] RIP: 0033:0x7f55cd16ce59 [ 419.070586][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.070606][ T9151] RSP: 002b:00007f55cbbc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.070630][ T9151] RAX: ffffffffffffffda RBX: 00007f55cd3e5fa0 RCX: 00007f55cd16ce59 [ 419.070710][ T9151] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 419.070726][ T9151] RBP: 00007f55cbbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 419.070741][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.070755][ T9151] R13: 00007f55cd3e6038 R14: 00007f55cd3e5fa0 R15: 00007ffcab8278e8 [ 419.070851][ T9151] [ 419.455374][ T9153] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1461'. [ 419.464813][ T9153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.536409][ T9164] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1466'. [ 419.904175][ T9176] loop6: detected capacity change from 0 to 512 [ 419.916036][ T9176] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 419.932117][ T9176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 419.943304][ T9176] System zones: 1-12 [ 419.948366][ T9176] EXT4-fs (loop6): 1 truncate cleaned up [ 419.955347][ T9176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.007198][ T5047] tipc: Subscription rejected, illegal request [ 420.032150][ T9175] EXT4-fs error (device loop6): swap_inode_boot_loader:388: inode #5: comm syz.6.1469: iget: bad extra_isize 106 (inode size 256) [ 420.056128][ T8515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.241211][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 420.241227][ T28] audit: type=1400 audit(1782798259.983:7747): avc: denied { create } for pid=9191 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 420.268282][ T28] audit: type=1400 audit(1782798259.983:7748): avc: denied { create } for pid=9191 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 420.289977][ T28] audit: type=1400 audit(1782798260.003:7749): avc: denied { create } for pid=9191 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 420.291418][ T9195] netlink: 'syz.1.1473': attribute type 21 has an invalid length. [ 420.310762][ T28] audit: type=1400 audit(1782798260.003:7750): avc: denied { setopt } for pid=9191 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 420.318567][ T9195] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1473'. [ 420.339219][ T28] audit: type=1400 audit(1782798260.033:7751): avc: denied { getopt } for pid=9194 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 420.353801][ T9195] netlink: 'syz.1.1473': attribute type 5 has an invalid length. [ 420.394266][ T9195] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1473'. [ 420.446858][ T9200] loop7: detected capacity change from 0 to 4096 [ 420.457297][ T9200] ext4: Unknown parameter 'obj_role' [ 420.477698][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 420.570940][ T9213] loop6: detected capacity change from 0 to 512 [ 420.583936][ T9213] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 420.600474][ T28] audit: type=1400 audit(1782798260.293:7752): avc: denied { ioctl } for pid=9214 comm="syz.7.1479" path="socket:[24013]" dev="sockfs" ino=24013 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.628237][ T28] audit: type=1400 audit(1782798260.353:7753): avc: denied { read } for pid=9214 comm="syz.7.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.664427][ T9213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 420.672376][ T9213] System zones: 1-12 [ 420.677374][ T9213] EXT4-fs (loop6): 1 truncate cleaned up [ 420.683837][ T9213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.700721][ T28] audit: type=1400 audit(1782798260.413:7754): avc: denied { write } for pid=9212 comm="syz.6.1478" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.745907][ T9222] loop1: detected capacity change from 0 to 512 [ 420.761466][ T9223] sg_write: data in/out 26588/400 bytes for SCSI command 0x0-- guessing data in; [ 420.761466][ T9223] program syz.6.1478 not setting count and/or reply_len properly [ 420.787148][ T9222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 420.798307][ T9223] EXT4-fs error (device loop6): swap_inode_boot_loader:388: inode #5: comm syz.6.1478: iget: bad extra_isize 106 (inode size 256) [ 420.814308][ T9222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 420.822259][ T9222] System zones: 1-12 [ 420.842419][ T9226] loop2: detected capacity change from 0 to 4096 [ 420.843193][ T9222] EXT4-fs (loop1): 1 truncate cleaned up [ 420.854914][ T9222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.868415][ T8515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.883108][ T9226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.029996][ T28] audit: type=1326 audit(1782798260.743:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9225 comm="syz.2.1482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cd16ce59 code=0x7ffc0000 [ 421.059168][ T28] audit: type=1326 audit(1782798260.743:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9225 comm="syz.2.1482" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cd16ce59 code=0x7ffc0000 [ 421.123104][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.199597][ T9233] loop6: detected capacity change from 0 to 764 [ 421.231092][ T9233] rock: directory entry would overflow storage [ 421.237503][ T9233] rock: sig=0x5245, size=8, remaining=5 [ 421.938664][ T9233] gre0 speed is unknown, defaulting to 1000 [ 421.978341][ T9233] lo speed is unknown, defaulting to 1000 [ 421.992299][ T9244] gre0 speed is unknown, defaulting to 1000 [ 422.021534][ T9233] lo speed is unknown, defaulting to 1000 [ 422.037236][ T9244] lo speed is unknown, defaulting to 1000 [ 422.070039][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.075046][ T9244] lo speed is unknown, defaulting to 1000 [ 422.265973][ T9251] loop2: detected capacity change from 0 to 512 [ 422.287527][ T9266] loop6: detected capacity change from 0 to 512 [ 422.325275][ T9269] loop7: detected capacity change from 0 to 512 [ 422.340419][ T9269] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1495'. [ 422.360588][ T9251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.373264][ T9251] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.400197][ T9266] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 422.419900][ T9266] EXT4-fs (loop6): Remounting filesystem read-only [ 422.427414][ T9266] EXT4-fs (loop6): 1 truncate cleaned up [ 422.433789][ T9266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.440150][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1496'. [ 422.446455][ T9266] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.467332][ T8794] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 422.481740][ T8794] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 422.492575][ T8794] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 422.507648][ T9266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.538093][ T8515] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.574323][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.795288][ T9296] syzkaller0: entered promiscuous mode [ 422.801202][ T9296] syzkaller0: entered allmulticast mode [ 422.897054][ T9302] sg_write: data in/out 638091228/54 bytes for SCSI command 0xf4-- guessing data in; [ 422.897054][ T9302] program syz.1.1505 not setting count and/or reply_len properly [ 422.943304][ T9304] __vm_enough_memory: pid: 9304, comm: syz.1.1506, bytes: 4503599627366400 not enough memory for the allocation [ 422.962137][ T9304] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 422.975109][ T9304] bridge2: entered promiscuous mode [ 423.066662][ T9309] loop2: detected capacity change from 0 to 512 [ 423.085709][ T9309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 423.176101][ T9314] EXT4-fs: Ignoring removed nobh option [ 423.185837][ T9309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 423.380869][ T9309] System zones: 1-12 [ 423.388099][ T9319] FAULT_INJECTION: forcing a failure. [ 423.388099][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 423.402673][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.6.1512 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 423.402706][ T9319] Tainted: [W]=WARN [ 423.402713][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.402727][ T9319] Call Trace: [ 423.402735][ T9319] [ 423.402744][ T9319] __dump_stack+0x1d/0x30 [ 423.402824][ T9319] dump_stack_lvl+0x95/0xd0 [ 423.402926][ T9319] dump_stack+0x15/0x1b [ 423.403018][ T9319] should_fail_ex+0x25e/0x270 [ 423.403048][ T9319] should_failslab+0x8c/0xb0 [ 423.403072][ T9319] __kvmalloc_node_noprof+0x15b/0x590 [ 423.403173][ T9319] ? alloc_netdev_mqs+0xa7/0xa90 [ 423.403203][ T9319] ? alloc_netdev_mqs+0xa7/0xa90 [ 423.403247][ T9319] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 423.403271][ T9319] alloc_netdev_mqs+0xa7/0xa90 [ 423.403302][ T9319] rtnl_create_link+0x239/0x720 [ 423.403333][ T9319] rtnl_newlink_create+0x175/0x650 [ 423.403412][ T9319] ? security_capable+0x7b/0x90 [ 423.403436][ T9319] ? netlink_ns_capable+0x86/0xa0 [ 423.403468][ T9319] rtnl_newlink+0x1181/0x1400 [ 423.403572][ T9319] ? should_fail_ex+0xd9/0x270 [ 423.403599][ T9319] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 423.403631][ T9319] ? __rcu_read_unlock+0x4e/0x70 [ 423.403661][ T9319] ? avc_has_perm_noaudit+0xa3/0x120 [ 423.403703][ T9319] ? cred_has_capability+0x224/0x2a0 [ 423.403746][ T9319] ? selinux_capable+0x31/0x40 [ 423.403775][ T9319] ? security_capable+0x7b/0x90 [ 423.403895][ T9319] ? ns_capable+0x80/0xb0 [ 423.404001][ T9319] ? __pfx_rtnl_newlink+0x10/0x10 [ 423.404041][ T9319] rtnetlink_rcv_msg+0x64b/0x720 [ 423.404077][ T9319] netlink_rcv_skb+0x11e/0x220 [ 423.404095][ T9319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.404184][ T9319] rtnetlink_rcv+0x1c/0x30 [ 423.404220][ T9319] netlink_unicast+0x5a7/0x680 [ 423.404250][ T9319] netlink_sendmsg+0x5be/0x6f0 [ 423.404273][ T9319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.404374][ T9319] ____sys_sendmsg+0x532/0x580 [ 423.404407][ T9319] ___sys_sendmsg+0x195/0x1e0 [ 423.404446][ T9319] __x64_sys_sendmsg+0xd4/0x160 [ 423.404525][ T9319] x64_sys_call+0x194c/0x3020 [ 423.404574][ T9319] do_syscall_64+0x136/0x3c0 [ 423.404616][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.404637][ T9319] RIP: 0033:0x7f63c786ce59 [ 423.404654][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.404766][ T9319] RSP: 002b:00007f63c62c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.404791][ T9319] RAX: ffffffffffffffda RBX: 00007f63c7ae5fa0 RCX: 00007f63c786ce59 [ 423.404809][ T9319] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 423.404825][ T9319] RBP: 00007f63c62c7090 R08: 0000000000000000 R09: 0000000000000000 [ 423.404841][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.404857][ T9319] R13: 00007f63c7ae6038 R14: 00007f63c7ae5fa0 R15: 00007ffccf483dd8 [ 423.404879][ T9319] [ 423.444566][ T9316] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 423.660711][ T9309] EXT4-fs (loop2): 1 truncate cleaned up [ 423.663480][ T9316] block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 423.666055][ T9316] EXT4-fs (loop1): Remounting filesystem read-only [ 423.666401][ T9316] EXT4-fs (loop1): 1 truncate cleaned up [ 423.666969][ T9316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.756937][ T9316] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.757124][ T8794] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 423.772548][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.793494][ T8794] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 423.819816][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.850537][ T8794] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 423.874410][ T9309] EXT4-fs error (device loop2): swap_inode_boot_loader:388: inode #5: comm syz.2.1508: iget: bad extra_isize 106 (inode size 256) [ 423.900680][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.943265][ T9334] __nla_validate_parse: 5 callbacks suppressed [ 423.943283][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1513'. [ 423.961309][ T9332] sg_write: data in/out 638091228/23 bytes for SCSI command 0xf4-- guessing data in; [ 423.961309][ T9332] program syz.1.1516 not setting count and/or reply_len properly [ 424.157892][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1519'. [ 424.228687][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1521'. [ 424.265115][ T6176] Bluetooth: hci0: unexpected event 0x02 length: 0 < 1 [ 424.281024][ T9327] loop6: p1 p3 < > [ 424.346327][ T9344] syzkaller0: entered promiscuous mode [ 424.362123][ T9344] syzkaller0: entered allmulticast mode [ 424.717622][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1528'. [ 425.039484][ T9369] set_capacity_and_notify: 3 callbacks suppressed [ 425.039518][ T9369] loop6: detected capacity change from 0 to 4096 [ 426.032832][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1531'. [ 426.044727][ T9376] vlan2: entered promiscuous mode [ 426.049820][ T9376] batadv0: entered promiscuous mode [ 426.426020][ T6176] Bluetooth: hci0: command 0x1003 tx timeout [ 426.432070][ T3584] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 426.447141][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1531'. [ 426.867911][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1531'. [ 426.874314][ T9377] vlan2: entered promiscuous mode [ 426.885226][ T9383] FAULT_INJECTION: forcing a failure. [ 426.885226][ T9383] name failslab, interval 1, probability 0, space 0, times 0 [ 426.898399][ T9383] CPU: 1 UID: 0 PID: 9383 Comm: syz.2.1532 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 426.898540][ T9383] Tainted: [W]=WARN [ 426.898606][ T9383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.898619][ T9383] Call Trace: [ 426.898626][ T9383] [ 426.898636][ T9383] __dump_stack+0x1d/0x30 [ 426.898663][ T9383] dump_stack_lvl+0x95/0xd0 [ 426.898688][ T9383] dump_stack+0x15/0x1b [ 426.898710][ T9383] should_fail_ex+0x25e/0x270 [ 426.898773][ T9383] should_failslab+0x8c/0xb0 [ 426.898793][ T9383] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 426.898814][ T9383] ? skb_clone+0x151/0x1f0 [ 426.898864][ T9383] ? skb_clone+0x151/0x1f0 [ 426.898897][ T9383] skb_clone+0x151/0x1f0 [ 426.898928][ T9383] __netlink_deliver_tap+0x2be/0x510 [ 426.898952][ T9383] netlink_unicast+0x654/0x680 [ 426.899021][ T9383] netlink_sendmsg+0x5be/0x6f0 [ 426.899045][ T9383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.899065][ T9383] ____sys_sendmsg+0x532/0x580 [ 426.899093][ T9383] ___sys_sendmsg+0x195/0x1e0 [ 426.899146][ T9383] __x64_sys_sendmsg+0xd4/0x160 [ 426.899182][ T9383] x64_sys_call+0x194c/0x3020 [ 426.899210][ T9383] do_syscall_64+0x136/0x3c0 [ 426.899306][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.899331][ T9383] RIP: 0033:0x7f55cd16ce59 [ 426.899352][ T9383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.899377][ T9383] RSP: 002b:00007f55cbbc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.899403][ T9383] RAX: ffffffffffffffda RBX: 00007f55cd3e5fa0 RCX: 00007f55cd16ce59 [ 426.899450][ T9383] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000010 [ 426.899463][ T9383] RBP: 00007f55cbbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 426.899536][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.899549][ T9383] R13: 00007f55cd3e6038 R14: 00007f55cd3e5fa0 R15: 00007ffcab8278e8 [ 426.899616][ T9383] [ 427.143813][ T9382] vlan2: entered promiscuous mode [ 427.149485][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'. [ 427.166314][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 427.166333][ T28] audit: type=1400 audit(1782803422.911:7875): avc: denied { bind } for pid=9387 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 427.241205][ T28] audit: type=1400 audit(1782803422.911:7876): avc: denied { name_bind } for pid=9387 comm="syz.5.1535" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 427.297810][ T9390] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 427.304823][ T28] audit: type=1400 audit(1782803422.911:7877): avc: denied { node_bind } for pid=9387 comm="syz.5.1535" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 427.308559][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.336057][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.356127][ T28] audit: type=1400 audit(1782803423.021:7878): avc: denied { write } for pid=9389 comm="syz.6.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.367281][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1540'. [ 427.419175][ T9406] loop6: detected capacity change from 0 to 512 [ 427.419411][ T9404] loop2: detected capacity change from 0 to 512 [ 427.476473][ T9404] EXT4-fs: Ignoring removed oldalloc option [ 427.515816][ T9404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 427.524200][ T9404] EXT4-fs (loop2): orphan cleanup on readonly fs [ 427.539071][ T9404] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 427.567770][ T9404] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 427.582096][ T9404] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.1541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 427.604264][ T9404] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 427.613425][ T9404] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1541: couldn't read orphan inode 13 (err -117) [ 427.634619][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 427.634651][ C1] EXT4-fs (loop2): last error at time 1782803423: ext4_ext_check_inode:521: inode 13 [ 427.710416][ T9404] loop2: lost filesystem error report for type 5 error -117 [ 427.711092][ T9404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.805505][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1541'. [ 427.935239][ T9404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 427.947799][ T9404] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 427.960944][ T9404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 428.008977][ T9441] loop6: detected capacity change from 0 to 512 [ 428.019347][ T9404] System zones: 0-2, 18-18, 34-34 [ 428.029315][ T9441] EXT4-fs: Ignoring removed oldalloc option [ 428.036693][ T9404] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 428.057507][ T9441] EXT4-fs: Mount option(s) incompatible with ext2 [ 428.124425][ T9441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9441 comm=syz.6.1553 [ 428.238979][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.388028][ T9441] loop6: detected capacity change from 0 to 4096 [ 428.505953][ T9463] Invalid argument reading file caps for ./file0 [ 428.546028][ T9451] syzkaller0: entered promiscuous mode [ 428.551540][ T9451] syzkaller0: entered allmulticast mode [ 428.961342][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1564'. [ 428.993878][ T9474] tmpfs: Bad value for 'nr_inodes' [ 429.000965][ T9474] team0: entered allmulticast mode [ 429.026818][ T9474] team_slave_0: entered allmulticast mode [ 429.035913][ T9474] team_slave_1: entered allmulticast mode [ 429.058503][ T9474] loop7: detected capacity change from 0 to 256 [ 429.084033][ T9474] msdos: Unknown parameter 'ds' [ 429.089580][ T9481] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1563'. [ 429.167875][ T9481] unsupported nlmsg_type 40 [ 429.182425][ T28] audit: type=1400 audit(1782806002.923:7879): avc: denied { shutdown } for pid=9482 comm="syz.6.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.313777][ T28] audit: type=1400 audit(1782806003.023:7880): avc: denied { create } for pid=9495 comm="syz.2.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 429.563743][ T28] audit: type=1400 audit(1782806003.313:7881): avc: denied { getopt } for pid=9502 comm="syz.1.1571" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.778782][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.787543][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.192667][ T28] audit: type=1400 audit(1782808581.932:7882): avc: denied { create } for pid=9514 comm="syz.6.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 430.329068][ T28] audit: type=1400 audit(1782808581.932:7883): avc: denied { create } for pid=9514 comm="syz.6.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 430.627893][ T9522] loop6: detected capacity change from 0 to 512 [ 431.526953][ T9527] syzkaller0: entered promiscuous mode [ 431.532520][ T9527] syzkaller0: entered allmulticast mode [ 432.753659][ T9535] netlink: 'syz.6.1580': attribute type 13 has an invalid length. [ 432.767201][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1580'. [ 433.031284][ T9537] 8021q: VLANs not supported on nlmon0 [ 433.230096][ T9550] loop1: detected capacity change from 0 to 512 [ 433.255810][ T9550] EXT4-fs: Ignoring removed oldalloc option [ 433.298200][ T9550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 433.306867][ T9550] EXT4-fs (loop1): orphan cleanup on readonly fs [ 433.316380][ T9550] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 433.332534][ T9550] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 433.340728][ T9550] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.1586: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 433.384112][ T9550] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 433.481998][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 433.497603][ C1] EXT4-fs (loop1): last error at time 1782811163: ext4_ext_check_inode:521: inode 13 [ 433.536409][ T9550] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1586: couldn't read orphan inode 13 (err -117) [ 433.559851][ T9550] loop1: lost filesystem error report for type 5 error -117 [ 433.560422][ T9550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.563181][ T28] audit: type=1400 audit(1782811163.301:7884): avc: granted { setsecparam } for pid=9560 comm="syz.2.1591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 433.903703][ T9] kernel read not supported for file /avc/cache_threshold (pid: 9 comm: kworker/0:0) [ 434.019342][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1586'. [ 434.216078][ T9550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.225201][ T9550] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 434.235464][ T9550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 434.554480][ T9573] loop2: detected capacity change from 0 to 512 [ 434.566357][ T9550] System zones: 0-2, 18-18, 34-34 [ 434.603410][ T9573] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.627259][ T9550] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 434.627450][ T9573] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 434.698344][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.711081][ T9579] loop7: detected capacity change from 0 to 512 [ 434.744857][ T9573] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 434.768546][ T28] audit: type=1400 audit(1782813742.492:7885): avc: denied { create } for pid=9583 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 434.791799][ T9573] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 434.817187][ T28] audit: type=1400 audit(1782813742.562:7886): avc: denied { ioctl } for pid=9583 comm="syz.1.1598" path="socket:[25024]" dev="sockfs" ino=25024 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.846502][ T9573] System zones: 0-2, 18-18, 34-35 [ 434.889733][ T9573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.903641][ T28] audit: type=1400 audit(1782813742.602:7887): avc: denied { write } for pid=9571 comm="syz.2.1594" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.929988][ T9591] loop1: detected capacity change from 0 to 512 [ 434.965475][ T9579] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 434.995347][ T9579] EXT4-fs (loop7): Remounting filesystem read-only [ 435.063681][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 435.070148][ C0] EXT4-fs (loop7): initial error at time 1782813742: ext4_mb_generate_buddy:1317 [ 435.079321][ C0] EXT4-fs (loop7): last error at time 1782813742: ext4_mb_generate_buddy:1317 [ 435.212986][ T9579] EXT4-fs (loop7): 1 truncate cleaned up [ 435.219190][ T9579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.231672][ T9579] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.256936][ T28] audit: type=1400 audit(1782813742.952:7888): avc: denied { setattr } for pid=9571 comm="syz.2.1594" path="/306/file2/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.280370][ T28] audit: type=1400 audit(1782813742.992:7889): avc: denied { write } for pid=9578 comm="syz.7.1597" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.757816][ T9601] loop6: detected capacity change from 0 to 512 [ 435.780180][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.789243][ T5051] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 435.801548][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.801843][ T5051] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 435.844047][ T5051] Quota error (device loop7): write_blk: dquota write failed [ 435.851475][ T5051] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 435.861645][ T5051] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 435.872237][ T5051] Quota error (device loop7): write_blk: dquota write failed [ 435.879657][ T5051] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 435.913328][ T9603] loop6: detected capacity change from 0 to 512 [ 435.920038][ T9603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 435.927121][ T9603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 435.937873][ T9603] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.1604: inode #1: comm syz.6.1604: iget: illegal inode # [ 435.968236][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 436.005864][ T9603] loop6: lost filesystem error report for type 5 error -117 [ 436.006474][ T9603] EXT4-fs (loop6): Remounting filesystem read-only [ 436.111011][ T9603] EXT4-fs (loop6): get orphan inode failed [ 436.117381][ T9603] EXT4-fs (loop6): mount failed [ 436.132325][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.177044][ T9616] FAULT_INJECTION: forcing a failure. [ 436.177044][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 436.189688][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.1.1607 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 436.189725][ T9616] Tainted: [W]=WARN [ 436.189734][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.189747][ T9616] Call Trace: [ 436.189757][ T9616] [ 436.189767][ T9616] __dump_stack+0x1d/0x30 [ 436.189795][ T9616] dump_stack_lvl+0x95/0xd0 [ 436.189817][ T9616] dump_stack+0x15/0x1b [ 436.189839][ T9616] should_fail_ex+0x25e/0x270 [ 436.189871][ T9616] should_failslab+0x8c/0xb0 [ 436.189896][ T9616] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 436.189918][ T9616] ? anon_vma_clone+0xc7/0x460 [ 436.189947][ T9616] ? anon_vma_clone+0xc7/0x460 [ 436.189977][ T9616] anon_vma_clone+0xc7/0x460 [ 436.190008][ T9616] __split_vma+0x2c0/0x640 [ 436.190035][ T9616] vma_modify+0xbcc/0xc80 [ 436.190061][ T9616] ? queue_pages_test_walk+0x3a9/0x3d0 [ 436.190091][ T9616] vma_modify_policy+0x177/0x1b0 [ 436.190129][ T9616] mbind_range+0x1bb/0x430 [ 436.190163][ T9616] __se_sys_mbind+0x8b5/0xdd0 [ 436.190192][ T9616] __x64_sys_mbind+0x78/0x90 [ 436.190216][ T9616] x64_sys_call+0x2b72/0x3020 [ 436.190244][ T9616] do_syscall_64+0x136/0x3c0 [ 436.190278][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.190304][ T9616] RIP: 0033:0x7f23b115ce59 [ 436.190322][ T9616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.190345][ T9616] RSP: 002b:00007f23afbaf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 436.190366][ T9616] RAX: ffffffffffffffda RBX: 00007f23b13d5fa0 RCX: 00007f23b115ce59 [ 436.190383][ T9616] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 436.190396][ T9616] RBP: 00007f23afbaf090 R08: 0000000000000007 R09: 0000000000000001 [ 436.190410][ T9616] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.190425][ T9616] R13: 00007f23b13d6038 R14: 00007f23b13d5fa0 R15: 00007ffcc8f65b48 [ 436.190443][ T9616] [ 436.479014][ T9627] loop6: detected capacity change from 0 to 1024 [ 437.265671][ T9645] loop7: detected capacity change from 0 to 512 [ 437.272754][ T9645] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 437.335512][ T9645] EXT4-fs (loop7): 1 truncate cleaned up [ 437.341810][ T9645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.711617][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.744774][ T9648] loop7: detected capacity change from 0 to 512 [ 437.841185][ T9654] bond0: (slave ip6tnl0): refused to change device type [ 437.866901][ T9656] netlink: 'syz.6.1621': attribute type 10 has an invalid length. [ 437.879860][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1619'. [ 437.894196][ T9648] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 437.917266][ T9648] EXT4-fs (loop7): 1 truncate cleaned up [ 437.923473][ T9648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.958657][ T9656] team0: Device wg2 is of different type [ 437.988887][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.131011][ T9674] loop6: detected capacity change from 0 to 512 [ 438.334743][ T9684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9684 comm=syz.5.1632 [ 438.389634][ T9684] netlink: 'syz.5.1632': attribute type 10 has an invalid length. [ 438.400529][ T9684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.427403][ T9684] team0: Port device netdevsim1 added [ 439.266307][ T9701] 9p: Bad value for 'wfdno' [ 439.670981][ T9706] loop7: detected capacity change from 0 to 256 [ 439.781475][ T9706] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 440.017000][ T9706] tipc: Started in network mode [ 440.042725][ T9706] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 440.115164][ T9706] tipc: Enabling of bearer rejected, failed to enable media [ 440.796251][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 440.796269][ T28] audit: type=1400 audit(1782813748.543:7893): avc: denied { setopt } for pid=9716 comm="syz.7.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.858407][ T9727] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1643'. [ 440.913642][ T28] audit: type=1400 audit(1782813748.603:7894): avc: denied { ioctl } for pid=9716 comm="syz.7.1643" path="socket:[25858]" dev="sockfs" ino=25858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.975992][ T28] audit: type=1400 audit(1782813748.603:7895): avc: denied { bind } for pid=9716 comm="syz.7.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 440.995691][ T28] audit: type=1400 audit(1782813748.603:7896): avc: denied { map } for pid=9716 comm="syz.7.1643" path="socket:[25857]" dev="sockfs" ino=25857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 441.019207][ T28] audit: type=1400 audit(1782813748.603:7897): avc: denied { read } for pid=9716 comm="syz.7.1643" path="socket:[25857]" dev="sockfs" ino=25857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 441.077893][ T9737] gre0 speed is unknown, defaulting to 1000 [ 441.163796][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1650'. [ 441.310445][ T9750] loop7: detected capacity change from 0 to 512 [ 441.632046][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.639662][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.650793][ T9755] team0: left allmulticast mode [ 441.655710][ T9755] team_slave_0: left allmulticast mode [ 441.661277][ T9755] team_slave_1: left allmulticast mode [ 441.699666][ T9755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.712404][ T9755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.813637][ T9737] lo speed is unknown, defaulting to 1000 [ 441.828296][ T9766] 9p: Bad value for 'wfdno' [ 441.872560][ T9761] geneve2: entered promiscuous mode [ 441.993477][ T9737] lo speed is unknown, defaulting to 1000 [ 442.398153][ T9769] loop2: detected capacity change from 0 to 764 [ 442.427165][ T9769] rock: directory entry would overflow storage [ 442.434487][ T9769] rock: sig=0x4654, size=5, remaining=4 [ 442.630524][ T8796] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.650609][ T8796] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 57750 - 0 [ 442.689693][ T8796] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.728667][ T8796] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 57750 - 0 [ 442.758095][ T8796] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.776382][ T8796] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 57750 - 0 [ 442.806186][ T8796] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.831611][ T8796] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 57750 - 0 [ 443.118799][ T9787] loop2: detected capacity change from 0 to 512 [ 443.126878][ T9787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 443.138227][ T9787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 443.174873][ T9787] System zones: 1-12 [ 443.194936][ T9783] loop7: detected capacity change from 0 to 1024 [ 443.214625][ T9783] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 443.232007][ T9787] EXT4-fs (loop2): 1 truncate cleaned up [ 443.238180][ T9787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.281184][ T9785] sg_write: data in/out 26588/428 bytes for SCSI command 0x0-- guessing data in; [ 443.281184][ T9785] program syz.2.1663 not setting count and/or reply_len properly [ 443.309430][ T28] audit: type=1400 audit(1782813751.003:7898): avc: denied { write } for pid=9784 comm="syz.2.1663" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.350566][ T9787] EXT4-fs error (device loop2): swap_inode_boot_loader:388: inode #5: comm syz.2.1663: iget: bad extra_isize 106 (inode size 256) [ 443.373728][ T9783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.399958][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.450315][ T28] audit: type=1400 audit(1782813751.183:7899): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 443.490646][ T9786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9786 comm=syz.7.1662 [ 443.736080][ T9803] bond2: entered promiscuous mode [ 443.741311][ T9803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.760384][ T9804] gre0 speed is unknown, defaulting to 1000 [ 443.849522][ T9804] lo speed is unknown, defaulting to 1000 [ 443.901943][ T9804] lo speed is unknown, defaulting to 1000 [ 444.055680][ T9819] loop2: detected capacity change from 0 to 4096 [ 444.077294][ T9819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.131494][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.186153][ T9743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.220316][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.374215][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 444.384045][ T9833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1675'. [ 444.440170][ T28] audit: type=1400 audit(1782813752.113:7900): avc: denied { lock } for pid=9836 comm="syz.5.1677" path="socket:[26094]" dev="sockfs" ino=26094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 444.484379][ T9842] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1679'. [ 444.504981][ T9842] loop2: detected capacity change from 0 to 512 [ 444.541723][ T9846] loop6: detected capacity change from 0 to 4096 [ 444.599456][ T9842] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 444.607766][ T9842] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 444.616581][ T9842] EXT4-fs (loop2): 1 truncate cleaned up [ 444.622966][ T9842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.660055][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1680'. [ 444.669145][ T28] audit: type=1400 audit(1782813752.403:7901): avc: denied { write } for pid=9841 comm="syz.2.1679" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.756127][ T28] audit: type=1400 audit(1782813752.493:7902): avc: denied { map } for pid=9853 comm="syz.6.1682" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 444.773890][ T9842] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 444.892101][ T9864] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 445.034460][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.056246][ T9882] loop6: detected capacity change from 0 to 512 [ 445.188495][ T9892] loop2: detected capacity change from 0 to 128 [ 445.206234][ T9892] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 445.215860][ T9] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 445.258939][ T3018] veth0_vlan: left promiscuous mode [ 445.266559][ T11] veth0_vlan: entered promiscuous mode [ 445.313721][ T9896] loop2: detected capacity change from 0 to 512 [ 445.384780][ T9896] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 445.410131][ T9896] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #17: comm syz.2.1691: inode has both inline data and extents flags [ 445.433573][ T9896] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 445.433818][ T9896] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1691: couldn't read orphan inode 17 (err -117) [ 445.443024][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 445.443043][ C0] EXT4-fs (loop2): initial error at time 1782813753: ext4_orphan_get:1399: inode 17 [ 445.443070][ C0] EXT4-fs (loop2): last error at time 1782813753: ext4_orphan_get:1399: inode 17 [ 445.524436][ T9896] loop2: lost filesystem error report for type 5 error -117 [ 445.525001][ T9896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.652409][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.660951][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.693414][ T9919] FAULT_INJECTION: forcing a failure. [ 445.693414][ T9919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.710674][ T9921] 9p: Bad value for 'wfdno' [ 445.717932][ T9919] CPU: 1 UID: 0 PID: 9919 Comm: syz.7.1694 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 445.717965][ T9919] Tainted: [W]=WARN [ 445.717974][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.717987][ T9919] Call Trace: [ 445.718027][ T9919] [ 445.718036][ T9919] __dump_stack+0x1d/0x30 [ 445.718062][ T9919] dump_stack_lvl+0x95/0xd0 [ 445.718085][ T9919] dump_stack+0x15/0x1b [ 445.718108][ T9919] should_fail_ex+0x25e/0x270 [ 445.718139][ T9919] should_fail+0xb/0x20 [ 445.718220][ T9919] should_fail_usercopy+0x1a/0x20 [ 445.718246][ T9919] _copy_from_iter+0x318/0xe70 [ 445.718292][ T9919] ? skb_set_owner_w+0x19b/0x200 [ 445.718322][ T9919] ? sock_alloc_send_pskb+0x469/0x500 [ 445.718407][ T9919] skb_copy_datagram_from_iter+0xad/0x480 [ 445.718483][ T9919] ? skb_put+0xa9/0xf0 [ 445.718506][ T9919] unix_stream_sendmsg+0x63a/0xbc0 [ 445.718547][ T9919] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 445.718628][ T9919] ____sys_sendmsg+0x532/0x580 [ 445.718661][ T9919] ___sys_sendmsg+0x195/0x1e0 [ 445.718701][ T9919] __x64_sys_sendmsg+0xd4/0x160 [ 445.718755][ T9919] x64_sys_call+0x194c/0x3020 [ 445.718837][ T9919] do_syscall_64+0x136/0x3c0 [ 445.718870][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.718910][ T9919] RIP: 0033:0x7f0d8948ce59 [ 445.718927][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.718950][ T9919] RSP: 002b:00007f0d87ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.719013][ T9919] RAX: ffffffffffffffda RBX: 00007f0d89705fa0 RCX: 00007f0d8948ce59 [ 445.719029][ T9919] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000007 [ 445.719046][ T9919] RBP: 00007f0d87ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 445.719062][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.719077][ T9919] R13: 00007f0d89706038 R14: 00007f0d89705fa0 R15: 00007ffd95898c38 [ 445.719113][ T9919] [ 445.735778][ T9918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.012885][ T9927] xt_l2tp: v2 doesn't support IP mode [ 446.032283][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.034492][ T9929] netlink: 'syz.5.1696': attribute type 1 has an invalid length. [ 446.068940][ T9929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.081141][ T9929] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 446.249760][ T9947] xt_l2tp: v2 doesn't support IP mode [ 448.292317][ T9963] set_capacity_and_notify: 1 callbacks suppressed [ 448.292337][ T9963] loop6: detected capacity change from 0 to 4096 [ 448.594824][ T9959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9959 comm=syz.5.1703 [ 449.312309][ T9789] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set [ 449.900609][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.958191][ T9973] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1713'. [ 449.969974][ T9973] netlink: zone id is out of range [ 449.981775][ T9973] netlink: del zone limit has 4 unknown bytes [ 450.086035][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1710'. [ 450.095035][ T9980] FAULT_INJECTION: forcing a failure. [ 450.095035][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.108086][ T9980] CPU: 1 UID: 0 PID: 9980 Comm: syz.7.1710 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 450.108123][ T9980] Tainted: [W]=WARN [ 450.108220][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.108234][ T9980] Call Trace: [ 450.108242][ T9980] [ 450.108252][ T9980] __dump_stack+0x1d/0x30 [ 450.108286][ T9980] dump_stack_lvl+0x95/0xd0 [ 450.108307][ T9980] dump_stack+0x15/0x1b [ 450.108329][ T9980] should_fail_ex+0x25e/0x270 [ 450.108372][ T9980] should_fail+0xb/0x20 [ 450.108398][ T9980] should_fail_usercopy+0x1a/0x20 [ 450.108428][ T9980] _copy_to_user+0x20/0xa0 [ 450.108450][ T9980] simple_read_from_buffer+0xb5/0x130 [ 450.108545][ T9980] proc_fail_nth_read+0x10e/0x150 [ 450.108570][ T9980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.108593][ T9980] vfs_read+0x18e/0x7c0 [ 450.108626][ T9980] ? __rcu_read_unlock+0x4e/0x70 [ 450.108663][ T9980] ? __fget_files+0x184/0x1c0 [ 450.108688][ T9980] ? mutex_lock+0x57/0x90 [ 450.108848][ T9980] ksys_read+0xdc/0x1a0 [ 450.108869][ T9980] __x64_sys_read+0x40/0x50 [ 450.108917][ T9980] x64_sys_call+0x2886/0x3020 [ 450.108943][ T9980] do_syscall_64+0x136/0x3c0 [ 450.109049][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.109075][ T9980] RIP: 0033:0x7f0d8944d68e [ 450.109155][ T9980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.109177][ T9980] RSP: 002b:00007f0d87ec5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.109202][ T9980] RAX: ffffffffffffffda RBX: 00007f0d87ec66c0 RCX: 00007f0d8944d68e [ 450.109219][ T9980] RDX: 000000000000000f RSI: 00007f0d87ec60a0 RDI: 0000000000000007 [ 450.109234][ T9980] RBP: 00007f0d87ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.109252][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.109264][ T9980] R13: 00007f0d89706128 R14: 00007f0d89706090 R15: 00007ffd95898c38 [ 450.109286][ T9980] [ 450.131819][ T9979] loop2: detected capacity change from 0 to 512 [ 450.397142][ T9993] loop6: detected capacity change from 0 to 128 [ 450.456098][ T9979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.491772][ T9996] loop7: detected capacity change from 0 to 512 [ 450.539349][ T9996] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 450.708014][T10009] loop1: detected capacity change from 0 to 4096 [ 450.714528][ T9996] EXT4-fs (loop7): 1 truncate cleaned up [ 450.714686][ T9979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 450.720766][ T9996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.749399][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 450.749415][ T28] audit: type=1400 audit(1782813758.474:7908): avc: denied { map } for pid=9995 comm="syz.7.1719" path="pipe:[21169]" dev="pipefs" ino=21169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 450.787977][ T9979] System zones: 1-12 [ 450.793071][ T9979] EXT4-fs (loop2): 1 truncate cleaned up [ 450.793492][ T28] audit: type=1400 audit(1782813758.474:7909): avc: denied { write } for pid=9995 comm="syz.7.1719" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.799682][ T9979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.834199][T10009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.089998][ T28] audit: type=1400 audit(1782813758.825:7910): avc: denied { write } for pid=9978 comm="syz.2.1711" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.161628][T10014] netlink: 'syz.5.1722': attribute type 12 has an invalid length. [ 451.169485][T10014] netlink: 'syz.5.1722': attribute type 29 has an invalid length. [ 451.177748][T10014] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1722'. [ 451.186943][T10014] netlink: 'syz.5.1722': attribute type 2 has an invalid length. [ 451.194739][T10014] netlink: 'syz.5.1722': attribute type 3 has an invalid length. [ 451.202626][T10014] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1722'. [ 451.251599][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.262193][T10017] sg_write: data in/out 26588/428 bytes for SCSI command 0x0-- guessing data in; [ 451.262193][T10017] program syz.2.1711 not setting count and/or reply_len properly [ 451.320007][T10017] EXT4-fs error (device loop2): swap_inode_boot_loader:388: inode #5: comm syz.2.1711: iget: bad extra_isize 106 (inode size 256) [ 451.379545][T10021] FAULT_INJECTION: forcing a failure. [ 451.379545][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 451.412639][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.6.1725 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 451.412764][T10021] Tainted: [W]=WARN [ 451.412785][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 451.412799][T10021] Call Trace: [ 451.412807][T10021] [ 451.412859][T10021] __dump_stack+0x1d/0x30 [ 451.412911][T10021] dump_stack_lvl+0x95/0xd0 [ 451.412935][T10021] dump_stack+0x15/0x1b [ 451.412957][T10021] should_fail_ex+0x25e/0x270 [ 451.412984][T10021] should_failslab+0x8c/0xb0 [ 451.413009][T10021] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 451.413060][T10021] ? sidtab_sid2str_get+0xa0/0x130 [ 451.413093][T10021] ? sidtab_sid2str_get+0xa0/0x130 [ 451.413148][T10021] kmemdup_noprof+0x2b/0x70 [ 451.413181][T10021] sidtab_sid2str_get+0xa0/0x130 [ 451.413282][T10021] security_sid_to_context_core+0x1eb/0x2e0 [ 451.413317][T10021] security_sid_to_context+0x27/0x40 [ 451.413382][T10021] avc_audit_post_callback+0x10f/0x520 [ 451.413407][T10021] ? audit_log_lsm_data+0xb41/0xbb0 [ 451.413466][T10021] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 451.413492][T10021] common_lsm_audit+0x1ba/0x230 [ 451.413522][T10021] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 451.413560][T10021] ? avc_denied+0xe4/0x100 [ 451.413625][T10021] slow_avc_audit+0x14c/0x190 [ 451.413650][T10021] avc_has_perm+0x144/0x190 [ 451.413701][T10021] selinux_socket_sendmsg+0x1ab/0x1e0 [ 451.413733][T10021] security_socket_sendmsg+0x44/0x80 [ 451.413784][T10021] ____sys_sendmsg+0x330/0x580 [ 451.413815][T10021] ___sys_sendmsg+0x195/0x1e0 [ 451.413929][T10021] ? terminate_walk+0x1d5/0x200 [ 451.413967][T10021] __sys_sendmmsg+0x185/0x320 [ 451.414003][T10021] __x64_sys_sendmmsg+0x57/0x70 [ 451.414081][T10021] x64_sys_call+0x27aa/0x3020 [ 451.414115][T10021] do_syscall_64+0x136/0x3c0 [ 451.414148][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.414201][T10021] RIP: 0033:0x7f63c786ce59 [ 451.414221][T10021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.414242][T10021] RSP: 002b:00007f63c62c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.414266][T10021] RAX: ffffffffffffffda RBX: 00007f63c7ae5fa0 RCX: 00007f63c786ce59 [ 451.414316][T10021] RDX: 0000000000000002 RSI: 0000200000008000 RDI: 0000000000000004 [ 451.414332][T10021] RBP: 00007f63c62c7090 R08: 0000000000000000 R09: 0000000000000000 [ 451.414348][T10021] R10: 0000000004008000 R11: 0000000000000246 R12: 0000000000000001 [ 451.414364][T10021] R13: 00007f63c7ae6038 R14: 00007f63c7ae5fa0 R15: 00007ffccf483dd8 [ 451.414385][T10021] [ 451.416128][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.456436][ T28] audit: type=1400 audit(1782813759.135:7911): avc: denied { write } for pid=10020 comm="syz.6.1725" scontext=root:sysadm_r:sysadm_t tsid=137 tclass=nfc_socket permissive=1 [ 451.636429][T10027] loop7: detected capacity change from 0 to 128 [ 451.693041][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.718182][T10030] loop1: detected capacity change from 0 to 512 [ 451.727674][T10027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 451.735828][T10027] System zones: 1-3, 19-19, 35-36 [ 451.742033][T10027] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 451.755979][T10030] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1727: dx entry: limit 1024 != root limit 124 [ 451.756317][T10027] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 451.803188][T10030] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1727: Corrupt directory, running e2fsck is recommended [ 451.816282][ T28] audit: type=1400 audit(1782813759.565:7912): avc: denied { write } for pid=10026 comm="syz.7.1731" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.840210][T10030] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 451.849134][T10030] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1727: corrupted in-inode xattr: invalid ea_ino [ 451.863039][T10030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.863367][T10030] EXT4-fs (loop1): Remounting filesystem read-only [ 451.874417][ T28] audit: type=1400 audit(1782813759.575:7913): avc: denied { execute } for pid=10026 comm="syz.7.1731" path="/60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 451.879411][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 451.930186][ C1] EXT4-fs (loop1): initial error at time 1782813759: ext4_iget_extra_inode:5180: inode 15 [ 451.940400][ C1] EXT4-fs (loop1): last error at time 1782813759: ext4_iget_extra_inode:5180: inode 15 [ 451.951777][T10039] loop2: detected capacity change from 0 to 1024 [ 451.955346][T10030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.981565][T10039] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 451.992599][T10039] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 452.002104][T10039] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1729: Failed to acquire dquot type 0 [ 452.013582][T10039] loop2: lost filesystem error report for type 5 error -5 [ 452.015999][ T8776] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.026387][ T28] audit: type=1400 audit(1782813759.775:7914): avc: denied { getopt } for pid=10043 comm="syz.6.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 452.032210][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 452.032231][ C1] EXT4-fs (loop2): initial error at time 1782813759: ext4_acquire_dquot:7041 [ 452.032259][ C1] EXT4-fs (loop2): last error at time 1782813759: ext4_acquire_dquot:7041 [ 452.035223][T10039] EXT4-fs (loop2): 1 truncate cleaned up [ 452.054600][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.063312][T10039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.121909][T10039] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 452.136525][T10039] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1729: Failed to acquire dquot type 0 [ 452.192582][T10051] loop7: detected capacity change from 0 to 1024 [ 452.199433][T10051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.206543][T10051] EXT4-fs (loop7): stripe (514) is not aligned with cluster size (16), stripe is disabled [ 452.240061][T10051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.252616][T10051] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.276479][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 452.334253][T10057] FAULT_INJECTION: forcing a failure. [ 452.334253][T10057] name failslab, interval 1, probability 0, space 0, times 0 [ 452.346927][T10057] CPU: 0 UID: 0 PID: 10057 Comm: syz.7.1737 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 452.346958][T10057] Tainted: [W]=WARN [ 452.346967][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.347035][T10057] Call Trace: [ 452.347043][T10057] [ 452.347051][T10057] __dump_stack+0x1d/0x30 [ 452.347074][T10057] dump_stack_lvl+0x95/0xd0 [ 452.347094][T10057] dump_stack+0x15/0x1b [ 452.347153][T10057] should_fail_ex+0x25e/0x270 [ 452.347183][T10057] should_failslab+0x8c/0xb0 [ 452.347209][T10057] __kmalloc_noprof+0xd4/0x4a0 [ 452.347233][T10057] ? tcf_idr_create+0x41/0x4a0 [ 452.347291][T10057] ? tcf_idr_create+0x41/0x4a0 [ 452.347313][T10057] tcf_idr_create+0x41/0x4a0 [ 452.347419][T10057] ? tcf_idr_check_alloc+0x24b/0x2e0 [ 452.347468][T10057] tcf_simp_init+0x2b2/0x490 [ 452.347505][T10057] ? __pfx_tcf_simp_init+0x10/0x10 [ 452.347569][T10057] tcf_action_init_1+0x395/0x4d0 [ 452.347654][T10057] tcf_action_init+0x29d/0x700 [ 452.347699][T10057] tc_ctl_action+0x29e/0x860 [ 452.347737][T10057] ? __pfx_tc_ctl_action+0x10/0x10 [ 452.347836][T10057] rtnetlink_rcv_msg+0x6a7/0x720 [ 452.347924][T10057] netlink_rcv_skb+0x11e/0x220 [ 452.347946][T10057] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.348008][T10057] rtnetlink_rcv+0x1c/0x30 [ 452.348041][T10057] netlink_unicast+0x5a7/0x680 [ 452.348129][T10057] netlink_sendmsg+0x5be/0x6f0 [ 452.348156][T10057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.348180][T10057] ____sys_sendmsg+0x532/0x580 [ 452.348248][T10057] ___sys_sendmsg+0x195/0x1e0 [ 452.348337][T10057] __x64_sys_sendmsg+0xd4/0x160 [ 452.348462][T10057] x64_sys_call+0x194c/0x3020 [ 452.348490][T10057] do_syscall_64+0x136/0x3c0 [ 452.348534][T10057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.348560][T10057] RIP: 0033:0x7f0d8948ce59 [ 452.348579][T10057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.348600][T10057] RSP: 002b:00007f0d87ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.348624][T10057] RAX: ffffffffffffffda RBX: 00007f0d89705fa0 RCX: 00007f0d8948ce59 [ 452.348682][T10057] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 452.348698][T10057] RBP: 00007f0d87ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.348713][T10057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.348727][T10057] R13: 00007f0d89706038 R14: 00007f0d89705fa0 R15: 00007ffd95898c38 [ 452.348747][T10057] [ 452.883662][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.175783][T10085] FAULT_INJECTION: forcing a failure. [ 453.175783][T10085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.212996][T10085] CPU: 0 UID: 0 PID: 10085 Comm: syz.2.1749 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 453.213080][T10085] Tainted: [W]=WARN [ 453.213113][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.213128][T10085] Call Trace: [ 453.213135][T10085] [ 453.213145][T10085] __dump_stack+0x1d/0x30 [ 453.213173][T10085] dump_stack_lvl+0x95/0xd0 [ 453.213303][T10085] dump_stack+0x15/0x1b [ 453.213390][T10085] should_fail_ex+0x25e/0x270 [ 453.213496][T10085] should_fail+0xb/0x20 [ 453.213519][T10085] should_fail_usercopy+0x1a/0x20 [ 453.213544][T10085] _copy_from_user+0x1c/0xb0 [ 453.213565][T10085] ___sys_sendmsg+0xc1/0x1e0 [ 453.213716][T10085] __x64_sys_sendmsg+0xd4/0x160 [ 453.213825][T10085] x64_sys_call+0x194c/0x3020 [ 453.213852][T10085] do_syscall_64+0x136/0x3c0 [ 453.213924][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.213945][T10085] RIP: 0033:0x7f55cd16ce59 [ 453.213963][T10085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.213981][T10085] RSP: 002b:00007f55cbbc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.214002][T10085] RAX: ffffffffffffffda RBX: 00007f55cd3e5fa0 RCX: 00007f55cd16ce59 [ 453.214041][T10085] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 453.214056][T10085] RBP: 00007f55cbbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 453.214121][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.214136][T10085] R13: 00007f55cd3e6038 R14: 00007f55cd3e5fa0 R15: 00007ffcab8278e8 [ 453.214225][T10085] [ 454.984247][T10089] loop7: detected capacity change from 0 to 512 [ 455.549607][T10100] xt_hashlimit: size too large, truncated to 1048576 [ 455.654601][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.663297][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.803207][T10089] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.1747: corrupted inode contents [ 455.815274][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.815587][T10089] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.1747: mark_inode_dirty error [ 455.836066][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.836587][T10089] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.1747: corrupted inode contents [ 455.857734][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.858205][T10089] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1747: mark_inode_dirty error [ 455.878791][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.879959][T10089] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.1747: corrupted inode contents [ 455.902563][ C1] EXT4-fs (loop7): error count since last fsck: 4 [ 455.902626][ C1] EXT4-fs (loop7): initial error at time 1782813763: ext4_do_update_inode:5742: inode 16 [ 455.904901][ C1] EXT4-fs (loop7): last error at time 1782813763: __ext4_ext_dirty:207: inode 16 [ 455.967074][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 455.974228][T10089] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 455.991947][T10089] loop7: lost filesystem error report for type 5 error -117 [ 455.998897][T10089] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.1747: corrupted inode contents [ 456.018180][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 456.019699][T10089] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.1747: mark_inode_dirty error [ 456.040077][T10089] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 456.040993][T10089] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 456.081704][T10089] loop7: lost filesystem error report for type 5 error -117 [ 456.084194][T10089] EXT4-fs (loop7): 1 truncate cleaned up [ 456.099025][T10089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.111956][T10089] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.522596][ T8795] __quota_error: 3 callbacks suppressed [ 456.522615][ T8795] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 456.624475][T10092] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.638601][ T8795] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:30: Failed to release dquot type 1 [ 456.672410][T10092] sch_fq: defrate 16 ignored. [ 456.701865][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.915273][T10092] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 457.045245][T10122] FAULT_INJECTION: forcing a failure. [ 457.045245][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.058771][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.1.1759 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 457.058808][T10122] Tainted: [W]=WARN [ 457.058842][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.058870][T10122] Call Trace: [ 457.058877][T10122] [ 457.058887][T10122] __dump_stack+0x1d/0x30 [ 457.058915][T10122] dump_stack_lvl+0x95/0xd0 [ 457.058941][T10122] dump_stack+0x15/0x1b [ 457.058964][T10122] should_fail_ex+0x25e/0x270 [ 457.059090][T10122] should_fail+0xb/0x20 [ 457.059162][T10122] should_fail_usercopy+0x1a/0x20 [ 457.059194][T10122] _copy_from_user+0x1c/0xb0 [ 457.059212][T10122] ___sys_sendmsg+0xc1/0x1e0 [ 457.059240][T10122] ? hrtimer_start_range_ns_common+0x585/0x860 [ 457.059333][T10122] __x64_sys_sendmsg+0xd4/0x160 [ 457.059424][T10122] x64_sys_call+0x194c/0x3020 [ 457.059447][T10122] do_syscall_64+0x136/0x3c0 [ 457.059513][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.059540][T10122] RIP: 0033:0x7f23b115ce59 [ 457.059581][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.059599][T10122] RSP: 002b:00007f23afbaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.059619][T10122] RAX: ffffffffffffffda RBX: 00007f23b13d5fa0 RCX: 00007f23b115ce59 [ 457.059633][T10122] RDX: 00000000040080d0 RSI: 0000200000000240 RDI: 0000000000000003 [ 457.059649][T10122] RBP: 00007f23afbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 457.059691][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.059770][T10122] R13: 00007f23b13d6038 R14: 00007f23b13d5fa0 R15: 00007ffcc8f65b48 [ 457.059791][T10122] [ 457.251110][T10092] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 457.369218][T10125] loop7: detected capacity change from 0 to 512 [ 457.457368][T10092] netlink: 'syz.2.1750': attribute type 13 has an invalid length. [ 457.488469][T10092] netlink: 'syz.2.1750': attribute type 17 has an invalid length. [ 457.582540][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1750'. [ 457.607908][T10128] loop1: detected capacity change from 0 to 1024 [ 457.615782][T10128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.763733][T10125] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 457.913954][T10125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 457.922198][T10125] System zones: 1-12 [ 457.958994][T10125] EXT4-fs (loop7): 1 truncate cleaned up [ 457.965123][T10125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.017861][ T28] audit: type=1400 audit(1782813765.756:7917): avc: denied { write } for pid=10123 comm="syz.7.1760" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.041488][ T3402] lo speed is unknown, defaulting to 1000 [ 458.046054][T10128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.047499][T10130] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1750'. [ 458.075349][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.082488][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.093341][ T28] audit: type=1400 audit(1782813765.786:7918): avc: denied { write } for pid=10127 comm="syz.1.1762" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.132247][ T28] audit: type=1400 audit(1782813765.786:7919): avc: denied { map } for pid=10127 comm="syz.1.1762" path="/365/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 458.161414][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.205975][ T28] audit: type=1400 audit(1782813765.946:7920): avc: denied { write } for pid=10138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.229121][ T28] audit: type=1400 audit(1782813765.966:7921): avc: denied { write } for pid=10149 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.312510][T10153] tipc: Enabling of bearer rejected, failed to enable media [ 458.349569][T10125] EXT4-fs error (device loop7): swap_inode_boot_loader:388: inode #5: comm syz.7.1760: iget: bad extra_isize 106 (inode size 256) [ 458.380733][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.420753][T10165] loop1: detected capacity change from 0 to 512 [ 458.431468][T10167] loop7: detected capacity change from 0 to 1024 [ 458.438422][T10167] EXT4-fs: Ignoring removed orlov option [ 458.445095][T10165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 458.470418][T10165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 458.478547][T10165] System zones: 1-12 [ 458.484132][T10165] EXT4-fs (loop1): 1 truncate cleaned up [ 458.490278][T10165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.526325][ T28] audit: type=1400 audit(1782813766.216:7922): avc: denied { write } for pid=10164 comm="syz.1.1767" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.533481][T10167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.563546][T10165] sg_write: data in/out 26588/428 bytes for SCSI command 0x0-- guessing data in; [ 458.563546][T10165] program syz.1.1767 not setting count and/or reply_len properly [ 458.582580][T10165] EXT4-fs error (device loop1): swap_inode_boot_loader:388: inode #5: comm syz.1.1767: iget: bad extra_isize 106 (inode size 256) [ 458.613533][ T28] audit: type=1400 audit(1782814022.348:7923): avc: denied { create } for pid=10166 comm="syz.7.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 458.637469][ T28] audit: type=1400 audit(1782814022.348:7924): avc: denied { listen } for pid=10166 comm="syz.7.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 458.657011][ T28] audit: type=1400 audit(1782814022.348:7925): avc: denied { ioctl } for pid=10166 comm="syz.7.1768" path="socket:[27655]" dev="sockfs" ino=27655 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 458.714219][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.724616][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.727683][T10175] loop2: detected capacity change from 0 to 512 [ 458.742009][T10175] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1770: inode has both inline data and extents flags [ 458.764440][T10175] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.780385][T10175] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1770: couldn't read orphan inode 15 (err -117) [ 458.801364][T10175] loop2: lost filesystem error report for type 5 error -117 [ 458.817701][T10175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.869349][T10192] FAULT_INJECTION: forcing a failure. [ 458.869349][T10192] name failslab, interval 1, probability 0, space 0, times 0 [ 458.882037][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.7.1776 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 458.882061][T10192] Tainted: [W]=WARN [ 458.882066][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.882074][T10192] Call Trace: [ 458.882099][T10192] [ 458.882105][T10192] __dump_stack+0x1d/0x30 [ 458.882123][T10192] dump_stack_lvl+0x95/0xd0 [ 458.882137][T10192] dump_stack+0x15/0x1b [ 458.882150][T10192] should_fail_ex+0x25e/0x270 [ 458.882167][T10192] should_failslab+0x8c/0xb0 [ 458.882216][T10192] __kmalloc_noprof+0xd4/0x4a0 [ 458.882231][T10192] ? sk_prot_alloc+0xa8/0x180 [ 458.882279][T10192] ? sk_prot_alloc+0xa8/0x180 [ 458.882296][T10192] ? should_fail_ex+0xd9/0x270 [ 458.882325][T10192] sk_prot_alloc+0xa8/0x180 [ 458.882401][T10192] sk_alloc+0x34/0x3e0 [ 458.882418][T10192] bpf_prog_test_run_skb+0x2d9/0x11b0 [ 458.882500][T10192] ? _parse_integer_limit+0x177/0x1a0 [ 458.882517][T10192] ? __rcu_read_unlock+0x4e/0x70 [ 458.882534][T10192] ? __fget_files+0x184/0x1c0 [ 458.882551][T10192] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 458.882567][T10192] bpf_prog_test_run+0x208/0x340 [ 458.882653][T10192] __sys_bpf+0x8da/0xc30 [ 458.882704][T10192] ? vfs_write+0x7a0/0x990 [ 458.882720][T10192] __x64_sys_bpf+0x69/0x80 [ 458.882750][T10192] x64_sys_call+0x10cb/0x3020 [ 458.882767][T10192] do_syscall_64+0x136/0x3c0 [ 458.882805][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.882827][T10192] RIP: 0033:0x7f0d8948ce59 [ 458.882877][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.882890][T10192] RSP: 002b:00007f0d87ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.882973][T10192] RAX: ffffffffffffffda RBX: 00007f0d89705fa0 RCX: 00007f0d8948ce59 [ 458.882983][T10192] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 458.882993][T10192] RBP: 00007f0d87ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.883002][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.883011][T10192] R13: 00007f0d89706038 R14: 00007f0d89705fa0 R15: 00007ffd95898c38 [ 458.883024][T10192] [ 459.247672][T10202] FAULT_INJECTION: forcing a failure. [ 459.247672][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 459.261984][T10202] CPU: 0 UID: 0 PID: 10202 Comm: syz.7.1778 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 459.262024][T10202] Tainted: [W]=WARN [ 459.262034][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 459.262061][T10202] Call Trace: [ 459.262067][T10202] [ 459.262075][T10202] __dump_stack+0x1d/0x30 [ 459.262098][T10202] dump_stack_lvl+0x95/0xd0 [ 459.262121][T10202] dump_stack+0x15/0x1b [ 459.262177][T10202] should_fail_ex+0x25e/0x270 [ 459.262206][T10202] should_failslab+0x8c/0xb0 [ 459.262231][T10202] __kvmalloc_node_noprof+0x15b/0x590 [ 459.262281][T10202] ? page_pool_create_percpu+0x213/0x680 [ 459.262313][T10202] ? page_pool_create_percpu+0x213/0x680 [ 459.262378][T10202] page_pool_create_percpu+0x213/0x680 [ 459.262405][T10202] page_pool_create+0x1a/0x30 [ 459.262429][T10202] bpf_test_run_xdp_live+0x1a5/0x1330 [ 459.262522][T10202] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 459.262552][T10202] ? __pfx_autoremove_wake_function+0x10/0x10 [ 459.262620][T10202] ? mutex_unlock+0x4e/0x90 [ 459.262643][T10202] ? 0xffffffffa02054c0 [ 459.262660][T10202] ? bpf_dispatcher_change_prog+0x7b7/0x800 [ 459.262693][T10202] ? 0xffffffffa02054c0 [ 459.262721][T10202] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 459.262760][T10202] bpf_prog_test_run_xdp+0x559/0x9e0 [ 459.262785][T10202] ? __rcu_read_unlock+0x4e/0x70 [ 459.262810][T10202] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 459.262839][T10202] bpf_prog_test_run+0x208/0x340 [ 459.262874][T10202] __sys_bpf+0x8da/0xc30 [ 459.262911][T10202] ? vfs_write+0x7a0/0x990 [ 459.262982][T10202] __x64_sys_bpf+0x69/0x80 [ 459.263011][T10202] x64_sys_call+0x10cb/0x3020 [ 459.263039][T10202] do_syscall_64+0x136/0x3c0 [ 459.263134][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.263160][T10202] RIP: 0033:0x7f0d8948ce59 [ 459.263210][T10202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.263228][T10202] RSP: 002b:00007f0d87ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.263258][T10202] RAX: ffffffffffffffda RBX: 00007f0d89705fa0 RCX: 00007f0d8948ce59 [ 459.263273][T10202] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 459.263363][T10202] RBP: 00007f0d87ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 459.263376][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.263465][T10202] R13: 00007f0d89706038 R14: 00007f0d89705fa0 R15: 00007ffd95898c38 [ 459.263483][T10202] [ 459.263604][T10202] page_pool_create_percpu() gave up with errno -12 [ 459.347676][T10109] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 459.557314][T10204] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1779'. [ 459.566386][T10204] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1779'. [ 459.579321][T10204] loop7: detected capacity change from 0 to 512 [ 459.592829][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.602851][T10204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 459.610869][T10204] System zones: 1-12 [ 459.615570][T10204] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1779: error while reading EA inode 32 err=-116 [ 459.627973][T10204] loop7: lost filesystem error report for type 5 error -117 [ 459.629685][T10204] EXT4-fs (loop7): Remounting filesystem read-only [ 459.643680][T10204] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 459.653784][T10204] EXT4-fs (loop7): 1 orphan inode deleted [ 459.660053][T10204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.683631][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.725831][T10211] loop7: detected capacity change from 0 to 128 [ 459.734829][T10211] msdos: Unknown parameter 'xh§A3ÞÕ3ò4Ù.÷Xi<2´~ñ ð|Áå05q7wÈùäN [ 462.919035][T10294] __dump_stack+0x1d/0x30 [ 462.919063][T10294] dump_stack_lvl+0x95/0xd0 [ 462.919088][T10294] dump_stack+0x15/0x1b [ 462.919110][T10294] should_fail_ex+0x25e/0x270 [ 462.919210][T10294] should_fail+0xb/0x20 [ 462.919238][T10294] should_fail_usercopy+0x1a/0x20 [ 462.919269][T10294] _copy_to_user+0x20/0xa0 [ 462.919358][T10294] rng_dev_read+0x37b/0x680 [ 462.919381][T10294] ? __pfx_rng_dev_read+0x10/0x10 [ 462.919405][T10294] vfs_readv+0x417/0x6d0 [ 462.919434][T10294] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 462.919514][T10294] __x64_sys_preadv+0xfd/0x1c0 [ 462.919645][T10294] x64_sys_call+0x2915/0x3020 [ 462.919669][T10294] do_syscall_64+0x136/0x3c0 [ 462.919741][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.919808][T10294] RIP: 0033:0x7f23b115ce59 [ 462.919828][T10294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.919850][T10294] RSP: 002b:00007f23afb8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 462.919883][T10294] RAX: ffffffffffffffda RBX: 00007f23b13d6090 RCX: 00007f23b115ce59 [ 462.919975][T10294] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 462.919989][T10294] RBP: 00007f23afb8e090 R08: 0000000000000000 R09: 0000000000000000 [ 462.920003][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.920017][T10294] R13: 00007f23b13d6128 R14: 00007f23b13d6090 R15: 00007ffcc8f65b48 [ 462.920040][T10294] [ 463.301860][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.515625][T10299] loop1: detected capacity change from 0 to 1024 [ 463.531709][T10299] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 463.562772][T10299] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 463.606155][T10299] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1808: Failed to acquire dquot type 0 [ 463.655772][T10299] loop1: lost filesystem error report for type 5 error -5 [ 463.657614][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 463.671212][ C1] EXT4-fs (loop1): initial error at time 1782814027: ext4_acquire_dquot:7041 [ 463.680065][ C1] EXT4-fs (loop1): last error at time 1782814027: ext4_acquire_dquot:7041 [ 463.691541][T10299] EXT4-fs (loop1): 1 truncate cleaned up [ 463.702999][T10299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.768388][T10307] loop6: detected capacity change from 0 to 512 [ 463.793752][T10307] EXT4-fs: Ignoring removed oldalloc option [ 463.801290][T10299] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 463.811848][T10299] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 463.821587][T10299] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1808: Failed to acquire dquot type 0 [ 463.851433][ T28] audit: type=1400 audit(1782814027.548:7944): avc: denied { write } for pid=10297 comm="syz.1.1808" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.873331][ T28] audit: type=1400 audit(1782814027.548:7945): avc: denied { write } for pid=10297 comm="syz.1.1808" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.159706][T10334] FAULT_INJECTION: forcing a failure. [ 464.159706][T10334] name failslab, interval 1, probability 0, space 0, times 0 [ 464.172343][T10334] CPU: 1 UID: 0 PID: 10334 Comm: syz.6.1818 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 464.172376][T10334] Tainted: [W]=WARN [ 464.172382][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.172394][T10334] Call Trace: [ 464.172401][T10334] [ 464.172410][T10334] __dump_stack+0x1d/0x30 [ 464.172438][T10334] dump_stack_lvl+0x95/0xd0 [ 464.172535][T10334] dump_stack+0x15/0x1b [ 464.172563][T10334] should_fail_ex+0x25e/0x270 [ 464.172588][T10334] should_failslab+0x8c/0xb0 [ 464.172612][T10334] __kvmalloc_node_noprof+0x15b/0x590 [ 464.172649][T10334] ? page_pool_create_percpu+0x213/0x680 [ 464.172678][T10334] ? page_pool_create_percpu+0x213/0x680 [ 464.172715][T10334] page_pool_create_percpu+0x213/0x680 [ 464.172763][T10334] page_pool_create+0x1a/0x30 [ 464.172790][T10334] bpf_test_run_xdp_live+0x1a5/0x1330 [ 464.172819][T10334] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 464.172848][T10334] ? __pfx_autoremove_wake_function+0x10/0x10 [ 464.172870][T10334] ? mutex_unlock+0x4e/0x90 [ 464.172977][T10334] ? 0xffffffffa02054c0 [ 464.173039][T10334] ? bpf_dispatcher_change_prog+0x7b7/0x800 [ 464.173068][T10334] ? 0xffffffffa02054c0 [ 464.173121][T10334] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 464.173155][T10334] bpf_prog_test_run_xdp+0x559/0x9e0 [ 464.173252][T10334] ? __rcu_read_unlock+0x4e/0x70 [ 464.173279][T10334] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 464.173305][T10334] bpf_prog_test_run+0x208/0x340 [ 464.173480][T10334] __sys_bpf+0x8da/0xc30 [ 464.173513][T10334] ? vfs_write+0x7a0/0x990 [ 464.173543][T10334] __x64_sys_bpf+0x69/0x80 [ 464.173590][T10334] x64_sys_call+0x10cb/0x3020 [ 464.173620][T10334] do_syscall_64+0x136/0x3c0 [ 464.173655][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.173724][T10334] RIP: 0033:0x7f63c786ce59 [ 464.173741][T10334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.173803][T10334] RSP: 002b:00007f63c62c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.173869][T10334] RAX: ffffffffffffffda RBX: 00007f63c7ae5fa0 RCX: 00007f63c786ce59 [ 464.173887][T10334] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 464.173904][T10334] RBP: 00007f63c62c7090 R08: 0000000000000000 R09: 0000000000000000 [ 464.174000][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.174016][T10334] R13: 00007f63c7ae6038 R14: 00007f63c7ae5fa0 R15: 00007ffccf483dd8 [ 464.174038][T10334] [ 464.174047][T10334] page_pool_create_percpu() gave up with errno -12 [ 464.491500][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.496364][T10340] syzkaller0: entered promiscuous mode [ 464.516981][T10340] syzkaller0: entered allmulticast mode [ 464.625576][T10349] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1823'. [ 464.721752][T10368] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1828'. [ 464.730787][ T28] audit: type=1400 audit(1782814028.468:7946): avc: denied { mount } for pid=10360 comm="syz.5.1828" name="/" dev="rpc_pipefs" ino=27131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 464.755685][T10368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.766523][T10368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.778437][T10368] bond0 (unregistering): Released all slaves [ 465.682259][T10387] loop6: detected capacity change from 0 to 512 [ 465.696419][T10388] loop2: detected capacity change from 0 to 1024 [ 465.701082][T10387] sg_write: data in/out 26588/428 bytes for SCSI command 0x0-- guessing data in; [ 465.701082][T10387] program syz.6.1835 not setting count and/or reply_len properly [ 465.758455][T10388] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 465.785399][T10388] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 465.794922][T10388] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1834: Failed to acquire dquot type 0 [ 465.806156][T10388] loop2: lost filesystem error report for type 5 error -5 [ 465.890568][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 465.899677][T10401] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1841'. [ 465.904207][ C0] EXT4-fs (loop2): initial error at time 1782814029: ext4_acquire_dquot:7041 [ 465.904238][ C0] EXT4-fs (loop2): last error at time 1782814029: ext4_acquire_dquot:7041 [ 465.913771][T10388] EXT4-fs (loop2): 1 truncate cleaned up [ 465.923098][T10401] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1841'. [ 465.931434][T10388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.954567][T10401] loop6: detected capacity change from 0 to 128 [ 466.020347][T10388] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1834: Failed to acquire dquot type 0 [ 466.056649][T10401] loop6: detected capacity change from 0 to 512 [ 466.189128][T10418] loop6: detected capacity change from 0 to 2048 [ 466.253209][T10424] FAULT_INJECTION: forcing a failure. [ 466.253209][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.266927][T10424] CPU: 1 UID: 0 PID: 10424 Comm: syz.1.1844 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 466.266985][T10424] Tainted: [W]=WARN [ 466.266993][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.267007][T10424] Call Trace: [ 466.267015][T10424] [ 466.267025][T10424] __dump_stack+0x1d/0x30 [ 466.267070][T10424] dump_stack_lvl+0x95/0xd0 [ 466.267093][T10424] dump_stack+0x15/0x1b [ 466.267113][T10424] should_fail_ex+0x25e/0x270 [ 466.267190][T10424] should_fail+0xb/0x20 [ 466.267216][T10424] should_fail_usercopy+0x1a/0x20 [ 466.267325][T10424] _copy_from_user+0x1c/0xb0 [ 466.267348][T10424] do_fcntl+0x662/0xf80 [ 466.267384][T10424] __se_sys_fcntl+0xb1/0x120 [ 466.267472][T10424] __x64_sys_fcntl+0x43/0x50 [ 466.267563][T10424] x64_sys_call+0x2844/0x3020 [ 466.267590][T10424] do_syscall_64+0x136/0x3c0 [ 466.267623][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.267701][T10424] RIP: 0033:0x7f23b115ce59 [ 466.267726][T10424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.267747][T10424] RSP: 002b:00007f23afbaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 466.267775][T10424] RAX: ffffffffffffffda RBX: 00007f23b13d5fa0 RCX: 00007f23b115ce59 [ 466.267791][T10424] RDX: 0000200000001140 RSI: 0000000000000007 RDI: 0000000000000003 [ 466.267805][T10424] RBP: 00007f23afbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 466.267819][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.267833][T10424] R13: 00007f23b13d6038 R14: 00007f23b13d5fa0 R15: 00007ffcc8f65b48 [ 466.267920][T10424] [ 466.268810][T10418] loop6: p2 < > p3 p4 [ 466.457873][T10418] loop6: p3 start 65535 is beyond EOD, truncated [ 466.466089][T10418] loop6: p4 size 8192 extends beyond EOD, truncated [ 466.504662][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.574508][T10429] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1850'. [ 467.062758][T10454] loop6: detected capacity change from 0 to 1024 [ 467.360821][T10467] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1864'. [ 467.405543][T10472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=10472 comm=syz.1.1866 [ 467.491304][T10471] gre0 speed is unknown, defaulting to 1000 [ 467.537618][T10471] lo speed is unknown, defaulting to 1000 [ 467.572813][T10471] lo speed is unknown, defaulting to 1000 [ 467.774914][T10484] loop1: detected capacity change from 0 to 1024 [ 467.793068][T10484] EXT4-fs: inline encryption not supported [ 467.818766][T10484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.010646][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.020415][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.080777][T10494] bridge0: entered allmulticast mode [ 468.086195][ T3429] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.095116][ T3429] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.104251][ T3429] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.113272][ T3429] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.169891][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1873'. [ 468.281082][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.567941][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1877'. [ 468.636437][T10522] loop2: detected capacity change from 0 to 1024 [ 468.665770][T10522] __quota_error: 6 callbacks suppressed [ 468.665788][T10522] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 468.681849][T10522] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 468.691320][T10522] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1883: Failed to acquire dquot type 0 [ 468.702533][T10522] loop2: lost filesystem error report for type 5 error -5 [ 468.703193][T10522] EXT4-fs (loop2): 1 truncate cleaned up [ 468.716522][T10522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.734043][T10522] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 468.748882][T10522] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 468.759015][ T28] audit: type=1400 audit(1782814032.478:7951): avc: denied { write } for pid=10518 comm="syz.2.1883" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.785517][T10522] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1883: Failed to acquire dquot type 0 [ 468.800861][ T28] audit: type=1400 audit(1782814032.478:7952): avc: denied { write } for pid=10518 comm="syz.2.1883" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.321476][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.346944][T10537] loop2: detected capacity change from 0 to 256 [ 469.355950][T10537] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.372652][T10537] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.472182][ T28] audit: type=1400 audit(1782814033.218:7953): avc: denied { bind } for pid=10553 comm="syz.2.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 469.515545][T10546] tipc: Enabled bearer , priority 0 [ 469.535147][T10546] syzkaller0: entered promiscuous mode [ 469.540841][T10546] syzkaller0: entered allmulticast mode [ 469.549686][T10546] tipc: Resetting bearer [ 469.556563][T10542] tipc: Resetting bearer [ 469.563079][T10542] tipc: Disabling bearer [ 469.657324][T10563] loop7: detected capacity change from 0 to 4096 [ 469.670488][T10563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.684153][ T28] audit: type=1400 audit(1782814033.428:7954): avc: denied { write } for pid=10562 comm="syz.7.1898" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.015888][T10565] ================================================================== [ 470.024029][T10565] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 470.031360][T10565] [ 470.033701][T10565] write to 0xffff8881004ba7c4 of 4 bytes by task 10563 on cpu 0: [ 470.041443][T10565] __xa_set_mark+0x172/0x1a0 [ 470.046061][T10565] __folio_mark_dirty+0x42c/0x520 [ 470.051113][T10565] mark_buffer_dirty+0x120/0x1f0 [ 470.056076][T10565] block_write_end+0x12d/0x210 [ 470.060958][T10565] ext4_write_end+0x11b/0x6f0 [ 470.065661][T10565] ext4_da_write_end+0x67/0x7b0 [ 470.070639][T10565] generic_perform_write+0x314/0x490 [ 470.075945][T10565] ext4_buffered_write_iter+0x2e2/0x480 [ 470.081515][T10565] ext4_file_write_iter+0x38e/0xef0 [ 470.086737][T10565] iter_file_splice_write+0x6a0/0xa60 [ 470.092133][T10565] direct_splice_actor+0x156/0x280 [ 470.097281][T10565] splice_direct_to_actor+0x2f9/0x680 [ 470.102677][T10565] do_splice_direct+0x119/0x1a0 [ 470.107548][T10565] do_sendfile+0x37d/0x640 [ 470.111986][T10565] __x64_sys_sendfile64+0x105/0x150 [ 470.117200][T10565] x64_sys_call+0x2dc4/0x3020 [ 470.121896][T10565] do_syscall_64+0x136/0x3c0 [ 470.126571][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.132483][T10565] [ 470.134842][T10565] read to 0xffff8881004ba7c4 of 4 bytes by task 10565 on cpu 1: [ 470.142507][T10565] xas_find_marked+0x602/0x650 [ 470.147302][T10565] filemap_get_folios_tag+0xf7/0x400 [ 470.152650][T10565] filemap_fdatawait_range+0x88/0x1e0 [ 470.158225][T10565] __writeback_single_inode+0xd6/0x660 [ 470.163707][T10565] writeback_single_inode+0x16d/0x400 [ 470.169111][T10565] sync_inode_metadata+0x6e/0xa0 [ 470.174079][T10565] mmb_fsync_noflush+0xfa/0x140 [ 470.178957][T10565] ext4_sync_file+0x1f2/0x6d0 [ 470.183676][T10565] vfs_fsync_range+0xc5/0xe0 [ 470.188317][T10565] ext4_buffered_write_iter+0x426/0x480 [ 470.193989][T10565] ext4_file_write_iter+0x38e/0xef0 [ 470.199216][T10565] iter_file_splice_write+0x6a0/0xa60 [ 470.204613][T10565] direct_splice_actor+0x156/0x280 [ 470.209753][T10565] splice_direct_to_actor+0x2f9/0x680 [ 470.215151][T10565] do_splice_direct+0x119/0x1a0 [ 470.220032][T10565] do_sendfile+0x37d/0x640 [ 470.224473][T10565] __x64_sys_sendfile64+0x105/0x150 [ 470.229688][T10565] x64_sys_call+0x2dc4/0x3020 [ 470.234387][T10565] do_syscall_64+0x136/0x3c0 [ 470.239006][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.244918][T10565] [ 470.247252][T10565] value changed: 0x00000021 -> 0x0a000021 [ 470.252996][T10565] [ 470.255337][T10565] Reported by Kernel Concurrency Sanitizer on: [ 470.261499][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.7.1898 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 470.272462][T10565] Tainted: [W]=WARN [ 470.276307][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.286377][T10565] ================================================================== [ 470.556985][ T8776] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.