last executing test programs: 13m38.581751232s ago: executing program 0 (id=271): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x6860}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18, 0xd, 0x1, {{0x8, 0x4, 0x6}, 0x8}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x10400}}, 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20040810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x6020400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x5, 0x0) 13m38.461651108s ago: executing program 0 (id=272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850040009a0000009500000000000000d7d46ae1e55f0aecd5ff369308b9069055bab832aca1adfb6efb685853a3c40b5674940631bdbef225addbcba6ae9b8fe0aaf0105c0f9f5e2e338c6edf6e1fa22628beb9ee19a44b72fa03b961bd0c537d6a58c8584bef634b8a57f669a6d1ea42f6a599639e7dc308aaee94361077eb951ba7780710cf90683aa8c322ed4a829e1b15582331ed98ff8ccd14b1168d994bbe36aed4d6f80af42baee151f944fbd05a8415b8a57587f1f301bfb9ca75adde0a766ecb4039d0346c3b9dd0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd8a59695bf9d06fec42b8760dca0a416d67a64101ec12c094a8ed", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents64(r0, &(0x7f0000000000)=""/97, 0x61) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x82, 0x3}, 'port0\x00', 0x73c3c7d3e5bbba5e, 0xc00, 0x6, 0x8c, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0x80}) 13m37.481441287s ago: executing program 0 (id=274): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0xfd, 0x7fffffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0xfffffe0a, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 13m37.264263808s ago: executing program 0 (id=276): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0x1, 0x7, 0x0, 0x1, 0xca}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@dioread_lock}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) unshare(0x22020600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000040)="e5", 0x1}], 0x3) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000100)=0x4) 13m36.841482969s ago: executing program 0 (id=281): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000a00)) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 13m35.999512531s ago: executing program 0 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000144000000051000084000000001140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xf5}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 13m35.951029933s ago: executing program 32 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000144000000051000084000000001140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xf5}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 13m9.049392s ago: executing program 4 (id=549): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x248, 0xcb2}}], 0x20, 0x4048800}, 0x4010) 13m8.610950802s ago: executing program 4 (id=551): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 13m8.367322064s ago: executing program 4 (id=555): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13m8.24855293s ago: executing program 4 (id=557): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x5, &(0x7f00000000c0)={0x1b, 0x7, 0x3}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200050d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000030000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 13m7.524257536s ago: executing program 4 (id=564): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000b000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 13m6.741456345s ago: executing program 4 (id=571): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r0, 0x180000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x3) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) 13m6.727205696s ago: executing program 33 (id=571): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r0, 0x180000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x3) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) 11m0.287249152s ago: executing program 2 (id=1238): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000010000020900020073797a30000000000500010007000000080009400000000114000880100007800a001e9e8f928a710000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 10m58.458545724s ago: executing program 2 (id=1248): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x801c0, 0x488) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x80fe, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 10m56.561450639s ago: executing program 2 (id=1255): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) 10m56.020985216s ago: executing program 2 (id=1261): setpgid(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdffffffeffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r0 = socket(0x200000000000011, 0x2, 0xffeffffd) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = epoll_create1(0x80000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x90000000}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000001c0)={0x0, @local, 0x4e20, 0x3, 'sh\x00', 0x28, 0x2ac8, 0x14}, 0x2c) getsockname$packet(r0, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@lli, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpgid(0x0, 0x0) (async) wait4(0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdffffffeffffffff, 0xffffffffffffffff, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) (async) socket(0x200000000000011, 0x2, 0xffeffffd) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) epoll_create1(0x80000) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x90000000}) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000001c0)={0x0, @local, 0x4e20, 0x3, 'sh\x00', 0x28, 0x2ac8, 0x14}, 0x2c) (async) getsockname$packet(r0, 0x0, &(0x7f0000000200)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@lli, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 10m55.878498384s ago: executing program 2 (id=1263): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x4000007}, 0x180, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) getrandom(&(0x7f0000000c00)=""/280, 0x118, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x248, 0xcb2}}], 0x20, 0x4048800}, 0x4010) 10m49.913429813s ago: executing program 2 (id=1297): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa50, 0x0, 0x101, 0x150}}) 10m49.913305013s ago: executing program 34 (id=1297): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa50, 0x0, 0x101, 0x150}}) 8m58.977048489s ago: executing program 7 (id=1828): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000010000020900020073797a30000000000500010007000000080009400000000114000880100007800a001e9e8f928a710000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x3, 0x5, 0x0, 0x0, 0x10000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m58.359642379s ago: executing program 7 (id=1830): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 8m58.046817845s ago: executing program 7 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',msize=0x000000007fffff']) 8m57.95141172s ago: executing program 7 (id=1838): socket$kcm(0x29, 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2218490, &(0x7f0000000000)={[{@orlov}, {@minixdf}, {@mblk_io_submit}]}, 0x45, 0x7f3, &(0x7f0000000300)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x109, 0x0, 0x8000}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x9) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) r4 = syz_io_uring_setup(0x398b, &(0x7f0000000000)={0x0, 0x7f36, 0x40, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd27, 0x25dfdbfb, 0x5, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x84) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000001c0)={0x79c, r3, 0x26, {0xb, 0x100004000}, 0x2}, 0x1) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000100)=0x207, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/timers\x00', 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8b, 0xffffffff, 0x40}) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f00000001c0)={'#! ', '', [{0x20, '\tB\xb7\xe3\xda\x91\x19\x94\f&8\xde\xf1\xe9\x1b\t'}]}, 0x15) 8m57.580959149s ago: executing program 7 (id=1840): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf250700", @ANYRES32, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8m56.850886935s ago: executing program 7 (id=1845): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) 8m56.822637206s ago: executing program 35 (id=1845): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) 2m6.197391928s ago: executing program 8 (id=4020): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2m5.149407171s ago: executing program 8 (id=4025): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x1048a, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c05, 0x401}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x4, 0x0) 2m4.071270685s ago: executing program 8 (id=4032): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000", @ANYRES16=0x0, @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa2, &(0x7f0000000280)=""/162, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x8, 0xf, 0xa9, 0xed, 0x0, 0xec0, 0x10000, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xffffffffffffff00, 0x7}, 0x8084, 0x8001, 0x6, 0x4, 0x2, 0x0, 0x1, 0x0, 0x40, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) clock_adjtime(0x0, &(0x7f00000002c0)={0x8000000000000000, 0x4, 0x4, 0x8, 0x1, 0x2, 0xd, 0x1, 0x8, 0x5, 0xe49e, 0xe, 0xffff, 0x4, 0x6, 0x8, 0x4, 0x8002, 0x100, 0x2, 0x3, 0xfff, 0x0, 0x818000000, 0x200000000000000, 0xbac6}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0003"], 0xffdd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',msize=0x000000007fffff']) 2m3.797411799s ago: executing program 8 (id=4035): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffe, 0x67, 0x4, 0x2002}, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/104, 0x68}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540714a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2m2.919665183s ago: executing program 8 (id=4041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001"], 0x100}}, 0xc0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800024}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x2000c000) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x682001, 0x0) fchdir(r10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x245059, 0x0) r11 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0xa) 2m2.637457817s ago: executing program 8 (id=4044): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read(r0, &(0x7f0000000240)=""/28, 0xffd2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r1, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x4, 0xb, 0x3, 0x20, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m2.637312797s ago: executing program 36 (id=4044): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read(r0, &(0x7f0000000240)=""/28, 0xffd2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r1, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x0, 0x4, 0xb, 0x3, 0x20, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.110320833s ago: executing program 6 (id=4793): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000300)="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", 0xfc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000043c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x9, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd049350725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e0407516ba", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x61, 0x2bd, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 9.939084991s ago: executing program 1 (id=4796): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x200000000000000, &(0x7f00000005c0), 0x1, 0x50c, &(0x7f0000000600)="$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") 9.561384371s ago: executing program 1 (id=4798): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94ac36bd9f000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2507000000080001005500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000008000020000000050053000100000008000500080000000a00e800ffffffffffff000008000500070000000a001800030303030303000014000400776c616e3000000000000000000000000a001800030303030303000005005300000000000400cc000500530000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x4a, &(0x7f0000000040), 0x10) personality(0xfe47fef9f5ff7379) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x190, 0x1170, 0x1398, 0x0, 0x1170, 0x190, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [0x0, 0xff000000, 0x4babcbd955ae8694], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'bridge_slave_1\x00', {}, {}, 0x18}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xfffffffe, 0x2, 0x0, 0xf}}, @common=@srh1={{0x90}, {0x84, 0x1, 0x6, 0xb, 0x3, @loopback, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x444, 0x1612}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5, 0x7}, {0x0, 0x4}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x101001, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 9.265923845s ago: executing program 1 (id=4803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) eventfd(0x80000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f0000000d40)=@caif, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/40, 0x28}, {0x0}, {&(0x7f0000000340)=""/70, 0x46}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/36, 0x24}], 0x8, &(0x7f00000006c0)=""/147, 0x93}, 0x7}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@errors_remount}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xaf6, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet6(r2, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)=""/252, 0xfc}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r1, 0x21, 0x70bd23, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4088001}, 0x4048806) 8.847610137s ago: executing program 6 (id=4809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700200005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070) 8.698195324s ago: executing program 6 (id=4811): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@i_version}, {@noblock_validity}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x611, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZp0+Z9k4qILYoBDy1I06QWq15s68EeChbsQcRDQ5PU0O0PmhRsLZiCBwUFEa8ivfgPeJfevYmg3jwLVaSioNKV2Z1NN5vddEmzu0nm84HJzvPM7D7PdyfPzjMz++wEUFjj2Z80Ym/E/bNJxGjDspGoLRzP17v3+81z2ZREpfLGb0kkeV59/SR/3J0nKpVK5bsTEY+VVpe7cP3Ghelypeb9iEOLF68cWrh+4+D8xenzs+dnL00dfvHI0cmXpo5MbUicu/PHk6def+qTD955Ye778sEkjsWZwfdmoimOjTIe43E/D7ExfyAijmYzLd6XrWYbhFBopfz/cTAinojRKFVTNaMx/3FfKwd0VaVU208DRZRo/1BQ9X5A/di+s+PgM13ulfTO3eO1A6DV8Q/Uzo3Ezuqx0a57ScORUZYbMbYB5Wdl/Htz3xfZFCvOQ/y1vHUGNqCcdpZuRcSTreJPqnUbq0aaxZ+uqEcSEZMRMZTX79VHqEPSMN+N8zBrWW/8aUQcyx+z/BPrLH+8Kd3r+AEopjvH8x35UpZ6sP/L+h71/k+06P+MtNh3rUe/93/t+3/1/f3O6jnytKkflvVZTrd+ycHmjJ8/OvlZu/Ib+3/ZlJVf7wv2wt1bEfua4v8wCzbv/2TxJy22f7bK2WOdlfHaD7+ebLes3/FXbkfsb3n886BXms2tcX3y0Nx8eXay9rdlGd98+/ZX7crvd/zZ9t/VJv6G7Z82Py97T650WMbXp29fbLds5KHxp78MJbXjzaE8593pxcWrUxFDyal8lYb8w2vXpb5O/TWy+A8827r9r/j/v7XydYbrH5kduPLmhXvtlq1n+zdcTL5f6bAO7WTxzzRv/x3x0Paf5X3aYRl/vnXt6XbL1op/+NFCAwAAAAAAgMJJq9dgk3RieT5NJyZq42Ufj11p+fLC4nNzl69dmok4UP0+5GBav9I9WksnWXoq/z5sPX24Kf18ROyJiM9Lw9X0xLnL5Zl+Bw8AAAAAAAAAAAAAAAAAAACbxO58/H/9PtV/lGrj/4GC6OYN5oDNTfuH4qq2/1W3eOr4mcAWphVDcWn/UFzaPxRXi/bvIwEKQmOH4tL+obi0fygu7R8AAAAAtqU9z9z5KYmIpZeHq1NmKD8huK4RQcCWMdjvCgB9U+p3BYC+Wb70r7MPhdNR///v/McBu18doA+SVpnVzkFl7cZ/p+UzAQAAAAAAAAAAAIAu2L+31fj/GmODYXsz7A+K6xHG//vpANji/PQ/FJdjfOBho/h3tltg/D8AAAAAAAAAAAAA9MxIdUrSiXws8Eik6cRExP8iYiwGk7n58uxkRPw/In4sDe7I0lP9rjQAAAAAAAAAAAAAAAAAAABsMwvXb1yYLpdnrzbO/LMqZ3vP1O+C2oOyXonGnPpt1dZ4ViS9f1uGI6LvG6VrMwMNOUnEUrYBNkXFri7E5qhGdaafn0oAAAAAAAAAAAAAAAAAAFBMDWOPW9v3ZY9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99+D+/92bWS5srK+hAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbzH8BAAD//5KVQNU=") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6c9c7175}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x8) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) 8.611331118s ago: executing program 3 (id=4812): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000043c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x9, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) 7.344785502s ago: executing program 9 (id=4817): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r5, 0x0, 0x53) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.262582646s ago: executing program 3 (id=4818): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r5, 0x0, 0x53) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.344420402s ago: executing program 6 (id=4819): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b00000005defd5a32e3082038f4f8b29d3e2a73325c6d167c7594978f7bc711fdf3d92c8334b2ccd243f295ed94e0ad91bd073457d43d3f0000000000000000000000000073bfe35951f2d728a1e09c8dcd13323236b0fbe7c61b1bf53cdec0961355f00ca63ff6c90da1dc9f8f594d033472cb97e3b5f3395aa0a4a82775cf8def", 0xfc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000043c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x9, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd049350725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e0407516ba", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x61, 0x2bd, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 6.343982382s ago: executing program 5 (id=4820): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_mount_image$vfat(&(0x7f00000098c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000009900)=ANY=[@ANYRES16, @ANYRES64=r3], 0x1, 0x385, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r8}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) 4.815756099s ago: executing program 1 (id=4821): unshare(0x4a000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x2000007ff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x3, 0x4) socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x400000, 0x1}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0xfffff, 0xfffffffffffffffd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000289000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/61, 0x3d, 0x1, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000240)=0x40) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="e6696c7465720000000000000000000000000000009a0000000000000000000004"], &(0x7f0000000040)=0x2c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$kcm(0x29, 0x2, 0x0) 4.483024165s ago: executing program 9 (id=4822): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 4.476756336s ago: executing program 3 (id=4823): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f0000000300)="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", 0xfc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000043c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0x9, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) 4.342120062s ago: executing program 9 (id=4824): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2d681, 0x0) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x80042000000fffe, 0x4) 4.237416378s ago: executing program 6 (id=4825): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x200200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) setpriority(0x0, r4, 0x8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000003, {}, 0xfd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) sendmsg$nl_route_sched(r5, 0x0, 0x480c5) close(r5) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/18, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) preadv(r1, 0x0, 0x0, 0x8, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3.633369668s ago: executing program 5 (id=4826): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffaf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x140}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0x28}, 0x94) 3.575868481s ago: executing program 3 (id=4827): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94ac36bd9f000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2507000000080001005500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000008000020000000050053000100000008000500080000000a00e800ffffffffffff000008000500070000000a001800030303030303000014000400776c616e3000000000000000000000000a001800030303030303000005005300000000000400cc000500530000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x4a, &(0x7f0000000040), 0x10) personality(0xfe47fef9f5ff7379) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x190, 0x1170, 0x1398, 0x0, 0x1170, 0x190, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [0x0, 0xff000000, 0x4babcbd955ae8694], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'bridge_slave_1\x00', {}, {}, 0x18}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xfffffffe, 0x2, 0x0, 0xf}}, @common=@srh1={{0x90}, {0x84, 0x1, 0x6, 0xb, 0x3, @loopback, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x444, 0x1612}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5, 0x7}, {0x0, 0x4}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3.524447933s ago: executing program 5 (id=4828): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94ac36bd9f000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2507000000080001005500000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000008000020000000050053000100000008000500080000000a00e800ffffffffffff000008000500070000000a001800030303030303000014000400776c616e3000000000000000000000000a001800030303030303000005005300000000000400cc000500530000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380100003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x4a, &(0x7f0000000040), 0x10) personality(0xfe47fef9f5ff7379) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x190, 0x1170, 0x1398, 0x0, 0x1170, 0x190, 0x1398, 0x1398, 0x280, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [0x0, 0xff000000, 0x4babcbd955ae8694], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'bridge_slave_1\x00', {}, {}, 0x18}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xfffffffe, 0x2, 0x0, 0xf}}, @common=@srh1={{0x90}, {0x84, 0x1, 0x6, 0xb, 0x3, @loopback, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x444, 0x1612}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5, 0x7}, {0x0, 0x4}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x101001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) 3.440489318s ago: executing program 9 (id=4829): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r5, 0x0, 0x53) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100800000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x80000) signalfd(r9, &(0x7f00000002c0)={[0xffffffffffffffff]}, 0x8) 3.233722978s ago: executing program 5 (id=4830): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0xff95, 0x8f, 0x0, 0x0, 0x0, 0x102}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x102}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.19280847s ago: executing program 5 (id=4831): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) sendmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="b9f2973d963c76", 0x7}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000680)="71da49b5f12ca284ec5bbd1414269c10a6e52ab6c5c8a7b9125da1654e98ed347a58769b99145f0d96decf686d2c7fa622ab4ef4e4b30d05b2e66f17dcf6e10a163af825578605478a2b144c9b3c513352388920e0bb30173cfed501e5b27726541b42267caef8cee177f0dcb62aeada01e9ca7df55e773b405e576f0e3323fe9f05241cb2d0b548df58a2345b99a72a3c8b53731bfa5d200fc04fc74befd639817f", 0xa2}], 0x3, 0x0, 0x0, 0x40041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x80, 0x0, 0x2, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2, 0xffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$XFS_IOC_ERROR_INJECTION(r7, 0x40085874, &(0x7f0000000280)={r1, 0xc}) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffff2, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "070000000080190000000000000000000800000000ff0f00", [0x3, 0x1]}}) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) fcntl$setsig(r1, 0xa, 0x12) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) dup2(r2, r8) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) socket$nl_generic(0x10, 0x3, 0x10) 3.19236353s ago: executing program 3 (id=4832): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1ff, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x40) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{0x0}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getrlimit(0x0, &(0x7f0000000140)) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0x0) getrandom(0x0, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 2.19515959s ago: executing program 6 (id=4833): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)=')]@\x00', 0xfffffffffffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r1, r2, 0x5, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003ac0)={'ip6_vti0\x00', &(0x7f0000003a40)={'ip6gre0\x00', 0x0, 0x29, 0x73, 0x2, 0x6, 0x9, @private2, @remote, 0x40, 0x40, 0xa, 0x8}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r9 = syz_open_dev$loop(&(0x7f0000000300), 0x4, 0x1e5c01) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, 0x0) 1.902630765s ago: executing program 9 (id=4834): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x3, &(0x7f00000000c0)=0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007911b80000000000c6000000000000009500000000000000b231d1e7b5ea1823bdf0384f714aa4e2c5c15c529a1bb089e6b8c4afeb1ff5a9b166783fa5255b7cc8637f24a100000cc7bf26d68076428d9c47d34e8a6a2ac8b469314987f7d79e887e556a78ce9e062cfe775d3fa44d7b2ed27b189ae2239133361a5df6e3ab1d003ade9fa7235decf5e679af7a9ad9e83b7d9d39b94c901776eaa184b5c5770ba65c704827605bffee40168662893c851b4a7c06b2fef7b3e4ecf3864f7b12cc463ba00f6b656cdbc98af4d2291b3ce53008b0c5e1f0531f983745568174e1d040d11219b390ed7e48ff63867e49a720b2f84d5cad575246949ab2f7db4361fc3ff2660235c3eb39f451486de6165fe940364bb52961262b834510826e346ae3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/76, 0x4c}, 0x7b}], 0x1, 0x20003, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000240)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/39, 0x27}], 0x5}, 0x3}], 0x1, 0x40022062, &(0x7f0000001900)={r6, r7+10000000}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180), 0x4) 997.37774ms ago: executing program 1 (id=4835): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000300)="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", 0xfc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000043c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x9, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c800) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd049350725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e0407516ba", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x61, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 167.501012ms ago: executing program 5 (id=4836): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_mount_image$vfat(&(0x7f00000098c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000009900)=ANY=[@ANYRES16, @ANYRES64=r3], 0x1, 0x385, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r8}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) 91.075876ms ago: executing program 1 (id=4837): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000000000002900000002"], 0x18}, 0x440e0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000300)={{r0, &(0x7f0000000040)='\x00', 0x10b001, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x8]}, {0x6, 0x3, 0x945, 0x1}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0xf}, 0x1, &(0x7f00000002c0)=[{0x2, 0x7, &(0x7f00000001c0)='+%-#)\x00', &(0x7f0000000200)="7b675e24c1127fe093e595a023382a478b14d18fc6ea156bdc24f259e323844d58078d804f06e9416b44cf6c92d04067ffca8f8532da5b82c774135491a9526a069d258a863a1c01d78858acdd60bf56f5d821f2fb279598dc264830b88de7f54e9e80ac60b367dbf41d8784066f35f762fc57ef62f7ebd42dce3b02cea3f6995b44ec847b38fee0677175c52f93bc645442f6", 0x93, 0x20}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x4}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x4c040) 6.43332ms ago: executing program 9 (id=4838): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000010000020900020073797a30000000000500010007000000080009400000000114000880100007800a001e9e8f928a710000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x5]}, &(0x7f0000000400)=0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (fail_nth: 1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x3, 0x5, 0x0, 0x0, 0x10000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 0s ago: executing program 3 (id=4839): r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x9, 0x80, 0xe, 0x9, 0x0, 0x4f, 0x12808, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x401, 0x2, 0x4, 0x9, 0x1000, 0x7fffffff, 0xfffd, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) io_uring_enter(0xffffffffffffffff, 0x1733, 0x6323, 0x20, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x220, 0x0, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x35}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2, @private=0xa010100, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r2, &(0x7f0000000040)=@util={0x25, "a1a23b02a0c8121422dba7f6a8390ee3"}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) kernel console output (not intermixed with test programs): ] loop1: detected capacity change from 0 to 512 [ 803.055198][T21038] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 803.101592][T21038] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 803.134795][T21038] EXT4-fs (loop1): 1 truncate cleaned up [ 803.156150][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 803.171280][T21038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.360685][T21048] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 803.385129][T21048] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=21048 comm=syz.1.4347 [ 803.450294][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 803.450309][ T28] audit: type=1400 audit(803.440:14144): avc: denied { write } for pid=21037 comm="syz.1.4347" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.513629][T21038] tipc: Enabled bearer , priority 10 [ 804.056062][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.134484][T21063] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.176069][T21065] loop6: detected capacity change from 0 to 1024 [ 804.184660][T21066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21066 comm=syz.1.4353 [ 804.206053][T21066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.215811][T21065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.249238][T21066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.269597][T21063] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.342927][T21063] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.370195][T21071] netlink: 'syz.5.4355': attribute type 7 has an invalid length. [ 804.378051][T21071] netlink: 'syz.5.4355': attribute type 8 has an invalid length. [ 804.387576][T21071] netlink: 'syz.5.4355': attribute type 3 has an invalid length. [ 804.415172][T21063] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.464219][T21075] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.499540][T21077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 804.510465][T21078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21078 comm=syz.9.4357 [ 804.526439][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.535123][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.543627][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.552407][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.580646][T21075] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.441418][ T3420] tipc: Node number set to 931464927 [ 805.451250][T21075] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.452862][T21092] loop5: detected capacity change from 0 to 1024 [ 805.470018][T21092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 805.478308][T21092] System zones: 1-12 [ 805.482773][T21092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.504087][ T28] audit: type=1400 audit(805.490:14145): avc: denied { bind } for pid=21091 comm="syz.5.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.527476][ T28] audit: type=1400 audit(805.490:14146): avc: denied { listen } for pid=21091 comm="syz.5.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.547711][ T28] audit: type=1400 audit(805.490:14147): avc: denied { accept } for pid=21091 comm="syz.5.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.567952][ T28] audit: type=1400 audit(805.490:14148): avc: denied { read } for pid=21091 comm="syz.5.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.587057][ T28] audit: type=1400 audit(805.490:14149): avc: denied { remount } for pid=21091 comm="syz.5.4361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 805.613988][T21075] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.634489][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.680350][ T83] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.696065][ T83] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.710643][ T83] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.719263][ T83] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.787856][T21102] loop5: detected capacity change from 0 to 512 [ 805.796437][T21102] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 805.842618][T21102] syzkaller1: entered promiscuous mode [ 805.848591][T21102] syzkaller1: entered allmulticast mode [ 806.270378][T21107] dummy0 speed is unknown, defaulting to 1000 [ 806.947696][T21119] loop5: detected capacity change from 0 to 512 [ 807.042097][T21119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.147501][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.207752][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4368'. [ 807.454736][T21128] loop6: detected capacity change from 0 to 512 [ 807.476597][T21128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.730489][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4370'. [ 808.087700][ T28] audit: type=1326 audit(808.070:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21147 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ce2fc799 code=0x7ffc0000 [ 808.111479][ T28] audit: type=1326 audit(808.070:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21147 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ce2fc799 code=0x7ffc0000 [ 808.134962][ T28] audit: type=1326 audit(808.070:14152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21147 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4ce2fc799 code=0x7ffc0000 [ 808.197064][ T28] audit: type=1326 audit(808.070:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21147 comm="syz.3.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ce2fc799 code=0x7ffc0000 [ 808.299417][T21151] loop9: detected capacity change from 0 to 512 [ 808.308099][T21151] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 808.397391][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4377'. [ 808.463605][T21154] syzkaller1: entered promiscuous mode [ 808.469225][T21154] syzkaller1: entered allmulticast mode [ 809.273509][T18717] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.284443][T18717] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.295286][T18717] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.306423][T18717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.334493][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.344955][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.346472][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.357760][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.370674][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.402886][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.477331][T21177] loop1: detected capacity change from 0 to 2048 [ 809.605201][T21177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.605713][T21183] loop9: detected capacity change from 0 to 128 [ 809.620022][T21177] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 809.639820][T21177] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 809.691826][T21184] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4384'. [ 809.722542][T21184] loop5: detected capacity change from 0 to 128 [ 809.736091][T21184] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 809.750657][T21184] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 809.832808][T21177] EXT4-fs (loop1): This should not happen!! Data will be lost [ 809.832808][T21177] [ 809.871230][T21177] EXT4-fs (loop1): Total free blocks count 0 [ 809.903448][T21183] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 809.941392][T21177] EXT4-fs (loop1): Free/Dirty block details [ 809.962816][T21177] EXT4-fs (loop1): free_blocks=4096 [ 809.972057][T21183] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 809.993728][T21177] EXT4-fs (loop1): dirty_blocks=32 [ 810.006168][T21177] EXT4-fs (loop1): Block reservation details [ 810.012373][T21177] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 810.018593][T21185] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 810.064728][T21187] loop9: detected capacity change from 0 to 512 [ 810.071201][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 810.071214][ T28] audit: type=1326 audit(810.050:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.103325][T21187] EXT4-fs: Ignoring removed nobh option [ 810.119914][T21187] EXT4-fs (loop9): orphan cleanup on readonly fs [ 810.121334][ T28] audit: type=1326 audit(810.050:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.149974][T21187] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4387: EA inode hash validation failed [ 810.207562][T21190] loop1: detected capacity change from 0 to 512 [ 810.217991][T21187] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4387: corrupted inode contents [ 810.218089][T21187] fserror_report: 5 callbacks suppressed [ 810.218099][T21187] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 810.218962][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 810.219100][ C0] EXT4-fs (loop9): initial error at time 810: ext4_do_update_inode:5569: inode 15 [ 810.219473][ C0] EXT4-fs (loop9): last error at time 810: ext4_do_update_inode:5569: inode 15 [ 810.224197][T21187] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.4387: mark_inode_dirty error [ 810.224218][T21187] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 810.224355][T21187] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4387: corrupted inode contents [ 810.224407][T21187] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 810.226909][T21187] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.4387: mark_inode_dirty error [ 810.226934][T21187] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 810.245960][ T28] audit: type=1326 audit(810.050:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.259735][T21187] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.4387: mark inode dirty (error -117) [ 810.279032][T21190] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 810.289619][T21187] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 810.289824][T21187] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 810.388830][ T28] audit: type=1326 audit(810.050:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.417473][T21187] EXT4-fs (loop9): 1 orphan inode deleted [ 810.446934][T21190] syzkaller1: entered promiscuous mode [ 810.455259][T21190] syzkaller1: entered allmulticast mode [ 810.471207][ T28] audit: type=1326 audit(810.050:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.496679][ T28] audit: type=1326 audit(810.050:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.516284][T21187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 810.519938][ T28] audit: type=1326 audit(810.050:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe2d373c799 code=0x7ffc0000 [ 810.556161][ T28] audit: type=1326 audit(810.050:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe2d373c502 code=0x7ffc0000 [ 810.582022][ T28] audit: type=1326 audit(810.050:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2d36fcfce code=0x7ffc0000 [ 810.605340][ T28] audit: type=1326 audit(810.050:14175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21186 comm="syz.9.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe2d373c5c7 code=0x7ffc0000 [ 810.634444][T21197] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.678429][T21199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4392'. [ 810.684547][T21200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21200 comm=syz.5.4390 [ 810.707912][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.717555][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.718014][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.727124][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.745041][T21197] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.755308][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.770676][T21202] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.810230][T21197] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.821660][T21203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21203 comm=syz.9.4393 [ 810.834917][T21203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.843481][T21203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.852217][T21202] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.869931][T21197] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.900335][T21202] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.942513][T21207] FAULT_INJECTION: forcing a failure. [ 810.942513][T21207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.946362][ T4799] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.955718][T21207] CPU: 1 UID: 0 PID: 21207 Comm: syz.6.4395 Tainted: G W syzkaller #0 PREEMPT(full) [ 810.955805][T21207] Tainted: [W]=WARN [ 810.955812][T21207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.955822][T21207] Call Trace: [ 810.955828][T21207] [ 810.955835][T21207] __dump_stack+0x1d/0x30 [ 810.956006][T21207] dump_stack_lvl+0x95/0xd0 [ 810.956179][T21207] dump_stack+0x15/0x1b [ 810.956208][T21207] should_fail_ex+0x263/0x280 [ 810.956280][T21207] should_fail+0xb/0x20 [ 810.956300][T21207] should_fail_usercopy+0x1a/0x20 [ 810.956324][T21207] _copy_from_user+0x1c/0xb0 [ 810.956356][T21207] ___sys_sendmsg+0xc1/0x1e0 [ 810.956393][T21207] __x64_sys_sendmsg+0xd4/0x160 [ 810.956428][T21207] x64_sys_call+0x194c/0x3020 [ 810.956478][T21207] do_syscall_64+0x12c/0x370 [ 810.956535][T21207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.956554][T21207] RIP: 0033:0x7fd71bdcc799 [ 810.956569][T21207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.956586][T21207] RSP: 002b:00007fd71a827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.956677][T21207] RAX: ffffffffffffffda RBX: 00007fd71c045fa0 RCX: 00007fd71bdcc799 [ 810.956691][T21207] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 810.956704][T21207] RBP: 00007fd71a827090 R08: 0000000000000000 R09: 0000000000000000 [ 810.956717][T21207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.956759][T21207] R13: 00007fd71c046038 R14: 00007fd71c045fa0 R15: 00007fffc646c198 [ 810.956774][T21207] [ 811.130033][ T8766] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.142296][ T8766] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.158868][ T8766] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.169819][T21202] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.297060][T21214] loop6: detected capacity change from 0 to 1024 [ 811.318652][T21214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.745155][T21221] loop5: detected capacity change from 0 to 1024 [ 811.769971][T21221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.787821][ T8766] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.801822][ T30] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.810264][ T30] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.820994][ T30] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.349018][T21228] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4400'. [ 813.809190][T21243] loop9: detected capacity change from 0 to 2048 [ 813.832702][T21243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.053713][ T4799] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 814.068459][ T4799] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 814.081365][ T4799] EXT4-fs (loop9): This should not happen!! Data will be lost [ 814.081365][ T4799] [ 814.104283][ T4799] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 814.117004][ T4799] EXT4-fs (loop9): This should not happen!! Data will be lost [ 814.117004][ T4799] [ 814.164867][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.297745][T21256] loop9: detected capacity change from 0 to 8192 [ 814.329993][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.368992][T21256] loop9: p1 < > p2 p4 < p5 > [ 814.373693][T21256] loop9: partition table partially beyond EOD, truncated [ 814.382062][T21256] loop9: p1 start 134217728 is beyond EOD, truncated [ 814.388930][T21256] loop9: p2 size 591360 extends beyond EOD, truncated [ 814.406787][T21256] loop9: p5 size 591360 extends beyond EOD, truncated [ 815.042349][T21261] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.075661][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.101605][T21266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21266 comm=syz.6.4411 [ 815.141346][T21261] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.151325][T21266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.172078][T21266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.177035][T21268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.190610][T21268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.213336][T21268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.230286][T21261] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.240270][T21268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.252946][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 815.254953][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 815.275194][T21269] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4412'. [ 815.284174][T21269] netlink: 23 bytes leftover after parsing attributes in process `syz.1.4412'. [ 815.296092][T21269] netlink: 23 bytes leftover after parsing attributes in process `syz.1.4412'. [ 815.306059][T21272] x_tables: duplicate underflow at hook 1 [ 815.319898][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 815.347456][T21278] loop9: detected capacity change from 0 to 2048 [ 815.360511][T21261] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.375294][T21278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.491212][ T30] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.499978][ T30] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.508340][ T30] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.516892][ T30] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.795237][ T30] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 815.825430][ T30] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 815.866366][ T30] EXT4-fs (loop9): This should not happen!! Data will be lost [ 815.866366][ T30] [ 815.896870][ T30] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 815.939658][T21292] loop5: detected capacity change from 0 to 1024 [ 815.946137][ T30] EXT4-fs (loop9): This should not happen!! Data will be lost [ 815.946137][ T30] [ 816.027212][T21292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.046817][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.056975][T21294] loop1: detected capacity change from 0 to 512 [ 816.072958][T21294] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 816.130460][T21301] FAULT_INJECTION: forcing a failure. [ 816.130460][T21301] name failslab, interval 1, probability 0, space 0, times 0 [ 816.131238][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 816.131250][ T28] audit: type=1326 audit(816.120:14207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 816.152833][T21301] CPU: 0 UID: 0 PID: 21301 Comm: syz.6.4423 Tainted: G W syzkaller #0 PREEMPT(full) [ 816.152939][T21301] Tainted: [W]=WARN [ 816.152946][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.152957][T21301] Call Trace: [ 816.152963][T21301] [ 816.152970][T21301] __dump_stack+0x1d/0x30 [ 816.152995][T21301] dump_stack_lvl+0x95/0xd0 [ 816.153051][T21301] dump_stack+0x15/0x1b [ 816.153070][T21301] should_fail_ex+0x263/0x280 [ 816.153094][T21301] should_failslab+0x8c/0xb0 [ 816.153113][T21301] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 816.153188][T21301] ? __alloc_skb+0x2d6/0x690 [ 816.153273][T21301] __alloc_skb+0x2d6/0x690 [ 816.153295][T21301] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 816.153314][T21301] ? __alloc_skb+0x200/0x690 [ 816.153336][T21301] audit_log_start+0x3aa/0x730 [ 816.153365][T21301] ? kstrtouint_from_user+0xa8/0xf0 [ 816.153410][T21301] audit_seccomp+0x47/0x100 [ 816.153437][T21301] ? __seccomp_filter+0x8db/0x1350 [ 816.153520][T21301] __seccomp_filter+0x8ec/0x1350 [ 816.153544][T21301] ? __rcu_read_unlock+0x4e/0x70 [ 816.153563][T21301] ? __fget_files+0x184/0x1c0 [ 816.153633][T21301] ? mutex_lock+0x57/0x90 [ 816.153687][T21301] ? mutex_unlock+0x4e/0x90 [ 816.153792][T21301] __secure_computing+0x81/0x150 [ 816.153866][T21301] do_syscall_64+0xd3/0x370 [ 816.153887][T21301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.153907][T21301] RIP: 0033:0x7fd71bdcc799 [ 816.153922][T21301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.153995][T21301] RSP: 002b:00007fd71a827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 816.154093][T21301] RAX: ffffffffffffffda RBX: 00007fd71c045fa0 RCX: 00007fd71bdcc799 [ 816.154143][T21301] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 816.154154][T21301] RBP: 00007fd71a827090 R08: 0000000000000000 R09: 0000000000000000 [ 816.154226][T21301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.154237][T21301] R13: 00007fd71c046038 R14: 00007fd71c045fa0 R15: 00007fffc646c198 [ 816.154255][T21301] [ 816.154396][T21301] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 816.172290][ T28] audit: type=1326 audit(816.120:14208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 816.187435][T21294] syzkaller1: entered promiscuous mode [ 816.197217][ T28] audit: type=1326 audit(816.120:14209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 816.197262][ T28] audit: type=1326 audit(816.120:14210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd71bd8cfce code=0x7ffc0000 [ 816.197281][ T28] audit: type=1326 audit(816.120:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd71bd8cfce code=0x7ffc0000 [ 816.197325][T21301] audit: out of memory in audit_log_start [ 816.197721][ T28] audit: type=1326 audit(816.190:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd71bd8cfce code=0x7ffc0000 [ 816.215356][T21294] syzkaller1: entered allmulticast mode [ 816.216781][ T28] audit: type=1326 audit(816.190:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd71bd8cfce code=0x7ffc0000 [ 816.216804][ T28] audit: type=1326 audit(816.190:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.6.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd71bd8cfce code=0x7ffc0000 [ 816.668090][T21310] loop6: detected capacity change from 0 to 512 [ 816.677097][T21311] FAULT_INJECTION: forcing a failure. [ 816.677097][T21311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.703596][T21311] CPU: 0 UID: 0 PID: 21311 Comm: syz.3.4424 Tainted: G W syzkaller #0 PREEMPT(full) [ 816.703656][T21311] Tainted: [W]=WARN [ 816.703662][T21311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.703672][T21311] Call Trace: [ 816.703678][T21311] [ 816.703684][T21311] __dump_stack+0x1d/0x30 [ 816.703708][T21311] dump_stack_lvl+0x95/0xd0 [ 816.703752][T21311] dump_stack+0x15/0x1b [ 816.703772][T21311] should_fail_ex+0x263/0x280 [ 816.703796][T21311] should_fail+0xb/0x20 [ 816.703815][T21311] should_fail_usercopy+0x1a/0x20 [ 816.703883][T21311] _copy_to_user+0x20/0xa0 [ 816.703906][T21311] simple_read_from_buffer+0xb5/0x130 [ 816.703924][T21311] proc_fail_nth_read+0x10e/0x150 [ 816.703949][T21311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.703970][T21311] vfs_read+0x1ab/0x7f0 [ 816.704018][T21311] ? __rcu_read_unlock+0x4e/0x70 [ 816.704065][T21311] ? __fget_files+0x184/0x1c0 [ 816.704084][T21311] ? mutex_lock+0x57/0x90 [ 816.704162][T21311] ksys_read+0xdc/0x1a0 [ 816.704177][T21311] __x64_sys_read+0x40/0x50 [ 816.704192][T21311] x64_sys_call+0x2886/0x3020 [ 816.704272][T21311] do_syscall_64+0x12c/0x370 [ 816.704325][T21311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.704343][T21311] RIP: 0033:0x7fd4ce2bcfce [ 816.704363][T21311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.704417][T21311] RSP: 002b:00007fd4ccd35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.704433][T21311] RAX: ffffffffffffffda RBX: 00007fd4ccd366c0 RCX: 00007fd4ce2bcfce [ 816.704444][T21311] RDX: 000000000000000f RSI: 00007fd4ccd360a0 RDI: 0000000000000006 [ 816.704467][T21311] RBP: 00007fd4ccd36090 R08: 0000000000000000 R09: 0000000000000000 [ 816.704498][T21311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.704509][T21311] R13: 00007fd4ce576128 R14: 00007fd4ce576090 R15: 00007fffc7fc5588 [ 816.704525][T21311] [ 816.707981][T21310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.718020][T21298] syz.9.4420 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 816.932806][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.940843][T21298] CPU: 1 UID: 0 PID: 21298 Comm: syz.9.4420 Tainted: G W syzkaller #0 PREEMPT(full) [ 816.940886][T21298] Tainted: [W]=WARN [ 816.940893][T21298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.940905][T21298] Call Trace: [ 816.940912][T21298] [ 816.940921][T21298] __dump_stack+0x1d/0x30 [ 816.940946][T21298] dump_stack_lvl+0x95/0xd0 [ 816.941026][T21298] dump_stack+0x15/0x1b [ 816.941047][T21298] dump_header+0x80/0x240 [ 816.941070][T21298] oom_kill_process+0x295/0x350 [ 816.941092][T21298] out_of_memory+0x97d/0xb80 [ 816.941153][T21298] try_charge_memcg+0x62e/0xa10 [ 816.941224][T21298] obj_cgroup_charge_pages+0x23/0xc0 [ 816.941252][T21298] __memcg_kmem_charge_page+0x9e/0x170 [ 816.941279][T21298] __alloc_frozen_pages_noprof+0x18a/0x360 [ 816.941327][T21298] alloc_pages_mpol+0xb3/0x260 [ 816.941354][T21298] alloc_pages_noprof+0x8f/0x130 [ 816.941381][T21298] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 816.941446][T21298] __kvmalloc_node_noprof+0x3d4/0x650 [ 816.941471][T21298] ? futex_hash_allocate+0x190/0x9d0 [ 816.941497][T21298] ? futex_hash_allocate+0x190/0x9d0 [ 816.941525][T21298] futex_hash_allocate+0x190/0x9d0 [ 816.941580][T21298] ? cap_task_prctl+0x13f/0x6e0 [ 816.941610][T21298] futex_hash_prctl+0xd8/0xf0 [ 816.941636][T21298] __se_sys_prctl+0xa3d/0x13f0 [ 816.941673][T21298] __x64_sys_prctl+0x67/0x80 [ 816.941723][T21298] x64_sys_call+0x2533/0x3020 [ 816.941747][T21298] do_syscall_64+0x12c/0x370 [ 816.941851][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.941874][T21298] RIP: 0033:0x7fe2d373c799 [ 816.941928][T21298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.942012][T21298] RSP: 002b:00007fe2d218f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 816.942033][T21298] RAX: ffffffffffffffda RBX: 00007fe2d39b5fa0 RCX: 00007fe2d373c799 [ 816.942048][T21298] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 816.942061][T21298] RBP: 00007fe2d37d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 816.942107][T21298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.942121][T21298] R13: 00007fe2d39b6038 R14: 00007fe2d39b5fa0 R15: 00007ffd65fad018 [ 816.942140][T21298] [ 816.942148][T21298] memory: usage 307200kB, limit 307200kB, failcnt 78 [ 817.052626][T21313] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4428'. [ 817.057970][T21298] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 817.058060][T21298] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0 [ 817.058079][T21298] Memory cgroup stats for /syz9: [ 817.058442][T21298] cache 0 [ 817.207472][T21298] rss 114688 [ 817.210815][T21298] shmem 0 [ 817.213817][T21298] mapped_file 0 [ 817.217298][T21298] dirty 0 [ 817.220400][T21298] writeback 0 [ 817.223928][T21298] workingset_refault_anon 0 [ 817.231301][T21298] workingset_refault_file 0 [ 817.290769][T21298] swap 0 [ 817.293727][T21298] swapcached 0 [ 817.297131][T21298] pgpgin 108189 [ 817.301026][T21298] pgpgout 108157 [ 817.304562][T21298] pgfault 71199 [ 817.308096][T21298] pgmajfault 2 [ 817.311716][T21298] inactive_anon 57344 [ 817.315733][T21298] active_anon 57344 [ 817.319757][T21298] inactive_file 0 [ 817.323429][T21298] active_file 16384 [ 817.327227][T21298] unevictable 0 [ 817.330974][T21298] hierarchical_memory_limit 314572800 [ 817.336373][T21298] hierarchical_memsw_limit 9223372036854771712 [ 817.342941][T21298] total_cache 0 [ 817.346394][T21298] total_rss 114688 [ 817.350331][T21298] total_shmem 0 [ 817.353869][T21298] total_mapped_file 0 [ 817.357836][T21298] total_dirty 0 [ 817.364212][T21298] total_writeback 0 [ 817.368071][T21298] total_workingset_refault_anon 0 [ 817.373270][T21298] total_workingset_refault_file 0 [ 817.378354][T21298] total_swap 0 [ 817.381917][T21298] total_swapcached 0 [ 817.385848][T21298] total_pgpgin 108189 [ 817.390340][T21298] total_pgpgout 108157 [ 817.394400][T21298] total_pgfault 71199 [ 817.398446][T21298] total_pgmajfault 2 [ 817.402646][T21298] total_inactive_anon 57344 [ 817.407138][T21298] total_active_anon 57344 [ 817.411714][T21298] total_inactive_file 0 [ 817.419578][T21330] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4432'. [ 817.428615][T21330] netlink: 23 bytes leftover after parsing attributes in process `syz.1.4432'. [ 817.440194][T21330] netlink: 23 bytes leftover after parsing attributes in process `syz.1.4432'. [ 817.458905][T21298] total_active_file 16384 [ 817.464429][T21330] x_tables: duplicate underflow at hook 1 [ 817.473690][T21298] total_unevictable 0 [ 817.493774][T21298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4420,pid=21297,uid=0 [ 817.524046][T21298] Memory cgroup out of memory: Killed process 21298 (syz.9.4420) total-vm:104272kB, anon-rss:1332kB, file-rss:21756kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 818.490508][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4436'. [ 818.567814][T21348] loop1: detected capacity change from 0 to 512 [ 818.582534][T21348] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 818.611604][T21348] syzkaller1: entered promiscuous mode [ 818.622731][T21348] syzkaller1: entered allmulticast mode [ 818.684874][T21352] bridge0: entered promiscuous mode [ 818.820296][T21354] loop6: detected capacity change from 0 to 8192 [ 818.830446][T21352] macvlan2: entered promiscuous mode [ 818.859583][ T3302] loop6: p1 < > p2 p4 < p5 > [ 818.866509][ T3302] loop6: partition table partially beyond EOD, truncated [ 818.887986][ T3302] loop6: p1 start 134217728 is beyond EOD, truncated [ 818.928493][ T3302] loop6: p2 size 591360 extends beyond EOD, truncated [ 818.999574][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.036399][ T3302] loop6: p5 size 591360 extends beyond EOD, truncated [ 819.310677][T21359] xt_hashlimit: size too large, truncated to 1048576 [ 819.363455][T21354] loop6: p1 < > p2 p4 < p5 > [ 819.368173][T21354] loop6: partition table partially beyond EOD, truncated [ 819.375355][T21354] loop6: p1 start 134217728 is beyond EOD, truncated [ 819.382102][T21354] loop6: p2 size 591360 extends beyond EOD, truncated [ 819.394324][T21354] loop6: p5 size 591360 extends beyond EOD, truncated [ 819.454295][T21365] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4442'. [ 819.550156][T21368] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4444'. [ 819.721039][T21374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21374 comm=syz.1.4445 [ 819.734785][T21374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.743241][T21374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.752627][T21374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.761877][T21374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.044004][T21392] loop6: detected capacity change from 0 to 1024 [ 820.081335][T21392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.303741][T21399] dummy0 speed is unknown, defaulting to 1000 [ 820.339224][T21410] loop1: detected capacity change from 0 to 512 [ 820.352048][T21410] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 820.393784][T21410] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 820.409141][T21415] loop9: detected capacity change from 0 to 1024 [ 820.431273][T21415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.473403][T21402] syzkaller1: entered promiscuous mode [ 820.489246][T21402] syzkaller1: entered allmulticast mode [ 820.659982][T21441] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.710360][T21441] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.719162][T21443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21443 comm=syz.3.4469 [ 820.735211][T21443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.748278][T21443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.760276][T21443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.769395][T21443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.779502][T21441] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.850418][T21446] __nla_validate_parse: 1 callbacks suppressed [ 820.850496][T21446] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4468'. [ 820.930209][T21441] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.017306][ T30] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.035101][ T30] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.046998][ T30] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.059920][ T30] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.668874][T21457] syzkaller1: entered promiscuous mode [ 821.674966][T21457] syzkaller1: entered allmulticast mode [ 821.796780][T21459] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4471'. [ 821.843557][T21461] loop5: detected capacity change from 0 to 128 [ 821.860601][T21461] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 821.893292][T21461] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 822.687411][T21482] loop1: detected capacity change from 0 to 1024 [ 822.720294][T21482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.741301][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 822.741316][ T28] audit: type=1400 audit(822.730:14258): avc: denied { read } for pid=21481 comm="syz.1.4484" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 823.222127][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.245356][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.274466][ T28] audit: type=1400 audit(823.260:14259): avc: denied { mounton } for pid=21492 comm="syz.6.4485" path="/proc/542/task" dev="proc" ino=84088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 823.356030][T21504] loop6: detected capacity change from 0 to 2048 [ 823.404804][T21504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.449974][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.483176][T21510] loop5: detected capacity change from 0 to 512 [ 823.505590][T21510] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 823.543959][T21518] syzkaller0: entered promiscuous mode [ 823.562124][T21518] syzkaller0: entered allmulticast mode [ 823.618222][T21520] loop1: detected capacity change from 0 to 1024 [ 823.664618][T21520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.712345][T21521] syzkaller1: entered promiscuous mode [ 823.718217][T21521] syzkaller1: entered allmulticast mode [ 823.740876][T21528] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.765917][T18714] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 823.782418][T18714] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 823.795841][T21529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21529 comm=syz.3.4497 [ 823.825506][T21529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.834853][T18714] EXT4-fs (loop6): This should not happen!! Data will be lost [ 823.834853][T18714] [ 823.851305][T21529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.871119][T21528] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.893076][T18714] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 823.908391][T21529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.916920][T21529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.925318][T18714] EXT4-fs (loop6): This should not happen!! Data will be lost [ 823.925318][T18714] [ 823.985968][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.060361][T21528] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.181856][T21528] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.290932][ T4799] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.310917][ T4799] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.319941][ T4799] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.352887][ T4799] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.417141][T21545] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4503'. [ 824.441228][T21545] random: crng reseeded on system resumption [ 824.455461][ T28] audit: type=1400 audit(824.430:14260): avc: denied { write } for pid=21544 comm="syz.6.4503" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 824.595615][T21556] syzkaller0: entered promiscuous mode [ 824.601592][T21556] syzkaller0: entered allmulticast mode [ 824.688417][T21558] loop6: detected capacity change from 0 to 2048 [ 824.734772][T21558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.797298][T21395] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 826.860535][ T4799] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 827.039757][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.844490][ T4799] EXT4-fs (loop6): This should not happen!! Data will be lost [ 827.844490][ T4799] [ 827.873412][ T4799] EXT4-fs (loop6): Total free blocks count 0 [ 828.044331][ T4799] EXT4-fs (loop6): Free/Dirty block details [ 828.050699][ T4799] EXT4-fs (loop6): free_blocks=0 [ 828.055658][ T4799] EXT4-fs (loop6): dirty_blocks=1584 [ 828.061192][ T4799] EXT4-fs (loop6): Block reservation details [ 828.067182][ T4799] EXT4-fs (loop6): i_reserved_data_blocks=99 [ 828.259449][T18714] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 1445 with error 117 [ 828.447870][T21596] vlan2: entered allmulticast mode [ 828.455086][T21586] dummy0 speed is unknown, defaulting to 1000 [ 828.462003][T21606] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4519'. [ 828.462020][T21606] netlink: 23 bytes leftover after parsing attributes in process `syz.9.4519'. [ 828.462034][T21606] netlink: 23 bytes leftover after parsing attributes in process `syz.9.4519'. [ 828.462649][T21606] x_tables: duplicate underflow at hook 1 [ 828.743065][T21620] loop5: detected capacity change from 0 to 2048 [ 828.812682][T21620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.998506][T21629] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 829.071377][T18717] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 829.114448][T18717] EXT4-fs (loop5): This should not happen!! Data will be lost [ 829.114448][T18717] [ 829.161672][T18717] EXT4-fs (loop5): Total free blocks count 0 [ 829.186086][T18717] EXT4-fs (loop5): Free/Dirty block details [ 829.239294][T18717] EXT4-fs (loop5): free_blocks=0 [ 829.258931][T18717] EXT4-fs (loop5): dirty_blocks=1104 [ 829.281076][T18717] EXT4-fs (loop5): Block reservation details [ 829.304972][T18717] EXT4-fs (loop5): i_reserved_data_blocks=69 [ 829.370814][ T28] audit: type=1400 audit(829.360:14261): avc: denied { create } for pid=21632 comm="syz.9.4526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 829.411600][ T28] audit: type=1400 audit(829.390:14262): avc: denied { write } for pid=21632 comm="syz.9.4526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 829.433548][ T28] audit: type=1400 audit(829.390:14263): avc: denied { sendto } for pid=21632 comm="syz.9.4526" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 829.485266][T18717] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 963 with error 117 [ 829.517677][ T28] audit: type=1400 audit(829.500:14264): avc: denied { create } for pid=21632 comm="syz.9.4526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 829.533112][T21639] netlink: 'syz.3.4529': attribute type 10 has an invalid length. [ 829.539019][ T28] audit: type=1400 audit(829.500:14265): avc: denied { write } for pid=21632 comm="syz.9.4526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 829.567508][T21639] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.574784][ T28] audit: type=1400 audit(829.500:14266): avc: denied { read } for pid=21632 comm="syz.9.4526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 829.598086][ T28] audit: type=1400 audit(829.500:14267): avc: denied { create } for pid=21632 comm="syz.9.4526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=x25_socket permissive=1 [ 829.628573][T21641] loop5: detected capacity change from 0 to 2048 [ 829.662645][T21641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.732671][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4530'. [ 829.839064][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4530'. [ 829.923109][T18712] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 829.944232][T18712] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 829.978850][T18712] EXT4-fs (loop5): This should not happen!! Data will be lost [ 829.978850][T18712] [ 830.186770][T18717] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 830.204386][T18717] EXT4-fs (loop5): This should not happen!! Data will be lost [ 830.204386][T18717] [ 830.258995][T21665] loop9: detected capacity change from 0 to 512 [ 830.291078][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.321178][T21667] loop1: detected capacity change from 0 to 1024 [ 830.330963][T21665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.379295][T21667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.494562][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.546715][T21679] loop9: detected capacity change from 0 to 512 [ 830.560933][ T3420] kernel write not supported for file /uhid (pid: 3420 comm: kworker/0:4) [ 830.582270][T21679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.596823][T21679] FAULT_INJECTION: forcing a failure. [ 830.596823][T21679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.630836][T21679] CPU: 0 UID: 0 PID: 21679 Comm: syz.9.4538 Tainted: G W syzkaller #0 PREEMPT(full) [ 830.630865][T21679] Tainted: [W]=WARN [ 830.630871][T21679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.630882][T21679] Call Trace: [ 830.630888][T21679] [ 830.630896][T21679] __dump_stack+0x1d/0x30 [ 830.630943][T21679] dump_stack_lvl+0x95/0xd0 [ 830.630962][T21679] dump_stack+0x15/0x1b [ 830.630980][T21679] should_fail_ex+0x263/0x280 [ 830.631069][T21679] should_fail+0xb/0x20 [ 830.631086][T21679] should_fail_usercopy+0x1a/0x20 [ 830.631106][T21679] _copy_from_user+0x1c/0xb0 [ 830.631245][T21679] vmemdup_user+0x5e/0xd0 [ 830.631263][T21679] path_setxattrat+0x1b1/0x310 [ 830.631292][T21679] __x64_sys_setxattr+0x6e/0x90 [ 830.631361][T21679] x64_sys_call+0x2ee2/0x3020 [ 830.631390][T21679] do_syscall_64+0x12c/0x370 [ 830.631410][T21679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.631426][T21679] RIP: 0033:0x7fe2d373c799 [ 830.631439][T21679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.631477][T21679] RSP: 002b:00007fe2d218f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 830.631492][T21679] RAX: ffffffffffffffda RBX: 00007fe2d39b5fa0 RCX: 00007fe2d373c799 [ 830.631504][T21679] RDX: 0000200000000240 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 830.631514][T21679] RBP: 00007fe2d218f090 R08: 0000000000000000 R09: 0000000000000000 [ 830.631576][T21679] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 830.631586][T21679] R13: 00007fe2d39b6038 R14: 00007fe2d39b5fa0 R15: 00007ffd65fad018 [ 830.631600][T21679] [ 830.811929][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.832562][T21689] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 830.955842][ T28] audit: type=1400 audit(830.940:14268): avc: denied { unmount } for pid=19788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 831.008130][T21692] loop9: detected capacity change from 0 to 512 [ 831.017667][T21692] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 831.053141][T21692] syzkaller1: entered promiscuous mode [ 831.059289][T21692] syzkaller1: entered allmulticast mode [ 831.718909][T21706] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 831.917339][T21713] FAULT_INJECTION: forcing a failure. [ 831.917339][T21713] name failslab, interval 1, probability 0, space 0, times 0 [ 831.955080][T21713] CPU: 1 UID: 0 PID: 21713 Comm: syz.6.4551 Tainted: G W syzkaller #0 PREEMPT(full) [ 831.955109][T21713] Tainted: [W]=WARN [ 831.955187][T21713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 831.955199][T21713] Call Trace: [ 831.955205][T21713] [ 831.955212][T21713] __dump_stack+0x1d/0x30 [ 831.955287][T21713] dump_stack_lvl+0x95/0xd0 [ 831.955309][T21713] dump_stack+0x15/0x1b [ 831.955329][T21713] should_fail_ex+0x263/0x280 [ 831.955354][T21713] should_failslab+0x8c/0xb0 [ 831.955388][T21713] __kmalloc_noprof+0xb8/0x4e0 [ 831.955409][T21713] ? do_sys_poll+0x186/0xc10 [ 831.955432][T21713] do_sys_poll+0x186/0xc10 [ 831.955529][T21713] ? avc_has_perm+0x101/0x190 [ 831.955556][T21713] ? selinux_file_open+0x2e6/0x330 [ 831.955684][T21713] ? timespec64_add_safe+0x106/0x150 [ 831.955778][T21713] __x64_sys_poll+0x12c/0x230 [ 831.955800][T21713] x64_sys_call+0x2891/0x3020 [ 831.955823][T21713] do_syscall_64+0x12c/0x370 [ 831.955964][T21713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.956035][T21713] RIP: 0033:0x7fd71bdcc799 [ 831.956051][T21713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.956146][T21713] RSP: 002b:00007fd71a827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 831.956166][T21713] RAX: ffffffffffffffda RBX: 00007fd71c045fa0 RCX: 00007fd71bdcc799 [ 831.956180][T21713] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 831.956204][T21713] RBP: 00007fd71a827090 R08: 0000000000000000 R09: 0000000000000000 [ 831.956216][T21713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.956228][T21713] R13: 00007fd71c046038 R14: 00007fd71c045fa0 R15: 00007fffc646c198 [ 831.956247][T21713] [ 832.183523][T21716] sctp: [Deprecated]: syz.9.4553 (pid 21716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.183523][T21716] Use struct sctp_sack_info instead [ 833.831224][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.888783][ T28] audit: type=1326 audit(833.870:14269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21739 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54620c799 code=0x7ffc0000 [ 833.992470][ T28] audit: type=1326 audit(833.870:14270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21739 comm="syz.1.4560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fa54620c799 code=0x7ffc0000 [ 834.048496][T21750] loop9: detected capacity change from 0 to 1024 [ 834.089505][T21750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.238527][T21744] dummy0 speed is unknown, defaulting to 1000 [ 835.098517][T21771] syzkaller0: entered promiscuous mode [ 835.104268][T21771] syzkaller0: entered allmulticast mode [ 835.219150][T21781] loop1: detected capacity change from 0 to 1024 [ 835.237910][T21781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.451993][T21788] loop6: detected capacity change from 0 to 8192 [ 835.489502][ T3302] loop6: p1 < > p2 p4 < p5 > [ 835.494306][ T3302] loop6: partition table partially beyond EOD, truncated [ 835.503013][ T3302] loop6: p1 start 134217728 is beyond EOD, truncated [ 835.510659][ T3302] loop6: p2 size 591360 extends beyond EOD, truncated [ 835.524442][ T3302] loop6: p5 size 591360 extends beyond EOD, truncated [ 835.782390][T21792] netlink: 'syz.5.4573': attribute type 10 has an invalid length. [ 835.829189][T21792] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.836460][T21792] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.845753][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4573'. [ 835.857975][T21792] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.865081][T21792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.872500][T21792] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.879551][T21792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.913803][T21792] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 835.923382][T21793] bridge_slave_1: left allmulticast mode [ 835.930910][T21793] bridge_slave_1: left promiscuous mode [ 835.936753][T21793] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.946814][T21793] bridge_slave_0: left allmulticast mode [ 835.953678][T21793] bridge_slave_0: left promiscuous mode [ 835.966894][T21788] loop6: p1 < > p2 p4 < p5 > [ 835.967599][T21793] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.971664][T21788] loop6: partition table partially beyond EOD, truncated [ 835.985850][T21788] loop6: p1 start 134217728 is beyond EOD, truncated [ 835.992544][T21788] loop6: p2 size 591360 extends beyond EOD, truncated [ 836.000791][T21788] loop6: p5 size 591360 extends beyond EOD, truncated [ 836.048928][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 836.054246][T21799] hub 8-0:1.0: USB hub found [ 836.062786][T21799] hub 8-0:1.0: 8 ports detected [ 836.075611][T21793] bond0: (slave bridge0): Releasing backup interface [ 836.344737][T21802] dummy0 speed is unknown, defaulting to 1000 [ 837.050973][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.132023][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 838.132035][ T28] audit: type=1326 audit(838.120:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.3.4584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4ce2fc799 code=0x0 [ 838.170291][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.183082][T21835] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4585'. [ 838.192384][T21835] netlink: 23 bytes leftover after parsing attributes in process `syz.6.4585'. [ 838.203430][T21835] netlink: 23 bytes leftover after parsing attributes in process `syz.6.4585'. [ 838.228044][T21835] x_tables: duplicate underflow at hook 1 [ 838.243201][T21839] FAULT_INJECTION: forcing a failure. [ 838.243201][T21839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 838.256828][T21839] CPU: 1 UID: 0 PID: 21839 Comm: syz.1.4587 Tainted: G W syzkaller #0 PREEMPT(full) [ 838.256855][T21839] Tainted: [W]=WARN [ 838.256861][T21839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.256943][T21839] Call Trace: [ 838.256948][T21839] [ 838.256956][T21839] __dump_stack+0x1d/0x30 [ 838.256980][T21839] dump_stack_lvl+0x95/0xd0 [ 838.257003][T21839] dump_stack+0x15/0x1b [ 838.257073][T21839] should_fail_ex+0x263/0x280 [ 838.257088][T21839] should_fail_alloc_page+0xf2/0x100 [ 838.257101][T21839] __alloc_frozen_pages_noprof+0x108/0x360 [ 838.257117][T21839] alloc_pages_mpol+0xb3/0x260 [ 838.257167][T21839] folio_alloc_mpol_noprof+0x39/0x80 [ 838.257181][T21839] shmem_get_folio_gfp+0x3da/0xd60 [ 838.257228][T21839] ? simple_xattr_get+0xb5/0x150 [ 838.257245][T21839] shmem_write_begin+0xfc/0x1f0 [ 838.257322][T21839] generic_perform_write+0x183/0x490 [ 838.257336][T21839] ? _raw_spin_unlock+0x9/0x30 [ 838.257365][T21839] shmem_file_write_iter+0xc5/0xf0 [ 838.257408][T21839] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 838.257424][T21839] vfs_write+0x5a6/0x9f0 [ 838.257444][T21839] ksys_write+0xdc/0x1a0 [ 838.257501][T21839] __x64_sys_write+0x40/0x50 [ 838.257511][T21839] x64_sys_call+0x27e1/0x3020 [ 838.257525][T21839] do_syscall_64+0x12c/0x370 [ 838.257574][T21839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.257604][T21839] RIP: 0033:0x7fa5461ccfce [ 838.257613][T21839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 838.257623][T21839] RSP: 002b:00007fa544c5ecf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.257634][T21839] RAX: ffffffffffffffda RBX: 00007fa544c5f6c0 RCX: 00007fa5461ccfce [ 838.257642][T21839] RDX: 0000000000400000 RSI: 00007fa53c83f000 RDI: 0000000000000007 [ 838.257730][T21839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.257737][T21839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 838.257743][T21839] R13: 00007fa544c5eddc R14: 00007fa544c5ede0 R15: 00007fa53c83f000 [ 838.257754][T21839] [ 838.481589][T21836] SELinux: failed to load policy [ 838.528356][T21842] loop5: detected capacity change from 0 to 512 [ 838.550270][T21842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.570185][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4588'. [ 838.749980][T21847] loop9: detected capacity change from 0 to 2048 [ 838.800460][ T3302] loop9: p3 p4 < > [ 838.804412][ T3302] loop9: p3 start 11362048 is beyond EOD, truncated [ 838.812672][T21847] loop9: p3 p4 < > [ 838.816687][T21847] loop9: p3 start 11362048 is beyond EOD, truncated [ 838.838012][T21847] dummy0 speed is unknown, defaulting to 1000 [ 838.873583][ T28] audit: type=1400 audit(838.860:14344): avc: denied { mounton } for pid=21846 comm="syz.9.4589" path="/dev/loop9p4" dev="devtmpfs" ino=6021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 839.029438][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4593'. [ 839.049467][T21859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.063956][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4593'. [ 839.133625][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.174531][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4595'. [ 839.277203][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4595'. [ 840.156118][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4595'. [ 840.254616][T21884] loop1: detected capacity change from 0 to 1024 [ 840.295680][T21889] loop5: detected capacity change from 0 to 512 [ 840.346372][T21890] loop9: detected capacity change from 0 to 512 [ 840.349575][T21884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.392483][T21890] EXT4-fs: Ignoring removed nobh option [ 840.421051][T21890] EXT4-fs (loop9): orphan cleanup on readonly fs [ 840.435164][T21890] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4601: EA inode hash validation failed [ 840.449627][T21890] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4601: corrupted inode contents [ 840.461777][T21890] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 840.465160][T21890] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.4601: mark_inode_dirty error [ 840.474424][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 840.474448][ C1] EXT4-fs (loop9): initial error at time 840: ext4_do_update_inode:5569: inode 15 [ 840.474473][ C1] EXT4-fs (loop9): last error at time 840: ext4_do_update_inode:5569: inode 15 [ 840.553220][T21890] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 840.554042][T21890] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4601: corrupted inode contents [ 840.575235][T21890] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 840.575391][T21890] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.4601: mark_inode_dirty error [ 840.595818][T21905] loop5: detected capacity change from 0 to 512 [ 840.597488][T21890] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 840.652174][T21890] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.4601: mark inode dirty (error -117) [ 840.674237][T21890] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 840.681728][T21890] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 840.684592][T21905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.691062][T21890] EXT4-fs (loop9): 1 orphan inode deleted [ 840.721709][T21890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 840.890688][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.932209][T21915] loop9: detected capacity change from 0 to 512 [ 841.706279][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.827389][T21924] loop6: detected capacity change from 0 to 2048 [ 841.909766][ T28] audit: type=1400 audit(841.880:14345): avc: denied { ioctl } for pid=21923 comm="syz.6.4611" path="socket:[86106]" dev="sockfs" ino=86106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 841.941060][ T28] audit: type=1400 audit(841.930:14346): avc: denied { write } for pid=21925 comm="syz.5.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 842.183674][T21939] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.424643][T21949] FAULT_INJECTION: forcing a failure. [ 842.424643][T21949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.471411][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.3.4616 Tainted: G W syzkaller #0 PREEMPT(full) [ 842.471536][T21949] Tainted: [W]=WARN [ 842.471543][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.471554][T21949] Call Trace: [ 842.471560][T21949] [ 842.471567][T21949] __dump_stack+0x1d/0x30 [ 842.471650][T21949] dump_stack_lvl+0x95/0xd0 [ 842.471669][T21949] dump_stack+0x15/0x1b [ 842.471759][T21949] should_fail_ex+0x263/0x280 [ 842.471782][T21949] should_fail_alloc_page+0xf2/0x100 [ 842.471899][T21949] __alloc_frozen_pages_noprof+0x108/0x360 [ 842.471927][T21949] alloc_pages_mpol+0xb3/0x260 [ 842.472003][T21949] alloc_pages_noprof+0x8f/0x130 [ 842.472028][T21949] pte_alloc_one+0x1c/0xc0 [ 842.472048][T21949] __pte_alloc+0x32/0x2a0 [ 842.472137][T21949] walk_pgd_range+0x9f2/0x14d0 [ 842.472159][T21949] ? __pfx_guard_install_set_pte+0x10/0x10 [ 842.472180][T21949] ? __pfx_guard_install_set_pte+0x10/0x10 [ 842.472281][T21949] ? __pfx_guard_install_set_pte+0x10/0x10 [ 842.472299][T21949] ? __pfx_guard_install_set_pte+0x10/0x10 [ 842.472396][T21949] __walk_page_range+0xdd/0x340 [ 842.472414][T21949] ? tlb_finish_mmu+0xeb/0x110 [ 842.472439][T21949] walk_page_range_vma_unsafe+0x2cd/0x320 [ 842.472473][T21949] madvise_vma_behavior+0x170f/0x20c0 [ 842.472567][T21949] ? __rcu_read_unlock+0x4e/0x70 [ 842.472583][T21949] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 842.472602][T21949] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 842.472620][T21949] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 842.472711][T21949] ? __pfx_guard_install_set_pte+0x10/0x10 [ 842.472757][T21949] madvise_do_behavior+0x897/0xa10 [ 842.472845][T21949] do_madvise+0x10e/0x190 [ 842.472867][T21949] __x64_sys_madvise+0x63/0x80 [ 842.472950][T21949] x64_sys_call+0x1eff/0x3020 [ 842.472969][T21949] do_syscall_64+0x12c/0x370 [ 842.472989][T21949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.473066][T21949] RIP: 0033:0x7fd4ce2fc799 [ 842.473079][T21949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.473095][T21949] RSP: 002b:00007fd4ccd36028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 842.473115][T21949] RAX: ffffffffffffffda RBX: 00007fd4ce576090 RCX: 00007fd4ce2fc799 [ 842.473129][T21949] RDX: 0000000000000066 RSI: 0000000000600000 RDI: 0000200000000000 [ 842.473216][T21949] RBP: 00007fd4ccd36090 R08: 0000000000000000 R09: 0000000000000000 [ 842.473227][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.473237][T21949] R13: 00007fd4ce576128 R14: 00007fd4ce576090 R15: 00007fffc7fc5588 [ 842.473302][T21949] [ 842.740904][T21939] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.780908][T21939] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.831507][T21939] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.886363][ T30] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.904041][ T30] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.973700][ T30] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.981992][ T30] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.036971][T21960] loop9: detected capacity change from 0 to 512 [ 843.047371][T21962] program syz.3.4622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.053044][T21963] loop5: detected capacity change from 0 to 512 [ 843.069286][T21963] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 843.090455][T21960] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.109902][T21963] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 843.128119][T21960] __nla_validate_parse: 5 callbacks suppressed [ 843.128155][T21960] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4621'. [ 843.148961][T21963] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 843.158400][T21963] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.4623: Failed to acquire dquot type 1 [ 843.210679][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.248842][T21963] loop5: lost filesystem error report for type 5 error -5 [ 843.256169][T21963] EXT4-fs (loop5): 1 truncate cleaned up [ 843.263373][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 843.263392][ C1] EXT4-fs (loop5): last error at time 843: ext4_acquire_dquot:7001 [ 843.289106][T21963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 843.303099][T21972] loop1: detected capacity change from 0 to 128 [ 843.309830][T21972] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 843.331115][T21972] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 843.341331][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 844.338875][T21959] loop6: detected capacity change from 0 to 2048 [ 844.359799][T21992] netlink: 'syz.3.4630': attribute type 29 has an invalid length. [ 844.376671][T21992] netlink: 'syz.3.4630': attribute type 29 has an invalid length. [ 844.390356][T21994] netlink: 'syz.3.4630': attribute type 29 has an invalid length. [ 844.409974][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.508033][T21998] FAULT_INJECTION: forcing a failure. [ 844.508033][T21998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.521236][T21998] CPU: 0 UID: 0 PID: 21998 Comm: syz.1.4631 Tainted: G W syzkaller #0 PREEMPT(full) [ 844.521262][T21998] Tainted: [W]=WARN [ 844.521268][T21998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.521347][T21998] Call Trace: [ 844.521354][T21998] [ 844.521362][T21998] __dump_stack+0x1d/0x30 [ 844.521385][T21998] dump_stack_lvl+0x95/0xd0 [ 844.521468][T21998] dump_stack+0x15/0x1b [ 844.521484][T21998] should_fail_ex+0x263/0x280 [ 844.521505][T21998] should_fail+0xb/0x20 [ 844.521571][T21998] should_fail_usercopy+0x1a/0x20 [ 844.521596][T21998] _copy_from_user+0x1c/0xb0 [ 844.521634][T21998] ___sys_recvmsg+0xaa/0x3b0 [ 844.521665][T21998] do_recvmmsg+0x1ef/0x560 [ 844.521691][T21998] ? fput+0x8f/0xc0 [ 844.521710][T21998] __x64_sys_recvmmsg+0xe5/0x170 [ 844.521856][T21998] x64_sys_call+0x80f/0x3020 [ 844.521884][T21998] do_syscall_64+0x12c/0x370 [ 844.521906][T21998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.521936][T21998] RIP: 0033:0x7fa54620c799 [ 844.522064][T21998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.522078][T21998] RSP: 002b:00007fa544c1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 844.522124][T21998] RAX: ffffffffffffffda RBX: 00007fa546486180 RCX: 00007fa54620c799 [ 844.522138][T21998] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000009 [ 844.522152][T21998] RBP: 00007fa544c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 844.522164][T21998] R10: 0000000000020003 R11: 0000000000000246 R12: 0000000000000001 [ 844.522175][T21998] R13: 00007fa546486218 R14: 00007fa546486180 R15: 00007ffff8c07de8 [ 844.522252][T21998] [ 844.759765][T22000] loop9: detected capacity change from 0 to 512 [ 844.774252][T21959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.808350][T22000] EXT4-fs: Ignoring removed nobh option [ 844.828608][T21959] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 844.858454][T21959] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 844.880832][T21959] EXT4-fs (loop6): This should not happen!! Data will be lost [ 844.880832][T21959] [ 844.897111][T21959] EXT4-fs (loop6): Total free blocks count 0 [ 844.922464][T21959] EXT4-fs (loop6): Free/Dirty block details [ 844.939693][T22000] EXT4-fs (loop9): orphan cleanup on readonly fs [ 844.954165][T21959] EXT4-fs (loop6): free_blocks=66060288 [ 844.956904][T22000] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4632: EA inode hash validation failed [ 844.969073][T22011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4635'. [ 844.972989][T22000] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4632: corrupted inode contents [ 844.989484][T21959] EXT4-fs (loop6): dirty_blocks=48 [ 844.993603][T22000] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 844.999299][T21959] EXT4-fs (loop6): Block reservation details [ 845.015176][T21959] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 845.040212][T22000] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.4632: mark_inode_dirty error [ 845.051744][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 845.051765][ C0] EXT4-fs (loop9): initial error at time 845: ext4_do_update_inode:5569: inode 15 [ 845.051797][ C0] EXT4-fs (loop9): last error at time 845: ext4_do_update_inode:5569: inode 15 [ 845.082574][T22012] sctp: [Deprecated]: syz.3.4633 (pid 22012) Use of int in maxseg socket option. [ 845.082574][T22012] Use struct sctp_assoc_value instead [ 845.126564][ T4799] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 845.196524][T22000] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 845.198303][T22000] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4632: corrupted inode contents [ 845.220200][T22000] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 845.220721][T22000] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.4632: mark_inode_dirty error [ 845.242525][T22000] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 845.242910][T22000] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.4632: mark inode dirty (error -117) [ 845.264824][T22000] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 845.265235][T22000] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 845.387265][T22000] EXT4-fs (loop9): 1 orphan inode deleted [ 845.393573][T22000] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 845.405898][ T28] audit: type=1326 audit(845.360:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.438321][ T28] audit: type=1326 audit(845.370:14348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.465162][ T28] audit: type=1326 audit(845.370:14349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.488715][ T28] audit: type=1326 audit(845.370:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.498862][T22024] loop6: detected capacity change from 0 to 2048 [ 845.526645][ T28] audit: type=1326 audit(845.370:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.527030][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.559368][ T28] audit: type=1326 audit(845.370:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.564885][T22022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4638'. [ 845.583268][ T28] audit: type=1326 audit(845.370:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.614538][ T28] audit: type=1326 audit(845.370:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.637996][T22024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.650752][ T28] audit: type=1326 audit(845.370:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22010 comm="syz.5.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5fa43c799 code=0x7ffc0000 [ 845.753753][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.771700][T22031] syzkaller1: entered promiscuous mode [ 845.777578][T22031] syzkaller1: entered allmulticast mode [ 845.848057][T22042] loop5: detected capacity change from 0 to 2048 [ 845.871975][T22047] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.900515][T22042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.910084][T22052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.922548][T22052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.937855][T22053] 9p: Could not find request transport: fd0x0000000000000006 [ 845.956665][T22046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4642'. [ 845.991223][T22052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.999651][T22046] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4642'. [ 846.025299][T22052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.037029][T22046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4642'. [ 846.076506][T22053] loop6: detected capacity change from 0 to 512 [ 846.098860][T22046] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4642'. [ 846.151259][T22053] msdos: Unknown parameter 'tTC' [ 846.333567][T22057] loop6: detected capacity change from 0 to 512 [ 846.342648][T22057] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 846.465222][T22061] loop9: detected capacity change from 0 to 512 [ 846.473207][T22061] EXT4-fs: Ignoring removed nobh option [ 846.484286][T22061] EXT4-fs (loop9): orphan cleanup on readonly fs [ 846.497516][T22047] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.508417][T22061] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4649: EA inode hash validation failed [ 846.537349][T22061] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4649: corrupted inode contents [ 846.549540][T22061] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 846.549697][T22061] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.4649: mark_inode_dirty error [ 846.558839][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 846.558858][ C1] EXT4-fs (loop9): initial error at time 846: ext4_do_update_inode:5569: inode 15 [ 846.558886][ C1] EXT4-fs (loop9): last error at time 846: ext4_do_update_inode:5569: inode 15 [ 846.595080][T22061] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 846.595264][T22061] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.4649: corrupted inode contents [ 846.616466][T22061] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 846.617453][T22057] syzkaller1: entered promiscuous mode [ 846.620700][T22061] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.4649: mark_inode_dirty error [ 846.626862][T22057] syzkaller1: entered allmulticast mode [ 846.640777][T22061] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 846.656207][T18714] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 846.656418][T22061] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.4649: mark inode dirty (error -117) [ 846.668876][T18714] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 846.680101][T22061] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 846.692627][T18714] EXT4-fs (loop5): This should not happen!! Data will be lost [ 846.692627][T18714] [ 846.709049][T22061] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 846.726596][T18714] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 846.733006][T22061] EXT4-fs (loop9): 1 orphan inode deleted [ 846.746728][T18714] EXT4-fs (loop5): This should not happen!! Data will be lost [ 846.746728][T18714] [ 846.751906][T22061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 846.773843][T22047] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.821008][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.823286][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.840314][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4651'. [ 846.851267][T22047] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.935598][ T4799] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.955542][ T4799] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.978982][ T4799] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.997442][ T4799] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.108449][T22082] loop5: detected capacity change from 0 to 512 [ 847.180733][T22082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.209093][T22082] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4657: corrupted xattr block 33: e_value size too large [ 847.231637][T22082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 847.240950][T22082] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4657: corrupted xattr block 33: e_value size too large [ 847.255823][T22082] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 847.287949][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.333033][T22088] loop5: detected capacity change from 0 to 512 [ 847.373183][T22088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.398413][T22088] FAULT_INJECTION: forcing a failure. [ 847.398413][T22088] name failslab, interval 1, probability 0, space 0, times 0 [ 847.411262][T22088] CPU: 1 UID: 0 PID: 22088 Comm: syz.5.4659 Tainted: G W syzkaller #0 PREEMPT(full) [ 847.411294][T22088] Tainted: [W]=WARN [ 847.411301][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.411313][T22088] Call Trace: [ 847.411320][T22088] [ 847.411351][T22088] __dump_stack+0x1d/0x30 [ 847.411373][T22088] dump_stack_lvl+0x95/0xd0 [ 847.411392][T22088] dump_stack+0x15/0x1b [ 847.411412][T22088] should_fail_ex+0x263/0x280 [ 847.411437][T22088] should_failslab+0x8c/0xb0 [ 847.411470][T22088] kmem_cache_alloc_noprof+0x66/0x400 [ 847.411492][T22088] ? do_getname+0x2e/0x1c0 [ 847.411513][T22088] do_getname+0x2e/0x1c0 [ 847.411598][T22088] getname_flags+0x1d/0x30 [ 847.411615][T22088] path_setxattrat+0x20f/0x310 [ 847.411649][T22088] __x64_sys_lsetxattr+0x71/0x90 [ 847.411746][T22088] x64_sys_call+0x1300/0x3020 [ 847.411778][T22088] do_syscall_64+0x12c/0x370 [ 847.411890][T22088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.411918][T22088] RIP: 0033:0x7ff5fa43c799 [ 847.411941][T22088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.411961][T22088] RSP: 002b:00007ff5f8e8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 847.411997][T22088] RAX: ffffffffffffffda RBX: 00007ff5fa6b5fa0 RCX: 00007ff5fa43c799 [ 847.412085][T22088] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000140 [ 847.412104][T22088] RBP: 00007ff5f8e8f090 R08: 0000000000000001 R09: 0000000000000000 [ 847.412152][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.412169][T22088] R13: 00007ff5fa6b6038 R14: 00007ff5fa6b5fa0 R15: 00007fff25eb8b18 [ 847.412193][T22088] [ 847.647343][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.721347][T22095] loop5: detected capacity change from 0 to 2048 [ 847.759546][T22095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.003417][T22102] dummy0 speed is unknown, defaulting to 1000 [ 848.066007][ T4799] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 848.099075][ T4799] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 848.118945][ T4799] EXT4-fs (loop5): This should not happen!! Data will be lost [ 848.118945][ T4799] [ 848.154239][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 848.185957][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 848.185957][ T12] [ 848.297478][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.388862][T22118] loop5: detected capacity change from 0 to 1024 [ 848.414467][T22118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.444036][T22124] geneve2: entered promiscuous mode [ 848.449839][ T4799] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.468206][ T4799] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.498454][ T4799] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.516998][ T4799] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.595088][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 848.639025][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 848.672175][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 848.715586][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 848.800267][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 848.824232][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 849.423232][T22155] dummy0 speed is unknown, defaulting to 1000 [ 850.531445][T22174] loop6: detected capacity change from 0 to 8192 [ 851.198980][ T2999] loop6: p1 < > p2 p4 < p5 > [ 851.203726][ T2999] loop6: partition table partially beyond EOD, truncated [ 851.218945][ T2999] loop6: p1 start 134217728 is beyond EOD, truncated [ 851.235820][ T2999] loop6: p2 size 591360 extends beyond EOD, truncated [ 851.249855][ T2999] loop6: p5 size 591360 extends beyond EOD, truncated [ 851.308986][T22174] loop6: p1 < > p2 p4 < p5 > [ 851.313676][T22174] loop6: partition table partially beyond EOD, truncated [ 851.320839][T22174] loop6: p1 start 134217728 is beyond EOD, truncated [ 851.327511][T22174] loop6: p2 size 591360 extends beyond EOD, truncated [ 851.335610][T22174] loop6: p5 size 591360 extends beyond EOD, truncated [ 851.369185][T22179] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4680'. [ 851.386645][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.449264][T22181] loop5: detected capacity change from 0 to 512 [ 851.489805][T22181] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 851.525080][T22181] EXT4-fs (loop5): 1 truncate cleaned up [ 851.559234][T22181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.600612][T22181] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.4682: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 851.668745][T22181] EXT4-fs (loop5): Remounting filesystem read-only [ 851.675281][T22181] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.4682: Deleting old file: nlink 4, error=-117 [ 851.739322][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.841445][T22192] loop6: detected capacity change from 0 to 512 [ 851.857504][T22192] EXT4-fs: Ignoring removed nobh option [ 851.875905][T22192] EXT4-fs (loop6): orphan cleanup on readonly fs [ 851.890894][T22192] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.4681: EA inode hash validation failed [ 851.904353][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4684'. [ 851.938914][T22192] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4681: corrupted inode contents [ 851.959250][T22192] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 851.961045][T22194] vlan2: entered allmulticast mode [ 851.968772][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 851.970871][T22192] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.4681: mark_inode_dirty error [ 851.975286][ C1] EXT4-fs (loop6): initial error at time 851: ext4_do_update_inode:5569 [ 851.981862][T22192] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 851.992968][ C1] : inode 15 [ 851.992991][ C1] EXT4-fs (loop6): last error at time 851: ext4_do_update_inode:5569: inode 15 [ 852.002005][T22192] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4681: corrupted inode contents [ 852.037961][T22192] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 852.038141][T22192] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.4681: mark_inode_dirty error [ 852.038653][T22186] dummy0 speed is unknown, defaulting to 1000 [ 852.047729][T22192] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 852.047853][T22192] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.4681: mark inode dirty (error -117) [ 852.047879][T22192] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 852.131941][T22192] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 852.150622][T22192] EXT4-fs (loop6): 1 orphan inode deleted [ 852.160216][T22192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 852.219601][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.249580][T22197] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4685'. [ 852.265865][T22197] loop9: detected capacity change from 0 to 1024 [ 852.301339][T22197] ext4: Unknown parameter 'uid' [ 852.513263][T22206] dummy0 speed is unknown, defaulting to 1000 [ 853.748240][T22218] FAULT_INJECTION: forcing a failure. [ 853.748240][T22218] name failslab, interval 1, probability 0, space 0, times 0 [ 853.963708][T22218] CPU: 1 UID: 0 PID: 22218 Comm: syz.9.4690 Tainted: G W syzkaller #0 PREEMPT(full) [ 853.963806][T22218] Tainted: [W]=WARN [ 853.963813][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 853.963825][T22218] Call Trace: [ 853.963832][T22218] [ 853.963841][T22218] __dump_stack+0x1d/0x30 [ 853.963874][T22218] dump_stack_lvl+0x95/0xd0 [ 853.963896][T22218] dump_stack+0x15/0x1b [ 853.963978][T22218] should_fail_ex+0x263/0x280 [ 853.964002][T22218] should_failslab+0x8c/0xb0 [ 853.964090][T22218] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 853.964124][T22218] ? __alloc_skb+0x2d6/0x690 [ 853.964149][T22218] __alloc_skb+0x2d6/0x690 [ 853.964172][T22218] ? __alloc_skb+0x200/0x690 [ 853.964195][T22218] alloc_skb_with_frags+0x7d/0x470 [ 853.964239][T22218] sock_alloc_send_pskb+0x44d/0x500 [ 853.964273][T22218] raw_send_hdrinc+0x18f/0xa10 [ 853.964320][T22218] ? xfrm_lookup_route+0xd6/0x110 [ 853.964370][T22218] ? ip_route_output_flow+0xdb/0x110 [ 853.964393][T22218] raw_sendmsg+0xf05/0x1140 [ 853.964428][T22218] ? __pfx_raw_sendmsg+0x10/0x10 [ 853.964521][T22218] inet_sendmsg+0xc5/0xd0 [ 853.964547][T22218] ? __pfx_inet_sendmsg+0x10/0x10 [ 853.964575][T22218] ____sys_sendmsg+0x519/0x5b0 [ 853.964657][T22218] ___sys_sendmsg+0x195/0x1e0 [ 853.964696][T22218] __sys_sendmmsg+0x185/0x320 [ 853.964757][T22218] __x64_sys_sendmmsg+0x57/0x70 [ 853.964831][T22218] x64_sys_call+0x27aa/0x3020 [ 853.964854][T22218] do_syscall_64+0x12c/0x370 [ 853.964876][T22218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.964945][T22218] RIP: 0033:0x7fe2d373c799 [ 853.964961][T22218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.965010][T22218] RSP: 002b:00007fe2d218f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.965037][T22218] RAX: ffffffffffffffda RBX: 00007fe2d39b5fa0 RCX: 00007fe2d373c799 [ 853.965051][T22218] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 853.965063][T22218] RBP: 00007fe2d218f090 R08: 0000000000000000 R09: 0000000000000000 [ 853.965075][T22218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.965087][T22218] R13: 00007fe2d39b6038 R14: 00007fe2d39b5fa0 R15: 00007ffd65fad018 [ 853.965113][T22218] [ 854.559352][T22234] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4695'. [ 855.547594][T22253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4702'. [ 855.791635][T22265] loop5: detected capacity change from 0 to 512 [ 855.801374][T22265] EXT4-fs: Ignoring removed nobh option [ 855.811074][T22264] syzkaller0: entered promiscuous mode [ 855.819804][T22265] EXT4-fs (loop5): orphan cleanup on readonly fs [ 855.826563][T22264] syzkaller0: entered allmulticast mode [ 855.834768][T22265] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.4707: EA inode hash validation failed [ 855.856872][T22265] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.4707: corrupted inode contents [ 855.871028][T22265] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 855.871259][T22265] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.4707: mark_inode_dirty error [ 855.878873][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 855.881064][T22265] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 855.892216][ C1] EXT4-fs (loop5): initial error at time 855: ext4_do_update_inode:5569 [ 855.898653][T22265] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.4707: corrupted inode contents [ 855.907876][ C1] : inode 15 [ 855.917909][T22265] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 855.928464][ C1] [ 855.931900][T22265] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.4707: mark_inode_dirty error [ 855.931924][T22265] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 855.932159][T22265] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.4707: mark inode dirty (error -117) [ 855.941433][ C1] EXT4-fs (loop5): last error at time 855: ext4_xattr_delete_inode:2999 [ 855.943479][T22265] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 855.943649][T22265] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 855.955587][ C1] : inode 15 [ 855.964723][T22265] EXT4-fs (loop5): 1 orphan inode deleted [ 855.965279][T22265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 855.977745][ C1] [ 856.042068][T16987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.289597][T22274] loop5: detected capacity change from 0 to 1024 [ 856.296235][T22274] EXT4-fs: Ignoring removed i_version option [ 856.302310][T22274] EXT4-fs: Ignoring removed bh option [ 856.307706][T22274] EXT4-fs: inline encryption not supported [ 856.319900][T22279] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4710'. [ 856.336340][T22274] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 856.378845][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4709'. [ 856.528403][T22276] vlan3: entered allmulticast mode [ 857.400921][T22274] __quota_error: 3 callbacks suppressed [ 857.400963][T22274] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 857.467633][T22274] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 857.482613][T22274] EXT4-fs (loop5): mount failed [ 857.717671][T22270] dummy0 speed is unknown, defaulting to 1000 [ 857.748563][T22294] loop9: detected capacity change from 0 to 512 [ 857.850259][T22294] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.875560][T22300] FAULT_INJECTION: forcing a failure. [ 857.875560][T22300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.888857][T22300] CPU: 1 UID: 0 PID: 22300 Comm: syz.6.4713 Tainted: G W syzkaller #0 PREEMPT(full) [ 857.888916][T22300] Tainted: [W]=WARN [ 857.888923][T22300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.888935][T22300] Call Trace: [ 857.888942][T22300] [ 857.888974][T22300] __dump_stack+0x1d/0x30 [ 857.889060][T22300] dump_stack_lvl+0x95/0xd0 [ 857.889089][T22300] dump_stack+0x15/0x1b [ 857.889109][T22300] should_fail_ex+0x263/0x280 [ 857.889133][T22300] should_fail+0xb/0x20 [ 857.889172][T22300] should_fail_usercopy+0x1a/0x20 [ 857.889197][T22300] _copy_from_user+0x1c/0xb0 [ 857.889281][T22300] ___sys_recvmsg+0xaa/0x3b0 [ 857.889383][T22300] do_recvmmsg+0x1ef/0x560 [ 857.889416][T22300] ? fput+0x8f/0xc0 [ 857.889440][T22300] __x64_sys_recvmmsg+0xe5/0x170 [ 857.889492][T22300] x64_sys_call+0x80f/0x3020 [ 857.889515][T22300] do_syscall_64+0x12c/0x370 [ 857.889615][T22300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.889635][T22300] RIP: 0033:0x7fd71bdcc799 [ 857.889651][T22300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.889668][T22300] RSP: 002b:00007fd71a7e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 857.889688][T22300] RAX: ffffffffffffffda RBX: 00007fd71c046180 RCX: 00007fd71bdcc799 [ 857.889702][T22300] RDX: 000000000000009e RSI: 0000200000000440 RDI: 0000000000000007 [ 857.889754][T22300] RBP: 00007fd71a7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 857.889767][T22300] R10: 0000000000020003 R11: 0000000000000246 R12: 0000000000000001 [ 857.889780][T22300] R13: 00007fd71c046218 R14: 00007fd71c046180 R15: 00007fffc646c198 [ 857.889800][T22300] [ 858.233497][T22294] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4714'. [ 858.446732][T22307] loop6: detected capacity change from 0 to 128 [ 858.559320][T22307] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 858.722108][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4717'. [ 858.772293][T17853] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 858.796460][T22315] netlink: 'syz.6.4719': attribute type 1 has an invalid length. [ 858.821777][T22313] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4718'. [ 858.830877][T22313] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4718'. [ 858.842231][T22313] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4718'. [ 858.854354][T22313] x_tables: duplicate underflow at hook 1 [ 858.919355][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4720'. [ 859.004775][ T8766] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.014272][ T8766] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.022755][ T8766] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.032181][ T8766] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.077883][ T28] audit: type=1400 audit(859.060:14359): avc: denied { connect } for pid=22319 comm="syz.6.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 859.143222][T22320] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.150452][T22320] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.166921][T22320] team0: left allmulticast mode [ 859.171898][T22320] team_slave_0: left allmulticast mode [ 859.177393][T22320] team_slave_1: left allmulticast mode [ 859.183265][T22320] dummy0: left allmulticast mode [ 859.234592][T22320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.245859][T22320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.255963][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.370520][ T8766] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.390088][ T8766] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.398492][ T8766] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.407369][ T8766] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.415982][ T8766] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.427574][ T8766] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.435573][T22331] loop9: detected capacity change from 0 to 2048 [ 859.436464][ T8766] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.453233][ T8766] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.487906][T22331] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.502341][T22331] FAULT_INJECTION: forcing a failure. [ 859.502341][T22331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.519214][T22331] CPU: 0 UID: 0 PID: 22331 Comm: syz.9.4725 Tainted: G W syzkaller #0 PREEMPT(full) [ 859.519245][T22331] Tainted: [W]=WARN [ 859.519251][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.519262][T22331] Call Trace: [ 859.519268][T22331] [ 859.519277][T22331] __dump_stack+0x1d/0x30 [ 859.519359][T22331] dump_stack_lvl+0x95/0xd0 [ 859.519378][T22331] dump_stack+0x15/0x1b [ 859.519394][T22331] should_fail_ex+0x263/0x280 [ 859.519414][T22331] should_fail+0xb/0x20 [ 859.519458][T22331] should_fail_usercopy+0x1a/0x20 [ 859.519481][T22331] _copy_to_user+0x20/0xa0 [ 859.519526][T22331] simple_read_from_buffer+0xb5/0x130 [ 859.519632][T22331] proc_fail_nth_read+0x10e/0x150 [ 859.519659][T22331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.519703][T22331] vfs_read+0x1ab/0x7f0 [ 859.519730][T22331] ? __rcu_read_unlock+0x4e/0x70 [ 859.519831][T22331] ? __fget_files+0x184/0x1c0 [ 859.519853][T22331] ? mutex_lock+0x57/0x90 [ 859.519881][T22331] ksys_read+0xdc/0x1a0 [ 859.519927][T22331] __x64_sys_read+0x40/0x50 [ 859.519941][T22331] x64_sys_call+0x2886/0x3020 [ 859.519960][T22331] do_syscall_64+0x12c/0x370 [ 859.519979][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.520059][T22331] RIP: 0033:0x7fe2d36fcfce [ 859.520072][T22331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.520086][T22331] RSP: 002b:00007fe2d218efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.520102][T22331] RAX: ffffffffffffffda RBX: 00007fe2d218f6c0 RCX: 00007fe2d36fcfce [ 859.520113][T22331] RDX: 000000000000000f RSI: 00007fe2d218f0a0 RDI: 0000000000000005 [ 859.520152][T22331] RBP: 00007fe2d218f090 R08: 0000000000000000 R09: 0000000000000000 [ 859.520165][T22331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.520177][T22331] R13: 00007fe2d39b6038 R14: 00007fe2d39b5fa0 R15: 00007ffd65fad018 [ 859.520269][T22331] [ 859.756923][T22337] loop1: detected capacity change from 0 to 2048 [ 859.760665][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.767266][T22337] ext4: Unknown parameter 'smackfstransmute' [ 859.943938][T22343] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.296159][T22356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.310487][T22356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.334511][T22356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.509177][T22356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.724792][T22351] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.858584][T22351] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.898929][T22371] dummy0 speed is unknown, defaulting to 1000 [ 860.967854][T22373] loop9: detected capacity change from 0 to 512 [ 860.976326][T22351] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.005987][T22373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.077795][T22364] vlan0: entered allmulticast mode [ 861.098105][T22378] __nla_validate_parse: 1 callbacks suppressed [ 861.098171][T22378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4735'. [ 861.159025][T22351] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.229027][T18717] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.255124][ T8766] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.270948][ T8766] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.288889][ T8766] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.350731][T22390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4738'. [ 861.389760][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4739'. [ 861.446383][T22397] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4739'. [ 861.465867][T22398] vlan3: entered allmulticast mode [ 861.585350][T22387] dummy0 speed is unknown, defaulting to 1000 [ 861.593143][T22406] dummy0 speed is unknown, defaulting to 1000 [ 861.648766][T22407] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4741'. [ 861.707963][T22411] loop1: detected capacity change from 0 to 512 [ 861.741794][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.752903][T22411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.867040][T22417] loop9: detected capacity change from 0 to 512 [ 861.880906][T22417] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 861.881702][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.955591][T22417] syzkaller1: entered promiscuous mode [ 861.966014][T22417] syzkaller1: entered allmulticast mode [ 861.973002][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4748'. [ 861.987459][T22427] loop5: detected capacity change from 0 to 128 [ 861.998561][T22428] loop1: detected capacity change from 0 to 1024 [ 862.049015][T22428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.357586][T22444] loop6: detected capacity change from 0 to 512 [ 862.414529][ T28] audit: type=1326 audit(862.400:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22447 comm="syz.6.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 862.441252][ T28] audit: type=1326 audit(862.400:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22447 comm="syz.6.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 862.484498][ T28] audit: type=1326 audit(862.420:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22447 comm="syz.6.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 862.484617][ T28] audit: type=1326 audit(862.420:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22447 comm="syz.6.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 862.484708][ T28] audit: type=1326 audit(862.420:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22447 comm="syz.6.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71bdcc799 code=0x7ffc0000 [ 862.584500][T22455] dummy0 speed is unknown, defaulting to 1000 [ 862.683586][T22462] EXT4-fs: inline encryption not supported [ 862.698307][T22462] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 862.714324][T22464] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4756'. [ 862.723499][T22464] netlink: 23 bytes leftover after parsing attributes in process `syz.9.4756'. [ 862.734714][T22464] netlink: 23 bytes leftover after parsing attributes in process `syz.9.4756'. [ 862.739170][T22462] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.4759: lblock 2 mapped to illegal pblock 2 (length 1) [ 862.753751][T22464] x_tables: duplicate underflow at hook 1 [ 862.758117][T22462] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 862.768773][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 862.778399][T22462] EXT4-fs (loop5): Remounting filesystem read-only [ 862.784273][ C0] EXT4-fs (loop5): initial error at time 862: ext4_map_blocks:776: inode 3: block 2 [ 862.791050][T22462] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 862.800217][ C0] EXT4-fs (loop5): last error at time 862: ext4_map_blocks:776: inode 3: block 2 [ 862.808571][T22462] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 862.826552][T22462] EXT4-fs (loop5): 1 orphan inode deleted [ 862.838202][T22462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.851843][T22462] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.863533][T22473] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4761'. [ 862.892631][T22462] set_capacity_and_notify: 1 callbacks suppressed [ 862.892644][T22462] loop5: detected capacity change from 0 to 128 [ 863.022815][T22488] geneve2: left promiscuous mode [ 863.037751][ T28] audit: type=1400 audit(863.020:14365): avc: denied { audit_write } for pid=22487 comm="syz.6.4764" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 863.063822][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.068002][ T28] audit: type=1107 audit(863.020:14366): pid=22487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 863.086204][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.128147][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.137075][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.146250][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.171851][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.238884][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.282383][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.597312][T22516] Set syz1 is full, maxelem 65536 reached [ 865.729260][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.950957][T22554] loop9: detected capacity change from 0 to 1024 [ 865.957919][T22554] EXT4-fs: dax option not supported [ 866.251177][T22557] tmpfs: Bad value for 'mpol' [ 866.446617][T22573] __nla_validate_parse: 2 callbacks suppressed [ 866.446630][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'. [ 866.872187][T22585] loop6: detected capacity change from 0 to 1024 [ 866.905511][T22585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.990599][T22593] loop1: detected capacity change from 0 to 512 [ 867.031712][T22593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.145923][T22600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4791'. [ 867.634198][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.805862][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.974392][T22609] loop1: detected capacity change from 0 to 512 [ 868.060808][T22611] loop9: detected capacity change from 0 to 512 [ 868.111384][T22611] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.4797: Invalid inode bitmap blk 4 in block_group 0 [ 868.142741][T22613] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4793'. [ 868.165040][T22613] loop6: detected capacity change from 0 to 128 [ 868.178088][T22611] loop9: lost filesystem error report for type 5 error -117 [ 868.178775][T22613] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 868.183257][T22611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.212876][T22613] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 868.265497][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.329730][T22621] loop9: detected capacity change from 0 to 512 [ 868.343974][T22621] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 868.387641][T22623] netlink: 'syz.9.4800': attribute type 1 has an invalid length. [ 868.413908][T22623] bond1: entered promiscuous mode [ 868.430922][T22623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.485407][ T28] audit: type=1400 audit(868.470:14367): avc: denied { ioctl } for pid=22628 comm="syz.3.4801" path="socket:[87693]" dev="sockfs" ino=87693 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 868.531449][T22638] loop9: detected capacity change from 0 to 512 [ 868.570730][T22641] loop1: detected capacity change from 0 to 1024 [ 868.581667][T22629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4801'. [ 868.593913][T22629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'. [ 868.605139][T22629] netlink: 'syz.3.4801': attribute type 30 has an invalid length. [ 868.627717][T22641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.640748][ T4799] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.641344][T22638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.649131][ T4799] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.669624][ T4799] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.677849][ T4799] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.729654][T22647] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4804'. [ 868.876700][T22638] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4806'. [ 868.966025][T22654] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4809'. [ 869.308049][T22663] loop6: detected capacity change from 0 to 1024 [ 869.314771][T22663] EXT4-fs: Ignoring removed i_version option [ 869.320875][T22663] EXT4-fs: Ignoring removed bh option [ 869.326301][T22663] EXT4-fs: inline encryption not supported [ 869.382455][T22663] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 869.515252][T22663] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 869.675138][T19788] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.170942][T22697] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4819'. [ 873.190608][T22697] loop6: detected capacity change from 0 to 128 [ 873.201739][T22697] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 873.228105][T22695] loop5: detected capacity change from 0 to 512 [ 873.244894][T22697] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 873.282567][T22695] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 873.338360][T15296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.385537][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4824'. [ 873.426909][T22709] dummy0 speed is unknown, defaulting to 1000 [ 873.440482][T22696] syzkaller1: entered promiscuous mode [ 873.445961][T22696] syzkaller1: entered allmulticast mode [ 873.485671][T22710] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4823'. [ 873.827957][T22717] loop6: detected capacity change from 0 to 512 [ 873.862612][T22717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.966058][T22722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4825'. [ 875.855856][T17853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.745136][T22752] sctp: [Deprecated]: syz.9.4834 (pid 22752) Use of int in maxseg socket option. [ 876.745136][T22752] Use struct sctp_assoc_value instead [ 876.951111][T22759] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4835'. [ 876.980394][T22759] loop1: detected capacity change from 0 to 128 [ 876.992652][T22759] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 877.010917][T22759] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 877.657024][T22763] loop5: detected capacity change from 0 to 512 [ 877.669918][T22763] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 877.764515][ T3302] ================================================================== [ 877.772610][ T3302] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 877.779553][ T3302] [ 877.781864][ T3302] write to 0xffff888103cb325c of 4 bytes by task 6334 on cpu 0: [ 877.789486][ T3302] shmem_mknod+0x143/0x170 [ 877.793905][ T3302] shmem_create+0x34/0x50 [ 877.798230][ T3302] path_openat+0xd75/0x2050 [ 877.802728][ T3302] do_file_open+0x16c/0x290 [ 877.807229][ T3302] do_sys_openat2+0x94/0x130 [ 877.811818][ T3302] __x64_sys_openat+0xf2/0x120 [ 877.816589][ T3302] x64_sys_call+0x1e39/0x3020 [ 877.821260][ T3302] do_syscall_64+0x12c/0x370 [ 877.822753][T22771] syzkaller1: entered promiscuous mode [ 877.825837][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.825858][ T3302] [ 877.825863][ T3302] read to 0xffff888103cb325c of 4 bytes by task 3302 on cpu 1: [ 877.846972][ T3302] fill_mg_cmtime+0x5b/0x270 [ 877.851554][ T3302] generic_fillattr+0x24a/0x340 [ 877.856386][ T3302] shmem_getattr+0x181/0x200 [ 877.860963][ T3302] vfs_getattr_nosec+0x146/0x1e0 [ 877.865883][ T3302] vfs_getattr+0x48/0x60 [ 877.870106][ T3302] vfs_statx_path+0x28/0x140 [ 877.874682][ T3302] vfs_statx+0xc4/0x170 [ 877.878818][ T3302] vfs_fstatat+0x118/0x170 [ 877.883214][ T3302] __se_sys_newfstatat+0x55/0x3e0 [ 877.888220][ T3302] __x64_sys_newfstatat+0x55/0x70 [ 877.893225][ T3302] x64_sys_call+0x2c64/0x3020 [ 877.897888][ T3302] do_syscall_64+0x12c/0x370 [ 877.902461][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.908336][ T3302] [ 877.910639][ T3302] value changed: 0x2d9bcbfe -> 0x2da2cfe0 [ 877.916332][ T3302] [ 877.918631][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 877.924767][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 877.935252][ T3302] Tainted: [W]=WARN [ 877.939032][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 877.949068][ T3302] ================================================================== [ 877.965716][T22771] syzkaller1: entered allmulticast mode [ 877.974888][T22770] syzkaller0: entered promiscuous mode [ 877.980939][T22770] syzkaller0: entered allmulticast mode [ 878.084211][T22765] loop9: detected capacity change from 0 to 8192 [ 878.131573][ T3302] loop9: p1 < > p2 p4 < p5 > [ 878.137119][ T3302] loop9: partition table partially beyond EOD, truncated [ 878.144394][ T3302] loop9: p1 start 134217728 is beyond EOD, truncated [ 878.151590][ T3302] loop9: p2 size 591360 extends beyond EOD, truncated [ 878.165194][ T3302] loop9: p5 size 591360 extends beyond EOD, truncated [ 878.184108][T22765] loop9: p1 < > p2 p4 < p5 > [ 878.189003][T22765] loop9: partition table partially beyond EOD, truncated [ 878.196569][T22765] loop9: p1 start 134217728 is beyond EOD, truncated [ 878.203490][T22765] loop9: p2 size 591360 extends beyond EOD, truncated [ 878.212358][T22765] loop9: p5 size 591360 extends beyond EOD, truncated [ 878.226953][T22765] FAULT_INJECTION: forcing a failure. [ 878.226953][T22765] name failslab, interval 1, probability 0, space 0, times 0 [ 878.240606][T22765] CPU: 1 UID: 0 PID: 22765 Comm: syz.9.4838 Tainted: G W syzkaller #0 PREEMPT(full) [ 878.240706][T22765] Tainted: [W]=WARN [ 878.240712][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.240722][T22765] Call Trace: [ 878.240727][T22765] [ 878.240733][T22765] __dump_stack+0x1d/0x30 [ 878.240754][T22765] dump_stack_lvl+0x95/0xd0 [ 878.240816][T22765] dump_stack+0x15/0x1b [ 878.240832][T22765] should_fail_ex+0x263/0x280 [ 878.240852][T22765] ? resv_map_alloc+0x32/0x190 [ 878.240871][T22765] should_failslab+0x8c/0xb0 [ 878.240964][T22765] __kmalloc_cache_noprof+0x5f/0x410 [ 878.241062][T22765] ? vfs_write+0x86e/0x9f0 [ 878.241085][T22765] resv_map_alloc+0x32/0x190 [ 878.241103][T22765] hugetlbfs_get_inode+0x67/0x380 [ 878.241124][T22765] ? mutex_unlock+0x4e/0x90 [ 878.241152][T22765] hugetlb_file_setup+0x192/0x3d0 [ 878.241172][T22765] ksys_mmap_pgoff+0x156/0x310 [ 878.241203][T22765] x64_sys_call+0x14df/0x3020 [ 878.241222][T22765] do_syscall_64+0x12c/0x370 [ 878.241240][T22765] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 878.241278][T22765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.241295][T22765] RIP: 0033:0x7fe2d373c799 [ 878.241308][T22765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.241323][T22765] RSP: 002b:00007fe2d218f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 878.241393][T22765] RAX: ffffffffffffffda RBX: 00007fe2d39b5fa0 RCX: 00007fe2d373c799 [ 878.241404][T22765] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 878.241459][T22765] RBP: 00007fe2d218f090 R08: ffffffffffffffff R09: 0000000000000000 [ 878.241470][T22765] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 878.241480][T22765] R13: 00007fe2d39b6038 R14: 00007fe2d39b5fa0 R15: 00007ffd65fad018 [ 878.241495][T22765]