last executing test programs: 7m59.751062499s ago: executing program 1 (id=26): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000100)=""/120, 0x78, 0x40000100, &(0x7f0000000180)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1008, 0x1000}, 0x0, &(0x7f0000000480), &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 7m59.40314443s ago: executing program 1 (id=27): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)="0d9cdca9632436cdf30962a0f62e2238b6478ec224546b2b6f300ba837a69643328ccd6733c1ee29ff2669476cddeb54672cdb21bffa56985e431ade062bf1d68741eaa93a035de600377b0a35e3ee941f02efaf1958272dc9a1ea2358cbb8bfa982837a2155079430ccc71e0b14ca17de66f2cc5eeb3489a3fe23f11f92cceb857a9578abb3868e09f189adbe5a2947e106977bfd5351441c88557c64480381ab9f7a1213c87e718597e704dd5139a4beeba9c071be2ce7553429f97bb573ac60c6535bd837336e11a4ca7253b7faac4328a9aeddc23bb6d6139168ae605b6a5a20c373c542ce4c2492843ada4f8a2b53efa9792121fc48bb5c81a2b1c3a675d8f6cfb939377d8349cbb3ae06a64dbeeb7698cb76b1ca519a0cda0969eaf711576b981336bb361bbe0d493b5f20bd0e9e20af2542e80bcd96459715caa61aab0eaf80e05d5d9e5489e38ff672e90086d14e8dcb356ef43fd7c7a85f0831d7587b56b7223cbb305f5ed2b01acfa60d083f8ef033df28242f43578f74172847cac10da27852732d4d61211d0d5ee24869d146db911407deac26c8c900d8bca1263504aec4447f5c22c08bfbf2ce7ed6897968c73f5a181aab59d3dbee51dfdccf051606bb9434d936c45bd665466f1acca1ec0753d2e9f6b25fe80b7004d3bb567f25816092757fe487df0b7423b9e50387df1ff04c45da8e290f315c07ba807de4dc4a84719f12d6e1b00cafa04cf85b57c11075c5cdb4684b0c837c52acf9e3c95bda7e0d8ae71ecbf0673b405487a9f32b9471cef53ea15aba1fe7a2ccd7098fd543f32f85bf3866b88ee5480a083614174c36c78ef8045f9cd3809612c30d23aef7f1f06c3ce84939689e8e2a6a8d9f0918dc77a7e79f90697be8c166e93f950cf624f4ce512356ad9ffc52037daff69c2e6172a80c8b917bff243850b9d0abbcef159472eddee4a2d2fee3c650c12924b3c81d6bad25c3abaf53be863e7f0bfce3e99461ac4b7821f2e7021cf7bb35f8e265a7c8bd7d34e84cf6f8135b9f473665b206587800a4e895c9ca2d1a9d5d16a07eb3e3b99b6ddd5b70bd263a91a301f233b9cbb6602611140fad405f3f698d9cbc439e86670a0aaa886513f95921ab1ce9acf83cc60d167fd7334d583c0b7209b7404941be325c59159c9bbfe1c9b79f59b49c416334def5fa362df72af9394f65152bce7b95e75b3fa8ee7fe12ce4d0856d441241cf134bda26e3d0af84bb796ea3babed6f42342d289853bc1f8381d4e97aec2a5acd9a4da087e7487604432380c009ce869eec269a26caf8c5f777d8cbf11fc956f2071720e39d68a1f3987258489b1c4a58c02da30ba1fcb17e147ef844ecb0bf874c67ff9cb8f7d0efc30c212b891f0a208950a0f4ae6b8c9d87034d8d4161f9f52f5abd9417c2ce622c77ab9e4059fc86de96d866c5450a10cdbe5fe10057a2768cf29ee93b0b4f96b404c4cd476103401ff66ee8a1064556f4930f01cd44bc3e070f0f87fe09a4629feeed3a3ab9bae198783aaeea3d8618cd29b2cc02ec89d3dd17dce819f46c1e9a8eb9f8e2b6b72653afdb4b7aadc0644bdc0042702af2ca197fb8ca14ad7a23d5a955322ad5e4e538f9e861fc7990a5e3987f88ad88ac75c5e8326102f2fed8caaec44d64f1d60ccc147a6df88045da43761becc3802a1f7d30b73aba3c4a3abad441bb7155c3243a10884d147fa39162b7892c071fbfe0e2b90059a48bfd530bebe976bed5b74735c87e5e30a248a0520259163dce79e4104e80d8dfadd55f83ae3dde560a89a9e772efc921128e9d5385ceca7c2e9419b6ccc34d62e7d7455d4f950ab36c926d7bc8db02c13bbb0dc55d5adf81fef3126e90282e545465d38d5f1f9ae99093310d66803531f27d1abdb04474ba3508344e252b1c58b01ee020b867fe65b9ba5f8ad8fa409124347b31c61b656ee527c8775e73e13f7136aa200015e8a8f0cbad629fc0f85fb6c82bf26078e8fe9ba74cd2bc2ebdf5bd20b14167ad039490ae72071fa1fe5f2f8e68ce65f88853983fb56c7f7749e0a813dac094d8d8d47ceeafc377cfaf28dd0a873311b892df9e56f7d1dc7eb5480cbb5b284ce325097661e41e0b416405c40f8f37f556c59119a35194d6406596b6a69bd3d2c252d4c46d561aba755bd195954d284f9f4da7ad0c80c108567d31d306271fbbce59e6c687643759c8754a2465fbb4558471cb62e3dec56b55840aa22b8e19f678e3ee9c2f7c730f84c699e0e1fce6daec510cd385b29bbb0a9807f054a992694e84dea6cbe6cb269be05152d0dcae709968460830375229c2354bd0bae88ff68362d6623537ced63714e784c83b4d3f11d32d652ed2ac7217cef20429580aef9aa3a2a98d4fb51d6b18fb7bd5fdeaf423aff01e648b89d3f7cbf2bb3e18e7885eeb4f0ace936537baf1f7a11c5fa6c0e748f3d736f81f8c41e44c92f0e0209843e378c4839ff1ca4e7b3ed8b2aef397d590bda5ec27dc506c5467049cda2dfc32cbc767267f660f4448f5dc80ea11efcf85e30ed3da96c1e52f981bd0502179fb10a36ac136a149557afcd56478de98d7d579a6a76a1d47b37cf1378761d79dcc435772ba299743b9963653427d80630ca6b268703fcb03d864647f3065ab14a9326b868d7d357b842bba969db83f5133cab372c072b39e73fed838a83e2c438b5cc4d875abf02d3c936106ee7035dac61551d98493d7f7049b795d68559a5cda0b73b0962c493ca759b17f1ee7085f5454e8baedcb74d029b3c90a6c06b642f29969aa7dff54742488e027366fef02edbdd066d335e1d928fa633e4b4c6fcca99049cf74a997e074919b04cef340a981427f2001664c107834386f99f40690ab6a216c27e3378e4ebb83e57d6b4026748663f72c82eeed4924f109a7518eeac89402c1aea74256611e0c92930361da0cdabf0a62a313200e9d87b8209cc5b1cde14bdb8ac5656ebbc93100b6bf673e636d5cfad45effe7b9404cdcef265052b5e17b1fbe8aea305fb9fa09bc58b54a6240ef78174e859bf8b5fec0bdad640dbb2a813ad707dc7c13be233e245c83a0b546cfa8b74b1755b137359c84f876aecea4a1815607936cbd9e7c5b4a4f2076bde6df097321e743d4bf4a0618a14056d4230bb491a8e200c08b16a9e71a775fab38a1a9e1c02916a96069ab0fb6667265c42005aea20c28fe108f3b69888b71afc6f56892211bbfaf76a5c45cc9d2eb5d23ebfc6fc673a73973b01e6d84f83a409b8895e7a1c73f4a3176b20e54e39f01b391229a81caa9df40c61d695e126633cc6b39c9ce23844aadb10d72c3abb5cd859f429a546d519b3d763a5714249b427b9727f36715d1c312cdddead4aba9fa2ad4837a3a5e4430af2cddc6f1161fd898f04efa555cdf6fe7c5ca59edd2b06b15bba0aec897db16f58b53498c364bd324c138a4f45f8ff904e5aaaffbfa4ff40cc979c25e8ec0fbf79a880a055b7355711d11b1110b7bc1220dbcc0f563d9b9197d6c86b8ad6b6f9f45e7ce580274119795cc37554755ffa8b3ced8035e02ac70111755e1fd55aa1a67482b35912c87c7adb499769900c4676df78103d5557d13879b94eb5dc30950e5b4ab5519373045eed9c7d4a6ad6af27e1c1513c7ead3ba4606853c25ebb83a58ad21fd67d15cd21a64587c6ae3a4327f1159c91abc067d8bdfe351aea825e5b27ff0c36d2cf83ca5a0a8d674e585d39d003e6db4d00573d7bf1b3ae5549d47083b392b0b20305e21f1066917a76931b8c42f55ebdeb3db5aaef63cbbcded6c8a68ddbbc7ef9b1a101e53b1e896689eadabe01f4df42d1f005bfe0a530b492a159c5a072a6dbd41079dc8c246481148d489ae6a580164c090cbacab516b25bb3bca15863fc62a988194bb0c44a6116e6003852255cdaea2c27cc403c15b0422d6d81b5ba403596c28d8526d37be9cefa6ec3091e45fd13948f3bc2cd356af30c2b836b17a934c5c2cfacd7c2f327253670e65ebabfd5a3bfa8072b9d5772871ac55269c637323756427d6be52df5c11d56863886fdda58cd7b90654a568f4336dd8a9d54aba82fbd62e00ff114e1edbaa0f49c3beca50e43905771c8dae5935e1fa8536a8057b9e09bf60e26a2f96040916902cca0ce3c170bc82d112f6e83f4f122231bc2f9b1f15246d29c0f67bae6a0d2c797185653a5caa72c11373d3eed8f4b014ba907fc44703b313dc162e1707f07105a1249881c471d8270676e73e169b8ab48a30aa551f8b21098ac142eb8585b7e8369adbe649305d52e75b9bacc1a99fcb7e28f26fdb77612393ca6ff9cd76d415ab981012e5eb26e13e33b62767b0f18c1539d0ee5b0a14c7989488bcfd93ad9a8b33acb9c8a3a36ae79ec1c84b2556786fcd94f00821d5ca0fd51fec307468849f1ff3448cba09d4140cf9b35a00adf4b4f7a54331613faf6569d0622afedc8f3ab7de1a976b095eb22aaf0490456462faef003fbdf0ea2dc9e8a0d751f71e5d117bbfb1949efb86de1269feb12b0407fe26df0e35d938fdc4b739575098eb3cfdc29d26ff08860bc1f6dc2e1e6ac099a669b20adaf580e7b6a95770ef176274f4b0044773523e9868696d3652312b7c35d172ca82dadaffce7fa8900245e166833e1bf4f415c7dcc7783dcd4463417fc7c1b4ebf49cf245e95ffa3948a1b8ddcf9b37f2bbd971b43eece47586278dfe8358e917b0bebd6d294f7c8aa1161b498d7a0a61b9f7b57622be5fb4770319ed60b5cc3e5e73bff81108fd21cbc057ac360e60576cdc35a71513f7e6c45bd00c87e88c1c1cef274192a0fc90af8a9282548620ee36fd9e02f604aaa32a61a0571277140b0554e72881248e0602f6310050552afab030aabf94f26a4d3c888371d044e113e97b4d5e662a344f5724b373d593a3b6c74c2dee56c8faa73ffa7e35f780ce73450ff79759e0c2762d683e7f53f75dfb1052120e860fef396b744e0a7a605e1e06d44498c80e7d664ce26de57919a2f37705bbede6a6aef7b22487ad862e5d3119613f98c33316a7da70ecb3052cfc0196775e15c9cd3ed33e08c6737e3f5f7ef66eed5dda5cf3fc76073d3f232beabd8988d5c3e4108d83262bca958a27df29ecdb0130376599e53a3eeb50783c9c057eabc69753aca5becb5b9bc5d5287e4bdeddffc961751dc56d98718ba4980b720733c0558548d854519116a7cc25748bf85bb526977eb19836c7fc3b8acf30dcaeb8bfdeb752fcc92b697e90dde555232c95faba94a4de9ac1950d2291c3897dddf34f516b5fed9e400519687b7ae6e527f6eb9348272b15961c79a8fdd59b55ee4e5ea9c1f8e552cb81cb296e64370bfbfa7febf726e7313079d16f762a11f2ad026b12bb220d3e9150ea5c0c5817d8ccbff370a5100dff80ad61857023455c399f6cf18faf6135029b0a832cc737d707275f04bf113e1dea907dbb238286d2d1350755b73793463da173630095e66d986478a4339cb08fd917925dd3962cd33fb4a7c8b87532ee488baea3122d28909270e1bfe75de5ee6084395b610d2b2a1540822ea655fa93fceb9704e49dbfcc20b4a0f9a4f1c3897a7ceaa421d6973e83adc1e7e4e733389b50a56ce146fd8f505ea0d0d7b474b8998315a4af3e4cc20f623d0fde9c9b92f691a1951b1def965cf544d20257f08d28e2877dfe9c691de2b5f9e1a7f2ca458746639c1001e0a0aad576efde4ffef858fc922b8e996ef74c96ba04de517413b9b3fbb1a4674e0b6dfa60c13cff61645344c4cfffb00edf14fa9e4a399fb73df9fed", 0x1000) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)=ANY=[], 0xfc, 0x2b8, &(0x7f0000001540)="$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") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f0000000ac0)='.\x00', 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x40) unshare(0x2a020480) r4 = open(&(0x7f0000000280)='./file0\x00', 0x325082, 0x43) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00000038c5adc4983ede43c683a655ccaf65c49467f393bc7c5630c217bb58cf3fdf75e8b043b833a476ed9be16ac55e6339dc7cdd19bc2c015dea974970beb8bf6ebb7393b340ac2d45b1686d760f0a7087544a37ecc9a445535b9b5958405b94396f8b1fd839867eb67cf05af2a49939e2138e77e279aa4929ca980fcf2c63f08fbe82f4eaa9c557adf7b86758ff822fca883cea4e03f4359ae17735b1a693008976436ae41f0a20af42542733e5a5418f51640b3052c468e724b1846fca5cab3f7f56817944acfd52ac4c056b480866ac2d", @ANYRESHEX=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@initdev, @in=@multicast2}}, {{@in=@initdev}}}, &(0x7f00000012c0)=0x78) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 7m58.126165611s ago: executing program 1 (id=36): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a16ae, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1194, 0xa4, 0x8, 0x0, 0xa1, 0x9b9b, 0x10, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000000040001800400030004000280"], 0x20}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 7m57.003746417s ago: executing program 1 (id=41): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200001, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x80006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x10, 0xffff, 0x8001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf2504000000040001802c0001801400020073797a6b616c6c657230000000000000140002006261746164765f736c6176655f3100005800018008000300030000001400020076657468315f746f5f68737200000000080003000200000008000300030000001400020076657468315f746f5f626f6e640000001400020076657468305f746f5f7465616d0000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300070000000800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="30000180140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040)={0xa0000006}) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4000005) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x64, 0x6, 0x6, 0x0, 0x0, 0xb, 0x2021, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x200, 0x3, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010031bd7000fcdbdf252500000050259b0022854e4c4f8e4bcb6b7d04f4dd12c1dae505d5c01acddb7d0bd896eb8f686be1282955a7e2bbc1c6fabf4122d16c2dd74e251ad63cb6b4dc3c787bbf974e966a00367051fa7b7b5ef88f50800d21ff1949d60c0f63646662317319c22f2c75d0648af281f0bdc925de4beb8dde390f1d8b1b0dfef774a92a8a0a31b42b006771c6087290dfbc80e2e800"/171], 0x14}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) statx(r6, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)) inotify_init() r9 = inotify_init1(0x80800) inotify_add_watch(r9, &(0x7f0000000200)='.\x00', 0x10000a0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x122, 0x880, 0x0, 0x0) 1m57.660093761s ago: executing program 0 (id=2948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) 1m57.639346231s ago: executing program 0 (id=2951): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000007c0)={0x1, 'veth1_to_hsr\x00', 0x4}, 0x18) 1m57.608987992s ago: executing program 0 (id=2953): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x272) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0, 0xfffffffe}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb0000000000000000000000000000040010000000020020"], 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/../file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) (async) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000a00)={0x0, 0x3}, 0x4) getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f00000000c0)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000010000104fcfffffffcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="031700000000000008000400c80c000008000a00", @ANYRES32=r7, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="00470e76f800"}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) close_range(0xffffffffffffffff, r8, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4, r1, 0xa4}, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1m57.518558765s ago: executing program 0 (id=2954): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x41}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m57.260152703s ago: executing program 0 (id=2956): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x4000, 0x0, 0x81, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x2, "5ca3d1c85d45bf8188dd4f"}, 0xc, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x6, 0x203) 1m57.259434923s ago: executing program 33 (id=2956): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x4000, 0x0, 0x81, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x2, "5ca3d1c85d45bf8188dd4f"}, 0xc, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x6, 0x203) 4.99447888s ago: executing program 5 (id=3699): syz_open_dev$loop(0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x51, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x1b, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, {[@hopopts={0x84}], "9efe9faef61901056bc1c7dc1f6400842bb072"}}}}}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file2\x00', 0x2000080, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="9a6c01d97557fe6fa6988edac9d750c94e48f976693942dbd85f5342631026fe6514a89d2be1c8a436a3d448a663e5cb279167517537bcca85df16b7ad217b1352e9d15a66f775a6414e474da9cfa1691c9f79e9c64646bed6b343173ebb53187320bfa4e3958b65bb0bafc5add4"], 0xfb, 0x11ff, &(0x7f0000002480)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x47, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x8000000000000001, 0x1) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3d78dafb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000070000010000000000000000850000000200000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001000030400"/20, @ANYRES32=r9, @ANYBLOB="460609128009000100626f6e6400000000040002804bd940636056d81f544eaf5274d1db1e"], 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1d, 0x1, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) openat(r8, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x50) 4.271317133s ago: executing program 5 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0xdd0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r3, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0) 4.062582879s ago: executing program 4 (id=3706): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 4.04827834s ago: executing program 4 (id=3707): bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) fallocate(r1, 0x8, 0x4000, 0x8000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x5fac057a72c3f5c0, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_ivalue=0x4}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000020603000000001905000400014ec4a9e4b0c0dd000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sigaltstack(&(0x7f00000004c0)={&(0x7f0000000400)=""/155, 0x100000002, 0x9b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}]}]}, 0x38}}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r8, 0xfffffffffffffffd, 0x40001) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x3800c0, 0x0) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x5, &(0x7f00000001c0)={0x7ff, {{0xa, 0x4e22, 0x2, @mcast1, 0x81}}, {{0xa, 0x4e09, 0x8004a3, @remote, 0x1}}}, 0x108) 3.917096495s ago: executing program 5 (id=3709): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffc0, 0x7b6b9b2bf3aa0dd2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r1, &(0x7f0000003180)=[{{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0x5}}, 0x80, 0x0}}], 0x40000000000021d, 0xc010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x8) ioctl$SIOCSIFHWADDR(r2, 0x40305829, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 3.72011325s ago: executing program 5 (id=3710): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0xfffc80) 2.718715722s ago: executing program 5 (id=3712): sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10004, &(0x7f00000003c0), 0x21, 0x51c, &(0x7f0000000400)="$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") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000003a00)=""/4115, 0x1013}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 2.598452866s ago: executing program 3 (id=3714): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x1, 0x7ff, 0x0) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7) r3 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x9, 0x9, 0x6, 0x9, 0x0, 0x5, 0x102, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe63c, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0x4, 0x100, 0x8, 0x2, 0x8, 0x9, 0x3, 0x0, 0x3, 0x0, 0x75b6362a}, 0x0, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x552, 0x54004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xa, r3, 0xa) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r4, &(0x7f0000000180)='q', 0x1, 0x100004) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000440)={0x0, 0x1, 0x9, 0x3, 0xffffffff}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xaa, 0x5, 0x8, 0x0, 0x0, 0x9, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x1, @perf_config_ext={0x400, 0x10000000000007}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x1b8e, 0xb, 0x0, 0xfffffffd, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_setup(0x8, &(0x7f0000000300)=0x0) io_submit(r8, 0x1, &(0x7f0000000480)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x200, r7, 0x0, 0x0, 0x4ec8, 0x0, 0x0, r7}]) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000001900)={0x80, 0x8, 0x7fff, 0x3, 0x0, 0x8, 0x0}) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r5, r4, 0x0, 0xd39a) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010004000000010000000900000030000380"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) syz_clone3(&(0x7f00000003c0)={0x206023480, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x39}, &(0x7f0000000240)=""/199, 0xc7, &(0x7f0000000340)=""/18, &(0x7f0000000380)=[0x0], 0x1}, 0x58) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f636173652c696f636861727365743d69736f383835392d392c696f636861727365743d6370313235312c73686f72746e6183a8fd7656964f2d2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d75746d653d6d697865642c756e695f786c6174653d302c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c73686f77657865632c726f6469722c636f6465706167653d3836352c6e6f6e756d7461696c3d302c73686f72746e616d653d7769be6e742c73686f72746e616d653d77696e39352c66736d616769633d3078303030303030303030303030303030352c00"], 0x1, 0x386, &(0x7f0000000980)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r12, 0x80047213, &(0x7f00000000c0)) getpgid(r11) 2.332973235s ago: executing program 2 (id=3715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x450, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x424, 0x2, [@TCA_BPF_ACT={0x420, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xd0, 0xa, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x158, 0x1b, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3ff, 0xe, 0x8, 0x4, 0x1}, 0x2}}]}, {0xdd, 0x6, "da72a81d3f185dffb86a2a0c1a283af31d7cc16e9b39f3c58394749a5e7cf990a8aa66b0640f26aa370eb9d52708765298213bc5a7745359a3b7dea606c209494997403e3f61b96cb903e2e37975650aaee679d8db2b02550982fca6d8ad6912a7514c784a7a20ad5a5c711db53ab794c49f14fff923a18f748938b278742dc1ccbddd5444087f08f3ebb92fce5bc464885cc9dd1f884c1555195968ab8107315c144be23ab095fc8cb6c202a2a7e34081b29c0333069c0257b3a3e91d2a40e1d80a419d11dcba523939e17d7c96f0c8ec82121ef8daa0af5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_connmark={0xd4, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}]}, {0x15, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x48000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.265909117s ago: executing program 4 (id=3716): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x73, 0x101341) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x4, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) 2.18745573s ago: executing program 2 (id=3717): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f, 0x4}}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/if_inet6\x00') lseek(r1, 0x0, 0x4) renameat2(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a001c140000000000000000000014001200f531071d1c7c804c386c979da87069927a1405d1e1540ed2be6f11e2e0902300"/63], 0x30}}, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f, 0x4}}, 0x20) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/if_inet6\x00') (async) lseek(r1, 0x0, 0x4) (async) renameat2(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x1) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a001c140000000000000000000014001200f531071d1c7c804c386c979da87069927a1405d1e1540ed2be6f11e2e0902300"/63], 0x30}}, 0x0) (async) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) (async) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (async) 2.18031057s ago: executing program 4 (id=3718): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x73, 0x101341) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x4, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) (fail_nth: 1) 1.795966603s ago: executing program 4 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0xdd0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r3, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0) 1.795675692s ago: executing program 2 (id=3720): syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 1.771312353s ago: executing program 2 (id=3721): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x0, 0x7fffffff, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940), 0x0, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) shutdown(r0, 0x1) 883.543431ms ago: executing program 5 (id=3723): sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$eJzs28Frm2UcB/Bfm3bdOttUndMNxAe9TJCw9uBFDxbpQBZRtlXYBOGdTTX0NSl9QyEiVk9e/UMEEbyIIN70YC/+B4q3XjxOEF9polsjiVt0NCKfzyUPeX7f5PfwJIE3PO/B8x+/s7VZ1DazTkxPTcX0dkS6lSLFdPzpg3j6uW++ffzq9RuXV+v1tSspXVq9tvxsSmnxia9ef++TJ7/unH7t88Uv52J/6Y2Dn1d+2j+7f+7gt2tvN4vULFKr3UlZutlud7KbeSNtNIutWkqv5o2saKRmq2jsDMxv5u3t7W7KWhsL89s7jaJIWaubthrd1Gmnzk43ZW9lzVaq1WppYT44avqeqmZuj16OW2VZRpTlbJyIsizLUzEfp+OBWIjFqMZSPBgPxcNxJh6Js/FoPBaf/fBp9zABAAAAAAAAAAAAAAAAAAAA3D/j3v9/rlc16a4BAAAAAAAAAAAAAAAAAADg/+Xq9RuXV+v1tSspnYzIP9pd313vP/bnVzejGXk04mJU49fo3f3f1x9feqm+djH1LMWH+d4f+b3d9cpgfjmq8czw/HI/nwbzczF/NL8S1TgzLD8bK0PzJ7+48NSRfO2Fanz/ZrQjj404zN55//eXU3rxlfpf8ud7daNVjmN7AAAA4L6opduGXr/XaqPm+/kx/h8YuL4+zJ6fmejSiYii++5WlueNHYOhgwv/jTZ6gxN3q6nEvb/gbESM18YvZVn+m1V892P/I/eP4jMx2S0Y/U2Zi4i7xCsjm5+KiONdzqkYeKbcG1U86V8mjsOdTZ90JwAAAAAAAAAAAIxj5FHBub87RVgZ68jhpNcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zg4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//8AfMuR") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10004, &(0x7f00000003c0), 0x21, 0x51c, &(0x7f0000000400)="$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") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000003a00)=""/4115, 0x1013}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 824.061424ms ago: executing program 3 (id=3724): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) listxattr(&(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, 0x0, 0x0, 0x2000, 0x0, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x18, 0x31, 0x3f, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 818.502824ms ago: executing program 6 (id=3725): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="1800000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000003"], 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@debug}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") io_setup(0x1, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="1800000001"], 0x48}}, 0x4008004) (async) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000003"], 0x48}}, 0x0) (async) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@debug}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") (async) io_setup(0x1, &(0x7f00000001c0)) (async) 810.912294ms ago: executing program 4 (id=3726): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x2c}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 701.423147ms ago: executing program 3 (id=3727): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x450, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x424, 0x2, [@TCA_BPF_ACT={0x420, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xd0, 0xa, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x158, 0x1b, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3ff, 0xe, 0x8, 0x4, 0x1}, 0x2}}]}, {0xdd, 0x6, "da72a81d3f185dffb86a2a0c1a283af31d7cc16e9b39f3c58394749a5e7cf990a8aa66b0640f26aa370eb9d52708765298213bc5a7745359a3b7dea606c209494997403e3f61b96cb903e2e37975650aaee679d8db2b02550982fca6d8ad6912a7514c784a7a20ad5a5c711db53ab794c49f14fff923a18f748938b278742dc1ccbddd5444087f08f3ebb92fce5bc464885cc9dd1f884c1555195968ab8107315c144be23ab095fc8cb6c202a2a7e34081b29c0333069c0257b3a3e91d2a40e1d80a419d11dcba523939e17d7c96f0c8ec82121ef8daa0af5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_connmark={0xd4, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}]}, {0x15, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x48000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 611.16427ms ago: executing program 3 (id=3728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x9, 0xfffffff8}, &(0x7f0000000180)=0x10) (async) socket$kcm(0x2, 0xa, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) setns(r2, 0x10000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1, 0x0, 0xe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r6 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xeda0, 0x2, 0x0, 0x345, 0x0, r2}) io_uring_enter(r6, 0x100000, 0x1, 0xf, 0x0, 0x0) (async) io_uring_enter(r6, 0x5c97, 0x37c4, 0x2, 0x0, 0x0) (async, rerun: 64) close(r5) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200020004000800", @ANYBLOB="00000000000000000000000000000000000000000000445e00000000a177fafb6d55f239ad592b18ddaf7a7b37b18d"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 64) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) (rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 32) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) (rerun: 32) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x24, 0x0, 0x0, &(0x7f0000001300)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x8, 0x0, 0x10, 0x0, 0xfffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (rerun: 32) 564.213392ms ago: executing program 6 (id=3729): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'dvmrp0\x00', {0x2, 0x0, @broadcast}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6385c1, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x232080) read$qrtrtun(r2, &(0x7f0000000040)=""/115, 0x73) 536.512552ms ago: executing program 6 (id=3730): r0 = socket$inet6(0xa, 0x80001, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a24}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x48}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) r3 = socket$inet6(0xa, 0x80001, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_EXT_MASK={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async, rerun: 64) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x99}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb37}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3d6f}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}]}, 0x94}, 0x1, 0x0, 0x0, 0x8800}, 0x20000800) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x9, {{0xa, 0x4, 0x101, @mcast1}}}, 0x88) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000000)="3028b2d7509ee69ef6c73d14ac0993a83f942e81516285c826eb7be41d9739fdc22d37483f4c35b51cee41b2c212c1ed9bf5ce4f0c936db8d7db", 0x0, 0x0, 0x0, 0x9461}, 0x38) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf9}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8, @remote, 0x5a7}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000080)={r10, 0xb}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, 0x0, &(0x7f0000d23000)) 497.346794ms ago: executing program 3 (id=3731): syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 421.361596ms ago: executing program 6 (id=3732): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x20100006, 0xed34, 0x400ff8, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400a5001000010000000000000003000000000a48000000060a09040000000900000000020000000900010073797a30000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000ff0000000000000000000a"], 0x70}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f10000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40000000}, 0x10}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000050700000086d7c0d60000f064eb8ecb69c611de70a93f7c0faf9f59b5667ddc0cb2035e5d2c34e488e232c27cfdf8ad4ba7e7bffe3fd90cae9220f044c993be58de8ddc8ec91d3192e47c76090c1a5890ef35bf5379a84ec90cd9f6641fb0efee3e6a4c0143811a0c3be0e30f6e7ea38f", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004094}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3ce6ed39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6, r6, r6, r6], 0x0, 0x10, 0x200}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x5eb84026f3f3ecbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37e, 0x95fa}, 0x1b0c, 0x0, 0x0, 0x0, 0x7fe, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x300, 0x56, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", 0x0, 0x2f00, 0x0, 0xe3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed", &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) 362.525928ms ago: executing program 3 (id=3733): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000002c0)=0xc) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0xa3020000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r9 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x18) r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r12, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r12, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x7, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x91}, @jmp={0x5, 0x1, 0x6, 0x3, 0x6, 0xfffffffffffffff8, 0x4}], &(0x7f0000000200)='GPL\x00', 0xb4db, 0x2e, &(0x7f0000000240)=""/46, 0x41100, 0x5, '\x00', r3, @fallback=0xd, r4, 0x8, &(0x7f0000000340)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xc, 0xc00, 0x5a}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r6, r7, r8, r10, r11, r12, r13, r14], 0x0, 0x10, 0x8}, 0x94) 287.298431ms ago: executing program 6 (id=3734): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000050b1000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newtaction={0x500, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x4ec, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3eff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x100, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x34, 0x4, 0x8, 0x80000000, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xef6, 0x0, 0x1, 0x0, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x813}}]}, {0x96, 0x6, "f1e38afe16038e431572b823aa90a93c271cde2dde80a97b9b2d264edc7d29b447442ea4d44ae548b3fab47201abbe6d8153319a2ead48e69a3b5403b4888aef4dc46ccbb45cab65f5721a3c6673ef314c80613d483a853d118e93a46cf9519357dab27b1ab1934a725c9c1f228979d0492f16442f482196b22774d6a7619600b157a53ab594522b4aea07856211dbe2be92"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x15c, 0x1e, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x7, 0xfffffffffffffffc, 0xb, 0x7fff}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0xb}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xb7, 0x6, "81c5ab6ecc42565a412f38497fe44a7a2b0b3bcec7dccf44aabc67ee9a5cffa434447cb1adb6c1c5281c5613a5f59e35d4db0c069786dd6608e0f3be16a417f1c301d7630141421743f2b1e82f15199c7b437b909e9e71fd386e852c4a42e7f151c5fe6d47e519b4a20f1dabe9ee0c44a07ccf5c55c40d443aec319481a18254fe75a7febfee2b8becbaf708f5cc80339b5d4b67bba96ab79e79d52f3ebaab88fb3dbc0100b822697f0112df19204b2208536e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf0, 0x10, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0xc0, 0x6, "5a006f46e876c84d32c150c8053b2c2d9ef60093d05acd3c5cdf68bb96035a4adaeccc8706dbd72b5554abf35f348720b0e1c51b1170c8088864820e20fee97f064c374d57b31636ef3a1f2f0af36057c99ef93f30f338886397f6e44b4a32bc3c9f230c16322d2974c7944dc2a3558c2c362640a3ac40e73ccd24f578237953201877bc9f8311744f783d901430f9d1573e429c15811a47de665c061bb27eef8183bfcb8b89d9608682e17d81198c0e2cf6826ffd0769e69d04ad69"}, {0xc}, {0xc, 0x8, {0xf864eed57fb478d8, 0x3}}}}, @m_connmark={0x144, 0x11, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x2, 0x2, 0x4}, 0x4}}]}, {0xf5, 0x6, "da68c257b64ac1ac718ef748c85156ad254d04bd57944fea0549649ba3a6b38c8c9f361028cf01fa37b62fdc4cada357c799954f66adcde5f34efb9d21ae9ba415730bee30c9227991992f36d629654f2d986a282ac955fe924ffc5685a7c65f2c4a6f4080218f45ae3246bf98f7d8984109eaa703d28dd6ac1a70bbcfb87cb603a9f33a23dfe142ba757661d4c88d26fc2fff553d4c4fe5fd34e0d1ea5c264e75ec3a6c249371ad9728d7bd4f8ab1c388c42395c40c3df65b0b9b0b794be5773ba21e67bb535b211efb32c382db72843bbab2aca6f118da5b36861e38647f041fd8d29d7ab1fe58029126bb3f76215f37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000500e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000000000000000000000000000a0000000066365f35f0dcb4b03ab8088152eca7d9fa5201f0665f59b004b0c6bc169f224abc45455de52c4f5ff467d5ef5fca5fdb5b125190cc82bd56508dfc78b9728329e143bcdd1ea4540ada7b9c9538c47b78fa5973379076137572a61bf338a99caf94e9026a7214283d", @ANYRES32=0x0, @ANYBLOB='\x00:\x00\x00\x00\x00\x00\x00\b\x00%\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@deltaction={0x5c, 0x31, 0x409, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x5c}}, 0x0) cachestat(r6, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x11) r8 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r8) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) inotify_init1(0x0) 183.023224ms ago: executing program 2 (id=3735): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x8, 0x80, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc0314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x500, 0x0, 0x0, 0x2}, 0x50) 170.138474ms ago: executing program 6 (id=3736): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0xdd0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r5, r3, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0) 0s ago: executing program 2 (id=3737): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80402, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x20008844) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', 0x122) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x42, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000009dffffff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00'], 0xffc99a3b) kernel console output (not intermixed with test programs): 0000000000000001 [ 456.969809][T14937] R13: 00007f2001866038 R14: 00007f2001865fa0 R15: 00007fff2a0c7f88 [ 456.969827][T14937] [ 457.478363][T14953] netlink: 'syz.4.3248': attribute type 11 has an invalid length. [ 457.497473][T14953] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3248'. [ 457.668286][T14956] veth0: entered promiscuous mode [ 457.770299][T14958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.985992][T14965] set_capacity_and_notify: 1 callbacks suppressed [ 457.986010][T14965] loop2: detected capacity change from 0 to 256 [ 458.110224][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 458.536769][T14955] veth0: left promiscuous mode [ 458.974378][T14965] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 459.037969][T14965] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.824734][T14989] loop6: detected capacity change from 0 to 1024 [ 459.851388][T14989] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 459.899446][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.959027][T14989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.102923][T14965] ucma_write: process 929 (syz.2.3252) changed security contexts after opening file descriptor, this is not allowed. [ 460.559422][T15006] netlink: 'syz.2.3263': attribute type 11 has an invalid length. [ 460.590865][T15006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3263'. [ 460.667239][T15011] veth0: entered promiscuous mode [ 460.685307][T15011] loop4: detected capacity change from 0 to 512 [ 460.714106][T15011] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3265: iget: bad i_size value: 38620345925642 [ 460.751396][T15011] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 460.751618][T15011] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3265: couldn't read orphan inode 15 (err -117) [ 460.760845][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 460.760874][ C0] EXT4-fs (loop4): initial error at time 1780396592: ext4_orphan_get:1397: inode 15 [ 460.760905][ C0] EXT4-fs (loop4): last error at time 1780396592: ext4_orphan_get:1397: inode 15 [ 461.329421][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.561930][T15011] loop4: lost filesystem error report for type 5 error -117 [ 461.587285][T15011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.652688][ T28] audit: type=1400 audit(1780396592.994:2135): avc: denied { write } for pid=15010 comm="syz.4.3265" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.674996][T15011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3265: bg 0: block 5: invalid block bitmap [ 461.719606][T15010] veth0: left promiscuous mode [ 461.773066][ T28] audit: type=1400 audit(1780396593.114:2136): avc: denied { create } for pid=15025 comm="syz.6.3268" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 462.227075][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.436210][T15032] loop4: detected capacity change from 0 to 512 [ 462.466563][T15032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 462.491226][T15032] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.642506][ T28] audit: type=1400 audit(1780396593.864:2137): avc: denied { write } for pid=15038 comm="syz.4.3270" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.664440][ T28] audit: type=1400 audit(1780396593.994:2138): avc: denied { read } for pid=15031 comm="syz.4.3270" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 462.687968][ T28] audit: type=1400 audit(1780396593.994:2139): avc: denied { open } for pid=15031 comm="syz.4.3270" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 462.986129][T15076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 462.990454][ T28] audit: type=1400 audit(1780396594.074:2140): avc: denied { write } for pid=15039 comm="syz.4.3270" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.992917][T15076] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 463.022110][T15076] audit: backlog limit exceeded [ 463.033945][T15078] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.362781][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3275'. [ 463.394123][T15114] netlink: 'syz.5.3275': attribute type 30 has an invalid length. [ 463.411783][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3275'. [ 463.505741][T15119] netlink: 'syz.6.3277': attribute type 11 has an invalid length. [ 463.523008][T15122] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 463.533993][T15119] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3277'. [ 463.553495][T15122] SELinux: failed to load policy [ 463.635650][T15126] veth0: entered promiscuous mode [ 463.646860][T15126] loop5: detected capacity change from 0 to 512 [ 463.661001][T15126] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3281: iget: bad i_size value: 38620345925642 [ 463.663106][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3280'. [ 463.697341][T15126] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.697702][T15126] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3281: couldn't read orphan inode 15 (err -117) [ 463.706969][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 463.706988][ C0] EXT4-fs (loop5): initial error at time 1780396595: ext4_orphan_get:1397: inode 15 [ 463.707049][ C0] EXT4-fs (loop5): last error at time 1780396595: ext4_orphan_get:1397: inode 15 [ 463.744544][T15126] loop5: lost filesystem error report for type 5 error -117 [ 463.745523][T15126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.768223][T15126] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3281: bg 0: block 5: invalid block bitmap [ 463.785631][T15125] veth0: left promiscuous mode [ 463.788316][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 463.848445][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.028358][T15137] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 464.138693][T15142] tmpfs: Unknown parameter 'nr_!œwë½H^ƒRMinode‰' [ 464.146725][T15142] netlink: 'syz.6.3284': attribute type 10 has an invalid length. [ 464.155372][T15142] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 464.166614][T15142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.241304][T15144] loop4: detected capacity change from 0 to 512 [ 464.273832][T15148] FAULT_INJECTION: forcing a failure. [ 464.273832][T15148] name failslab, interval 1, probability 0, space 0, times 0 [ 464.286615][T15148] CPU: 1 UID: 0 PID: 15148 Comm: syz.6.3287 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 464.286653][T15148] Tainted: [W]=WARN [ 464.286659][T15148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.286713][T15148] Call Trace: [ 464.286721][T15148] [ 464.286731][T15148] __dump_stack+0x1d/0x30 [ 464.286760][T15148] dump_stack_lvl+0x95/0xd0 [ 464.286783][T15148] dump_stack+0x15/0x1b [ 464.286802][T15148] should_fail_ex+0x263/0x280 [ 464.286821][T15148] should_failslab+0x8c/0xb0 [ 464.286914][T15148] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 464.287013][T15148] ? __d_alloc+0x37/0x340 [ 464.287040][T15148] __d_alloc+0x37/0x340 [ 464.287066][T15148] ? default_pointer+0xf2/0x5e0 [ 464.287094][T15148] d_alloc+0x2e/0x100 [ 464.287151][T15148] lookup_one_qstr_excl+0x95/0x240 [ 464.287180][T15148] start_dirop+0x3e/0x70 [ 464.287268][T15148] simple_start_creating+0xa2/0xd0 [ 464.287292][T15148] debugfs_start_creating+0xda/0x150 [ 464.287326][T15148] __debugfs_create_file+0x70/0x2b0 [ 464.287359][T15148] debugfs_create_file_full+0x3f/0x60 [ 464.287418][T15148] ? __pfx_macvlan_setup+0x10/0x10 [ 464.287445][T15148] ref_tracker_dir_debugfs+0x10e/0x220 [ 464.287537][T15148] alloc_netdev_mqs+0x1a7/0xa70 [ 464.287569][T15148] rtnl_create_link+0x239/0x720 [ 464.287641][T15148] rtnl_newlink_create+0x174/0x650 [ 464.287750][T15148] ? security_capable+0x7b/0x90 [ 464.287813][T15148] ? netlink_ns_capable+0x86/0xa0 [ 464.287845][T15148] rtnl_newlink+0x1185/0x1400 [ 464.287886][T15148] ? strlen+0x19/0x40 [ 464.287918][T15148] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 464.287996][T15148] ? __rcu_read_unlock+0x4e/0x70 [ 464.288020][T15148] ? avc_has_perm_noaudit+0xab/0x130 [ 464.288054][T15148] ? cred_has_capability+0x224/0x2a0 [ 464.288099][T15148] ? selinux_capable+0x31/0x40 [ 464.288172][T15148] ? security_capable+0x7b/0x90 [ 464.288201][T15148] ? ns_capable+0x7c/0xb0 [ 464.288244][T15148] ? __pfx_rtnl_newlink+0x10/0x10 [ 464.288361][T15148] rtnetlink_rcv_msg+0x64b/0x720 [ 464.288395][T15148] netlink_rcv_skb+0x123/0x220 [ 464.288428][T15148] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 464.288542][T15148] rtnetlink_rcv+0x1c/0x30 [ 464.288568][T15148] netlink_unicast+0x5a8/0x680 [ 464.288592][T15148] netlink_sendmsg+0x5c8/0x6f0 [ 464.288680][T15148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.288777][T15148] ____sys_sendmsg+0x563/0x5b0 [ 464.288809][T15148] ___sys_sendmsg+0x195/0x1e0 [ 464.288844][T15148] __x64_sys_sendmsg+0xd4/0x160 [ 464.288997][T15148] x64_sys_call+0x194c/0x3020 [ 464.289024][T15148] do_syscall_64+0x12c/0x3b0 [ 464.289053][T15148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.289079][T15148] RIP: 0033:0x7f1f04f4ce59 [ 464.289109][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.289130][T15148] RSP: 002b:00007f1f0399f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.289155][T15148] RAX: ffffffffffffffda RBX: 00007f1f051c5fa0 RCX: 00007f1f04f4ce59 [ 464.289168][T15148] RDX: 0000000004044000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 464.289181][T15148] RBP: 00007f1f0399f090 R08: 0000000000000000 R09: 0000000000000000 [ 464.289338][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.289352][T15148] R13: 00007f1f051c6038 R14: 00007f1f051c5fa0 R15: 00007ffc1be3cb68 [ 464.289373][T15148] [ 464.292320][T15148] batadv0: entered promiscuous mode [ 464.631098][T15148] macvlan2: entered allmulticast mode [ 464.637475][T15148] batadv0: entered allmulticast mode [ 464.643986][T15148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.652782][T15148] batadv0: left allmulticast mode [ 464.658038][T15148] batadv0: left promiscuous mode [ 464.665619][T15144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.678130][T15144] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.690355][T15144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.922913][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'. [ 464.931830][T15163] netlink: 'syz.3.3293': attribute type 5 has an invalid length. [ 464.939620][T15163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3293'. [ 464.951777][T15163] geneve2: entered promiscuous mode [ 464.957004][T15163] geneve2: entered allmulticast mode [ 464.981180][T15166] loop6: detected capacity change from 0 to 8192 [ 465.056561][T15170] netlink: 'syz.2.3295': attribute type 11 has an invalid length. [ 465.074896][T15170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3295'. [ 465.090698][T15144] loop4: detected capacity change from 0 to 512 [ 465.097419][T15144] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 465.104157][T15144] netlink: 'syz.4.3285': attribute type 2 has an invalid length. [ 465.186733][T15173] loop4: detected capacity change from 0 to 256 [ 465.194439][T15173] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 465.229215][T15173] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 465.280752][T15180] netlink: 436 bytes leftover after parsing attributes in process `syz.5.3298'. [ 465.290168][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3298'. [ 465.328885][T15182] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 465.328885][T15182] The task syz.4.3297 (15182) triggered the difference, watch for misbehavior. [ 465.377553][T15180] loop5: detected capacity change from 0 to 512 [ 465.479356][T15180] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 465.511354][T15180] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3298: bad orphan inode 131083 [ 465.523224][T15180] loop5: lost filesystem error report for type 5 error -117 [ 465.525835][T15180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.680861][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.758077][T15215] loop5: detected capacity change from 0 to 2048 [ 465.807934][T15215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.975690][T15236] netlink: 'syz.3.3301': attribute type 21 has an invalid length. [ 465.983863][T15236] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3301'. [ 466.138220][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3299'. [ 466.875732][ T28] kauditd_printk_skb: 211 callbacks suppressed [ 466.875758][ T28] audit: type=1400 audit(1780396598.224:2221): avc: denied { write } for pid=15264 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.001767][T15274] loop6: detected capacity change from 0 to 512 [ 468.144940][T15281] netlink: 'syz.2.3310': attribute type 11 has an invalid length. [ 468.279888][T15285] loop4: detected capacity change from 0 to 512 [ 468.305806][T15285] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3311: iget: bad i_size value: 38620345925642 [ 468.329395][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.345454][T15285] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.347000][T15285] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3311: couldn't read orphan inode 15 (err -117) [ 468.347397][T15281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3310'. [ 468.356210][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 468.356230][ C1] EXT4-fs (loop4): initial error at time 1780396599: ext4_orphan_get:1397: inode 15 [ 468.392981][ C1] EXT4-fs (loop4): last error at time 1780396599: ext4_orphan_get:1397: inode 15 [ 468.412269][T15283] loop6: detected capacity change from 0 to 8192 [ 468.419307][T15285] loop4: lost filesystem error report for type 5 error -117 [ 468.423787][T15285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.456020][ T28] audit: type=1400 audit(1780396599.804:2222): avc: denied { write } for pid=15284 comm="syz.4.3311" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.456859][T15285] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3311: bg 0: block 5: invalid block bitmap [ 468.712232][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.776277][T15295] set_capacity_and_notify: 1 callbacks suppressed [ 468.776295][T15295] loop4: detected capacity change from 0 to 512 [ 468.798975][T15295] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.3313: corrupted inode contents [ 468.843594][T15295] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.845115][T15295] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 468.854308][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 468.854331][ C1] EXT4-fs (loop4): initial error at time 1780396600: ext4_do_update_inode:5690: inode 15 [ 468.854364][ C1] EXT4-fs (loop4): last error at time 1780396600: ext4_do_update_inode:5690: inode 15 [ 468.889018][T15295] loop4: lost filesystem error report for type 5 error -117 [ 468.893729][T15295] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.3313: corrupted inode contents [ 468.913594][T15295] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.914058][T15295] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.3313: mark_inode_dirty error [ 468.934923][T15295] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.936447][T15295] EXT4-fs (loop4): 1 orphan inode deleted [ 468.956178][T15295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.974426][ T28] audit: type=1400 audit(1780396600.324:2223): avc: denied { write } for pid=15294 comm="syz.4.3313" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.057606][ T28] audit: type=1400 audit(1780396600.344:2224): avc: denied { ioctl } for pid=15294 comm="syz.4.3313" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 469.165445][ T28] audit: type=1400 audit(1780396600.434:2225): avc: denied { write } for pid=15294 comm="syz.4.3313" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.253914][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.367651][T15309] loop2: detected capacity change from 0 to 1024 [ 469.379539][T15309] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 469.494317][T15309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.832282][T15320] loop4: detected capacity change from 0 to 1024 [ 469.861570][T15320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 470.002750][T15320] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.099929][T15320] FAULT_INJECTION: forcing a failure. [ 470.099929][T15320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.174006][T15320] CPU: 1 UID: 0 PID: 15320 Comm: syz.4.3320 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 470.174045][T15320] Tainted: [W]=WARN [ 470.174054][T15320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.174083][T15320] Call Trace: [ 470.174090][T15320] [ 470.174099][T15320] __dump_stack+0x1d/0x30 [ 470.174127][T15320] dump_stack_lvl+0x95/0xd0 [ 470.174148][T15320] dump_stack+0x15/0x1b [ 470.174165][T15320] should_fail_ex+0x263/0x280 [ 470.174263][T15320] should_fail+0xb/0x20 [ 470.174279][T15320] should_fail_usercopy+0x1a/0x20 [ 470.174302][T15320] _copy_to_user+0x20/0xa0 [ 470.174344][T15320] simple_read_from_buffer+0xb5/0x130 [ 470.174382][T15320] proc_fail_nth_read+0x10e/0x150 [ 470.174444][T15320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.174468][T15320] vfs_read+0x1ab/0x7f0 [ 470.174493][T15320] ? fdget_pos+0xec/0x1d0 [ 470.174572][T15320] ? mutex_lock+0x57/0x90 [ 470.174596][T15320] ksys_read+0xdc/0x1a0 [ 470.174672][T15320] __x64_sys_read+0x40/0x50 [ 470.174697][T15320] x64_sys_call+0x2886/0x3020 [ 470.174719][T15320] do_syscall_64+0x12c/0x3b0 [ 470.174824][T15320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.174907][T15320] RIP: 0033:0x7f222105d68e [ 470.174930][T15320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 470.174947][T15320] RSP: 002b:00007f221faeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.174967][T15320] RAX: ffffffffffffffda RBX: 00007f221faef6c0 RCX: 00007f222105d68e [ 470.174998][T15320] RDX: 000000000000000f RSI: 00007f221faef0a0 RDI: 0000000000000005 [ 470.175013][T15320] RBP: 00007f221faef090 R08: 0000000000000000 R09: 0000000000000000 [ 470.175028][T15320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.175083][T15320] R13: 00007f2221316038 R14: 00007f2221315fa0 R15: 00007ffc41f74838 [ 470.175101][T15320] [ 470.798636][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.441752][T15326] netlink: 'syz.5.3322': attribute type 10 has an invalid length. [ 471.472182][T15326] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 471.506156][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.544550][T15326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.681822][ T28] audit: type=1400 audit(1780396603.024:2226): avc: denied { write } for pid=15341 comm="syz.5.3327" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 471.735892][T15346] loop5: detected capacity change from 0 to 256 [ 471.770806][T15332] FAULT_INJECTION: forcing a failure. [ 471.770806][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 471.784488][T15332] CPU: 1 UID: 0 PID: 15332 Comm: syz.2.3323 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 471.784520][T15332] Tainted: [W]=WARN [ 471.784527][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.784538][T15332] Call Trace: [ 471.784544][T15332] [ 471.784551][T15332] __dump_stack+0x1d/0x30 [ 471.784667][T15332] dump_stack_lvl+0x95/0xd0 [ 471.784690][T15332] dump_stack+0x15/0x1b [ 471.784715][T15332] should_fail_ex+0x263/0x280 [ 471.784737][T15332] should_failslab+0x8c/0xb0 [ 471.784771][T15332] kmem_cache_alloc_noprof+0x66/0x3f0 [ 471.784917][T15332] ? skb_clone+0x151/0x1f0 [ 471.784945][T15332] skb_clone+0x151/0x1f0 [ 471.784972][T15332] __netlink_deliver_tap+0x2c9/0x500 [ 471.785011][T15332] ? netlink_attachskb+0x2e2/0x660 [ 471.785039][T15332] netlink_sendskb+0x126/0x150 [ 471.785096][T15332] netlink_unicast+0x28a/0x680 [ 471.785129][T15332] netlink_ack+0x4c8/0x500 [ 471.785180][T15332] netlink_rcv_skb+0x192/0x220 [ 471.785214][T15332] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 471.785249][T15332] nfnetlink_rcv+0x167/0x1720 [ 471.785276][T15332] ? __kfree_skb+0x109/0x150 [ 471.785378][T15332] ? nlmon_xmit+0x4f/0x60 [ 471.785402][T15332] ? consume_skb+0x4b/0x130 [ 471.785460][T15332] ? nlmon_xmit+0x4f/0x60 [ 471.785490][T15332] ? dev_hard_start_xmit+0x36c/0x3a0 [ 471.785594][T15332] ? __dev_queue_xmit+0x1396/0x1ec0 [ 471.785621][T15332] ? __dev_queue_xmit+0x165/0x1ec0 [ 471.785680][T15332] ? ref_tracker_free+0x37d/0x3e0 [ 471.785715][T15332] ? __netlink_deliver_tap+0x4dc/0x500 [ 471.785819][T15332] netlink_unicast+0x5a8/0x680 [ 471.785843][T15332] netlink_sendmsg+0x5c8/0x6f0 [ 471.785872][T15332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.785967][T15332] ____sys_sendmsg+0x563/0x5b0 [ 471.785992][T15332] ___sys_sendmsg+0x195/0x1e0 [ 471.786022][T15332] __x64_sys_sendmsg+0xd4/0x160 [ 471.786049][T15332] x64_sys_call+0x194c/0x3020 [ 471.786143][T15332] do_syscall_64+0x12c/0x3b0 [ 471.786187][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.786215][T15332] RIP: 0033:0x7f20015ece59 [ 471.786230][T15332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.786246][T15332] RSP: 002b:00007f200003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.786323][T15332] RAX: ffffffffffffffda RBX: 00007f2001865fa0 RCX: 00007f20015ece59 [ 471.786339][T15332] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 471.786354][T15332] RBP: 00007f200003f090 R08: 0000000000000000 R09: 0000000000000000 [ 471.786369][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.786421][T15332] R13: 00007f2001866038 R14: 00007f2001865fa0 R15: 00007fff2a0c7f88 [ 471.786463][T15332] [ 472.273799][T15360] loop3: detected capacity change from 0 to 2048 [ 472.285531][T15353] loop2: detected capacity change from 0 to 8192 [ 472.296251][T15360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.524754][T15365] loop6: detected capacity change from 0 to 1024 [ 472.641109][T15365] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 472.756973][T15365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.019185][T15374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3336'. [ 473.064855][T15360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15360 comm=syz.3.3334 [ 473.085645][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.289329][T15382] netlink: 'syz.3.3338': attribute type 10 has an invalid length. [ 473.299972][T15380] loop5: detected capacity change from 0 to 2048 [ 473.321748][T15382] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 473.343649][T15380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.358981][T15382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.381089][ T28] audit: type=1400 audit(1780396604.724:2227): avc: denied { create } for pid=15379 comm="syz.5.3339" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 473.423476][ T28] audit: type=1400 audit(1780396604.734:2228): avc: denied { read } for pid=15379 comm="syz.5.3339" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 473.477450][T15386] loop3: detected capacity change from 0 to 1024 [ 473.523427][T15386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 473.570205][T15386] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.614927][T15386] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3340: bg 0: block 112: padding at end of block bitmap is not set [ 473.672957][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.688681][T15392] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.3340: lblock 0 mapped to illegal pblock 0 (length 1) [ 473.732095][T15392] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.3340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 473.752597][ T28] audit: type=1400 audit(1780396605.104:2229): avc: denied { setattr } for pid=15385 comm="syz.3.3340" name="" dev="pipefs" ino=44404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 473.898198][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.989577][T15397] loop2: detected capacity change from 0 to 1024 [ 474.013688][T15397] EXT4-fs: Ignoring removed orlov option [ 474.036794][T15397] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 474.069217][T15397] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 474.079416][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.088356][T15397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 474.099888][T15397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.3344: Invalid inode table block 0 in block_group 0 [ 474.116727][T15397] loop2: lost filesystem error report for type 5 error -117 [ 474.120466][T15397] EXT4-fs (loop2): Remounting filesystem read-only [ 474.127897][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 474.127930][ C0] EXT4-fs (loop2): initial error at time 1780396605: __ext4_get_inode_loc:4885 [ 474.128005][ C0] EXT4-fs (loop2): last error at time 1780396605: __ext4_get_inode_loc:4885 [ 474.155688][T15404] loop5: detected capacity change from 0 to 512 [ 474.162138][T15397] Quota error (device loop2): write_blk: dquota write failed [ 474.176608][T15397] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 474.187058][T15397] EXT4-fs (loop2): 1 truncate cleaned up [ 474.198606][T15404] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 474.207286][T15406] loop6: detected capacity change from 0 to 2048 [ 474.215502][T15397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.215644][T15404] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3346: bg 0: block 288: padding at end of block bitmap is not set [ 474.260716][T15404] loop5: lost filesystem error report for type 5 error -117 [ 474.261856][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 474.263667][T15404] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 474.269199][ C1] EXT4-fs (loop5): initial error at time 1780396605: ext4_validate_block_bitmap:441 [ 474.269232][ C1] EXT4-fs (loop5): last error at time 1780396605: ext4_validate_block_bitmap:441 [ 474.270825][T15406] FAULT_INJECTION: forcing a failure. [ 474.270825][T15406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.300644][T15404] loop5: lost filesystem error report for type 5 error -117 [ 474.303308][T15406] CPU: 1 UID: 0 PID: 15406 Comm: syz.6.3345 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 474.303343][T15406] Tainted: [W]=WARN [ 474.303351][T15406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.303412][T15406] Call Trace: [ 474.303420][T15406] [ 474.303428][T15406] __dump_stack+0x1d/0x30 [ 474.303454][T15406] dump_stack_lvl+0x95/0xd0 [ 474.303474][T15406] dump_stack+0x15/0x1b [ 474.303493][T15406] should_fail_ex+0x263/0x280 [ 474.303553][T15406] should_fail+0xb/0x20 [ 474.303570][T15406] should_fail_usercopy+0x1a/0x20 [ 474.303591][T15406] _copy_from_user+0x1c/0xb0 [ 474.303615][T15406] bpf_test_init+0xb9/0x130 [ 474.303643][T15406] bpf_prog_test_run_xdp+0x306/0xa10 [ 474.303734][T15406] ? __rcu_read_unlock+0x4e/0x70 [ 474.303758][T15406] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 474.303820][T15406] bpf_prog_test_run+0x204/0x340 [ 474.303847][T15406] __sys_bpf+0x52e/0x7e0 [ 474.303876][T15406] __x64_sys_bpf+0x41/0x50 [ 474.303897][T15406] x64_sys_call+0x10cb/0x3020 [ 474.303930][T15406] do_syscall_64+0x12c/0x3b0 [ 474.303961][T15406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.303998][T15406] RIP: 0033:0x7f1f04f4ce59 [ 474.304015][T15406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.304039][T15406] RSP: 002b:00007f1f0399f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.304062][T15406] RAX: ffffffffffffffda RBX: 00007f1f051c5fa0 RCX: 00007f1f04f4ce59 [ 474.304077][T15406] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 474.304134][T15406] RBP: 00007f1f0399f090 R08: 0000000000000000 R09: 0000000000000000 [ 474.304147][T15406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.304160][T15406] R13: 00007f1f051c6038 R14: 00007f1f051c5fa0 R15: 00007ffc1be3cb68 [ 474.304179][T15406] [ 474.513531][T15409] loop3: detected capacity change from 0 to 8192 [ 474.518403][T15404] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3346: attempt to clear invalid blocks 1024 len 1 [ 474.533023][T15404] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 474.533354][T15404] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3346: invalid indirect mapped block 1819239214 (level 0) [ 474.557005][T15404] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 474.557285][T15404] EXT4-fs (loop5): 1 truncate cleaned up [ 474.581327][T15404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.595456][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.650446][T15411] FAULT_INJECTION: forcing a failure. [ 474.650446][T15411] name failslab, interval 1, probability 0, space 0, times 0 [ 474.689510][T15411] CPU: 1 UID: 0 PID: 15411 Comm: syz.2.3348 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 474.689568][T15411] Tainted: [W]=WARN [ 474.689575][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.689586][T15411] Call Trace: [ 474.689593][T15411] [ 474.689601][T15411] __dump_stack+0x1d/0x30 [ 474.689667][T15411] dump_stack_lvl+0x95/0xd0 [ 474.689686][T15411] dump_stack+0x15/0x1b [ 474.689702][T15411] should_fail_ex+0x263/0x280 [ 474.689722][T15411] should_failslab+0x8c/0xb0 [ 474.689819][T15411] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 474.689852][T15411] ? __alloc_skb+0x2d6/0x690 [ 474.689879][T15411] __alloc_skb+0x2d6/0x690 [ 474.689897][T15411] ? __alloc_skb+0x200/0x690 [ 474.689934][T15411] netlink_alloc_large_skb+0xbf/0xf0 [ 474.689993][T15411] netlink_sendmsg+0x40c/0x6f0 [ 474.690104][T15411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.690196][T15411] ____sys_sendmsg+0x563/0x5b0 [ 474.690262][T15411] ___sys_sendmsg+0x195/0x1e0 [ 474.690296][T15411] __x64_sys_sendmsg+0xd4/0x160 [ 474.690381][T15411] x64_sys_call+0x194c/0x3020 [ 474.690441][T15411] do_syscall_64+0x12c/0x3b0 [ 474.690503][T15411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.690525][T15411] RIP: 0033:0x7f20015ece59 [ 474.690542][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.690624][T15411] RSP: 002b:00007f200003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.690644][T15411] RAX: ffffffffffffffda RBX: 00007f2001865fa0 RCX: 00007f20015ece59 [ 474.690735][T15411] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000004 [ 474.690747][T15411] RBP: 00007f200003f090 R08: 0000000000000000 R09: 0000000000000000 [ 474.690760][T15411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.690771][T15411] R13: 00007f2001866038 R14: 00007f2001865fa0 R15: 00007fff2a0c7f88 [ 474.690788][T15411] [ 475.025261][T15419] loop6: detected capacity change from 0 to 512 [ 475.061991][ T28] audit: type=1400 audit(1780396606.284:2230): avc: denied { write } for pid=15415 comm="syz.2.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 475.084224][ T28] audit: type=1326 audit(1780396606.304:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20015ece59 code=0x7ffc0000 [ 475.117994][T15419] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3350: iget: bad i_size value: 38620345925642 [ 475.172210][ T28] audit: type=1326 audit(1780396606.304:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20015ece59 code=0x7ffc0000 [ 475.424772][T15419] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.431857][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 475.447499][ C0] EXT4-fs (loop6): initial error at time 1780396606: ext4_orphan_get:1397: inode 15 [ 475.456929][ C0] EXT4-fs (loop6): last error at time 1780396606: ext4_orphan_get:1397: inode 15 [ 475.499010][T15419] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3350: couldn't read orphan inode 15 (err -117) [ 475.663518][ T28] audit: type=1326 audit(1780396606.304:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20015ece59 code=0x7ffc0000 [ 475.676087][T15419] loop6: lost filesystem error report for type 5 error -117 [ 475.689739][T15419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.711942][ T28] audit: type=1326 audit(1780396606.304:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f20015ece59 code=0x7ffc0000 [ 475.789313][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.801147][T15426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3351'. [ 475.824896][T15419] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3350: bg 0: block 5: invalid block bitmap [ 475.857145][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.880651][T15427] loop3: detected capacity change from 0 to 512 [ 475.911024][T15427] EXT4-fs: Ignoring removed oldalloc option [ 475.945551][ T3415] IPVS: starting estimator thread 0... [ 475.979903][T15427] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 475.990184][T15427] EXT4-fs (loop3): orphan cleanup on readonly fs [ 475.998471][T15427] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 476.024951][T15427] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 476.032001][T15441] IPVS: using max 2736 ests per chain, 136800 per kthread [ 476.036616][T15427] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.3352: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 476.069108][T15427] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 476.070011][T15427] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3352: couldn't read orphan inode 13 (err -117) [ 476.071860][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 476.084930][T15427] loop3: lost filesystem error report for type 5 error -117 [ 476.091191][ C0] EXT4-fs (loop3): last error at time 1780396607: ext4_ext_check_inode:521: inode 13 [ 476.111989][T15427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.133430][T15446] FAULT_INJECTION: forcing a failure. [ 476.133430][T15446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.152514][T15427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.153929][T15446] CPU: 0 UID: 0 PID: 15446 Comm: syz.2.3359 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 476.153963][T15446] Tainted: [W]=WARN [ 476.153980][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.153993][T15446] Call Trace: [ 476.154001][T15446] [ 476.154009][T15446] __dump_stack+0x1d/0x30 [ 476.154034][T15446] dump_stack_lvl+0x95/0xd0 [ 476.154055][T15446] dump_stack+0x15/0x1b [ 476.154074][T15446] should_fail_ex+0x263/0x280 [ 476.154127][T15446] should_fail+0xb/0x20 [ 476.154145][T15446] should_fail_usercopy+0x1a/0x20 [ 476.154213][T15446] _copy_from_user+0x1c/0xb0 [ 476.154237][T15446] kstrtouint_from_user+0x69/0xf0 [ 476.154314][T15446] proc_fail_nth_write+0x50/0x160 [ 476.154342][T15446] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 476.154369][T15446] vfs_write+0x269/0x9f0 [ 476.154445][T15446] ? __rcu_read_unlock+0x4e/0x70 [ 476.154521][T15446] ? __fget_files+0x184/0x1c0 [ 476.154541][T15446] ? mutex_lock+0x57/0x90 [ 476.154565][T15446] ksys_write+0xdc/0x1a0 [ 476.154653][T15446] __x64_sys_write+0x40/0x50 [ 476.154681][T15446] x64_sys_call+0x27e1/0x3020 [ 476.154705][T15446] do_syscall_64+0x12c/0x3b0 [ 476.154746][T15446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.154856][T15446] RIP: 0033:0x7f20015ad68e [ 476.154874][T15446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 476.154892][T15446] RSP: 002b:00007f200003efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 476.155010][T15446] RAX: ffffffffffffffda RBX: 00007f200003f6c0 RCX: 00007f20015ad68e [ 476.155025][T15446] RDX: 0000000000000001 RSI: 00007f200003f0a0 RDI: 0000000000000006 [ 476.155056][T15446] RBP: 00007f200003f090 R08: 0000000000000000 R09: 0000000000000000 [ 476.155126][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.155139][T15446] R13: 00007f2001866038 R14: 00007f2001865fa0 R15: 00007fff2a0c7f88 [ 476.155158][T15446] [ 476.500506][T15457] loop4: detected capacity change from 0 to 8192 [ 476.785890][T15474] loop3: detected capacity change from 0 to 512 [ 476.818972][T15474] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3367: iget: bad i_size value: 38620345925642 [ 476.847622][T15474] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.847901][T15474] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3367: couldn't read orphan inode 15 (err -117) [ 476.857110][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 476.857130][ C0] EXT4-fs (loop3): initial error at time 1780396608: ext4_orphan_get:1397: inode 15 [ 476.857174][ C0] EXT4-fs (loop3): last error at time 1780396608: ext4_orphan_get:1397: inode 15 [ 476.894267][T15474] loop3: lost filesystem error report for type 5 error -117 [ 476.894801][T15474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.916167][T15474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3367: bg 0: block 5: invalid block bitmap [ 476.939014][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.487566][T15491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3373'. [ 477.488594][T15493] loop6: detected capacity change from 0 to 128 [ 477.585499][T15493] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 477.598309][T15493] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.614318][T15493] EXT4-fs (loop6): shut down requested (1) [ 477.659589][T13196] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.852662][T15496] loop6: detected capacity change from 0 to 8192 [ 478.042417][T15507] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 478.070658][T15507] FAT-fs (loop6): Filesystem has been set read-only [ 478.174913][T15505] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3379: iget: bad i_size value: 38620345925642 [ 478.233333][T15505] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 478.233525][T15505] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3379: couldn't read orphan inode 15 (err -117) [ 478.242846][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 478.242868][ C0] EXT4-fs (loop3): initial error at time 1780396609: ext4_orphan_get:1397: inode 15 [ 478.242898][ C0] EXT4-fs (loop3): last error at time 1780396609: ext4_orphan_get:1397: inode 15 [ 478.401623][T15505] loop3: lost filesystem error report for type 5 error -117 [ 478.403401][T15519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.426052][T15505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.525729][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.083499][T15526] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3383: inode has both inline data and extents flags [ 479.246201][T15526] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.246646][T15526] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3383: couldn't read orphan inode 15 (err -117) [ 479.278496][T15526] loop3: lost filesystem error report for type 5 error -117 [ 479.280205][T15526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.596283][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3383'. [ 479.608937][T15545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3383'. [ 479.628967][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.687076][T15549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15549 comm=syz.6.3390 [ 479.898487][T15551] set_capacity_and_notify: 3 callbacks suppressed [ 479.898610][T15551] loop2: detected capacity change from 0 to 1024 [ 479.949943][T15551] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 480.005834][T15551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.590874][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.191767][T15566] loop3: detected capacity change from 0 to 512 [ 481.200953][T15566] EXT4-fs: dax option not supported [ 481.411778][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.922161][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 481.922176][ T28] audit: type=1400 audit(1780396613.274:2332): avc: denied { read } for pid=15568 comm="syz.6.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 482.059424][T15583] netlink: 'syz.2.3398': attribute type 33 has an invalid length. [ 482.100760][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 482.146703][T15583] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 482.205578][ T28] audit: type=1400 audit(1780396613.554:2333): avc: denied { write } for pid=15580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.648312][ T28] audit: type=1400 audit(1780396613.994:2334): avc: denied { write } for pid=15599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.746485][T15604] FAULT_INJECTION: forcing a failure. [ 482.746485][T15604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.746593][T15604] CPU: 0 UID: 0 PID: 15604 Comm: syz.6.3399 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 482.746626][T15604] Tainted: [W]=WARN [ 482.746633][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.746694][T15604] Call Trace: [ 482.746701][T15604] [ 482.746710][T15604] __dump_stack+0x1d/0x30 [ 482.746733][T15604] dump_stack_lvl+0x95/0xd0 [ 482.746752][T15604] dump_stack+0x15/0x1b [ 482.746791][T15604] should_fail_ex+0x263/0x280 [ 482.746815][T15604] should_fail+0xb/0x20 [ 482.746862][T15604] should_fail_usercopy+0x1a/0x20 [ 482.746882][T15604] _copy_from_user+0x1c/0xb0 [ 482.746905][T15604] ___sys_recvmsg+0xaa/0x3b0 [ 482.747003][T15604] do_recvmmsg+0x1ef/0x560 [ 482.747037][T15604] ? get_timespec64+0xd2/0x100 [ 482.747061][T15604] __x64_sys_recvmmsg+0xfb/0x170 [ 482.747107][T15604] x64_sys_call+0x80f/0x3020 [ 482.747133][T15604] do_syscall_64+0x12c/0x3b0 [ 482.747195][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.747216][T15604] RIP: 0033:0x7f1f04f4ce59 [ 482.747231][T15604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.747250][T15604] RSP: 002b:00007f1f0399f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 482.747275][T15604] RAX: ffffffffffffffda RBX: 00007f1f051c5fa0 RCX: 00007f1f04f4ce59 [ 482.747291][T15604] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000004 [ 482.747309][T15604] RBP: 00007f1f0399f090 R08: 00002000000001c0 R09: 0000000000000000 [ 482.747346][T15604] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 482.747389][T15604] R13: 00007f1f051c6038 R14: 00007f1f051c5fa0 R15: 00007ffc1be3cb68 [ 482.747410][T15604] [ 483.009396][T15611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3402'. [ 483.009418][T15611] netem: unknown loss type 13 [ 483.009428][T15611] netem: change failed [ 483.031268][T15621] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20004 [ 483.107225][ T28] audit: type=1400 audit(1780396614.454:2335): avc: denied { write } for pid=15613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.195309][ T28] audit: type=1400 audit(1780396614.544:2336): avc: denied { write } for pid=15632 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.478301][T15636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15636 comm=syz.4.3405 [ 484.022689][T15647] loop6: detected capacity change from 0 to 256 [ 484.056399][T15649] syzkaller0: entered promiscuous mode [ 484.063789][T15649] syzkaller0: entered allmulticast mode [ 484.074295][T15649] tipc: Enabled bearer , priority 0 [ 484.081668][T15648] tipc: Resetting bearer [ 484.091414][T15648] tipc: Disabling bearer [ 484.186773][T15659] netem: change failed [ 484.357074][T15659] loop6: detected capacity change from 0 to 8192 [ 484.643375][ T28] audit: type=1400 audit(1780396615.994:2337): avc: denied { write } for pid=15677 comm="syz.6.3421" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 484.774276][ T28] audit: type=1400 audit(1780396616.114:2338): avc: denied { map } for pid=15677 comm="syz.6.3421" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 484.798939][ T28] audit: type=1400 audit(1780396616.114:2339): avc: denied { execute } for pid=15677 comm="syz.6.3421" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 484.954410][T15686] netlink: 'syz.6.3423': attribute type 6 has an invalid length. [ 484.967190][T15686] loop6: detected capacity change from 0 to 512 [ 484.974650][T15686] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 485.219169][T15694] loop5: detected capacity change from 0 to 512 [ 485.251906][T15694] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3426: iget: bad i_size value: 38620345925642 [ 485.272684][T15694] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 485.272884][T15694] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3426: couldn't read orphan inode 15 (err -117) [ 485.282083][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 485.282103][ C1] EXT4-fs (loop5): initial error at time 1780396616: ext4_orphan_get:1397: inode 15 [ 485.282134][ C1] EXT4-fs (loop5): last error at time 1780396616: ext4_orphan_get:1397: inode 15 [ 485.319547][T15694] loop5: lost filesystem error report for type 5 error -117 [ 485.321882][T15694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.355865][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.441066][T15705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=15705 comm=syz.5.3428 [ 485.540796][T15710] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 485.766497][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.990007][T15722] loop2: detected capacity change from 0 to 1024 [ 486.011064][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.013713][T15726] loop5: detected capacity change from 0 to 512 [ 486.062197][ T3412] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 486.067713][T15726] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3438: iget: bad i_size value: 38620345925642 [ 486.069993][ T3412] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.097566][T15726] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 486.097723][T15726] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3438: couldn't read orphan inode 15 (err -117) [ 486.106971][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 486.106995][ C0] EXT4-fs (loop5): initial error at time 1780396617: ext4_orphan_get:1397: inode 15 [ 486.107023][ C0] EXT4-fs (loop5): last error at time 1780396617: ext4_orphan_get:1397: inode 15 [ 486.123230][T15722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.151914][T15726] loop5: lost filesystem error report for type 5 error -117 [ 486.170215][T15726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.206979][T15731] fido_id[15731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 486.278140][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.301111][ T28] audit: type=1400 audit(1780396617.644:2340): avc: denied { setopt } for pid=15727 comm="syz.3.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 486.640992][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.705197][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3445'. [ 486.817558][T15755] loop5: detected capacity change from 0 to 1024 [ 486.834560][T15755] EXT4-fs: test_dummy_encryption option not supported [ 486.880584][T15755] 9p: Bad value for 'wfdno' [ 486.923078][ T3415] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 486.934124][ T3415] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.961233][T15758] loop5: detected capacity change from 0 to 2048 [ 487.009640][T15758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.048658][T15758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.096632][ T28] audit: type=1400 audit(1780396618.444:2341): avc: denied { write } for pid=15752 comm="syz.2.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 487.279710][T15768] loop2: detected capacity change from 0 to 512 [ 487.337364][T15768] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3450: iget: bad i_size value: 38620345925642 [ 487.372973][T15768] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.374363][T15768] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3450: couldn't read orphan inode 15 (err -117) [ 487.383607][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 487.383627][ C1] EXT4-fs (loop2): initial error at time 1780396618: ext4_orphan_get:1397: inode 15 [ 487.383661][ C1] EXT4-fs (loop2): last error at time 1780396618: ext4_orphan_get:1397: inode 15 [ 487.421067][T15768] loop2: lost filesystem error report for type 5 error -117 [ 487.424936][T15768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.468703][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.855300][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.862552][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.901769][T15789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.911736][T15789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.957718][ T3608] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.966851][ T3608] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.977784][ T3608] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.990969][ T3608] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.356934][T15795] netlink: 'syz.6.3459': attribute type 29 has an invalid length. [ 488.371694][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3459'. [ 488.394070][T15795] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 488.439525][T15797] FAULT_INJECTION: forcing a failure. [ 488.439525][T15797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.463614][T15797] CPU: 1 UID: 0 PID: 15797 Comm: syz.6.3460 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 488.463732][T15797] Tainted: [W]=WARN [ 488.463739][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 488.463754][T15797] Call Trace: [ 488.463762][T15797] [ 488.463771][T15797] __dump_stack+0x1d/0x30 [ 488.463800][T15797] dump_stack_lvl+0x95/0xd0 [ 488.463824][T15797] dump_stack+0x15/0x1b [ 488.463843][T15797] should_fail_ex+0x263/0x280 [ 488.463945][T15797] should_fail+0xb/0x20 [ 488.463962][T15797] should_fail_usercopy+0x1a/0x20 [ 488.463985][T15797] _copy_to_user+0x20/0xa0 [ 488.464085][T15797] simple_read_from_buffer+0xb5/0x130 [ 488.464125][T15797] proc_fail_nth_read+0x10e/0x150 [ 488.464155][T15797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.464179][T15797] vfs_read+0x1ab/0x7f0 [ 488.464289][T15797] ? __rcu_read_unlock+0x4e/0x70 [ 488.464313][T15797] ? __fget_files+0x184/0x1c0 [ 488.464332][T15797] ? mutex_lock+0x57/0x90 [ 488.464356][T15797] ksys_read+0xdc/0x1a0 [ 488.464456][T15797] __x64_sys_read+0x40/0x50 [ 488.464552][T15797] x64_sys_call+0x2886/0x3020 [ 488.464574][T15797] do_syscall_64+0x12c/0x3b0 [ 488.464603][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.464623][T15797] RIP: 0033:0x7f1f04f0d68e [ 488.464706][T15797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.464726][T15797] RSP: 002b:00007f1f0399efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.464750][T15797] RAX: ffffffffffffffda RBX: 00007f1f0399f6c0 RCX: 00007f1f04f0d68e [ 488.464767][T15797] RDX: 000000000000000f RSI: 00007f1f0399f0a0 RDI: 0000000000000004 [ 488.464800][T15797] RBP: 00007f1f0399f090 R08: 0000000000000000 R09: 0000000000000000 [ 488.464815][T15797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.464891][T15797] R13: 00007f1f051c6038 R14: 00007f1f051c5fa0 R15: 00007ffc1be3cb68 [ 488.464913][T15797] [ 488.997716][T15806] loop4: detected capacity change from 0 to 512 [ 489.040598][T15806] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3464: iget: bad i_size value: 38620345925642 [ 489.073177][T15806] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 489.073632][T15806] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3464: couldn't read orphan inode 15 (err -117) [ 489.082808][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 489.082825][ C1] EXT4-fs (loop4): initial error at time 1780396620: ext4_orphan_get:1397: inode 15 [ 489.082870][ C1] EXT4-fs (loop4): last error at time 1780396620: ext4_orphan_get:1397: inode 15 [ 489.280207][T15806] loop4: lost filesystem error report for type 5 error -117 [ 489.342101][T15806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.376146][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.593616][T15825] gretap1: entered allmulticast mode [ 489.600462][T15825] team0: Port device gretap1 added [ 489.626827][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'. [ 489.764392][T15838] loop6: detected capacity change from 0 to 4096 [ 489.771226][T15838] EXT4-fs: inline encryption not supported [ 489.780544][T15838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.798618][T15838] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 489.799668][T15840] loop4: detected capacity change from 0 to 512 [ 489.819484][T15838] System zones: 0-5 [ 489.841433][T15846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.849039][T15840] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3476: iget: bad i_size value: 38620345925642 [ 489.866155][T15840] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 489.866428][T15840] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3476: couldn't read orphan inode 15 (err -117) [ 489.868939][T15850] FAULT_INJECTION: forcing a failure. [ 489.868939][T15850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.875623][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 489.875663][ C0] EXT4-fs (loop4): initial error at time 1780396621: ext4_orphan_get:1397 [ 489.892613][T15838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.900536][ C0] : inode 15 [ 489.913527][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3478'. [ 489.915518][ C0] [ 489.940084][T15850] CPU: 1 UID: 0 PID: 15850 Comm: syz.2.3479 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 489.940176][T15850] Tainted: [W]=WARN [ 489.940184][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 489.940197][T15850] Call Trace: [ 489.940204][T15850] [ 489.940213][T15850] __dump_stack+0x1d/0x30 [ 489.940311][T15850] dump_stack_lvl+0x95/0xd0 [ 489.940354][T15850] dump_stack+0x15/0x1b [ 489.940373][T15850] should_fail_ex+0x263/0x280 [ 489.940399][T15850] should_fail+0xb/0x20 [ 489.940417][T15850] should_fail_usercopy+0x1a/0x20 [ 489.940458][T15850] _copy_from_user+0x1c/0xb0 [ 489.940483][T15850] ___sys_sendmsg+0xc1/0x1e0 [ 489.940518][T15850] __x64_sys_sendmsg+0xd4/0x160 [ 489.940547][T15850] x64_sys_call+0x194c/0x3020 [ 489.940652][T15850] do_syscall_64+0x12c/0x3b0 [ 489.940746][T15850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.940768][T15850] RIP: 0033:0x7f20015ece59 [ 489.940830][T15850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.940849][T15850] RSP: 002b:00007f200003f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.940930][T15850] RAX: ffffffffffffffda RBX: 00007f2001865fa0 RCX: 00007f20015ece59 [ 489.940945][T15850] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 489.940959][T15850] RBP: 00007f200003f090 R08: 0000000000000000 R09: 0000000000000000 [ 489.940972][T15850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.940985][T15850] R13: 00007f2001866038 R14: 00007f2001865fa0 R15: 00007fff2a0c7f88 [ 489.941013][T15850] [ 489.955294][T15848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.957148][ C0] EXT4-fs (loop4): last error at time 1780396621: ext4_orphan_get:1397: inode 15 [ 490.138091][T15846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.141373][T15840] loop4: lost filesystem error report for type 5 error -117 [ 490.159115][T15840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.192660][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.203060][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.214028][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.224981][T15864] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3483'. [ 490.236962][T15862] netlink: 'syz.5.3482': attribute type 1 has an invalid length. [ 490.257593][ T28] audit: type=1400 audit(1780396621.604:2342): avc: denied { ioctl } for pid=15861 comm="syz.5.3482" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 490.318639][T15868] netlink: 'syz.3.3484': attribute type 15 has an invalid length. [ 490.327215][T15868] netlink: 'syz.3.3484': attribute type 15 has an invalid length. [ 490.354003][T15868] netlink: 'syz.3.3484': attribute type 15 has an invalid length. [ 490.393767][T15877] netlink: 'syz.4.3488': attribute type 29 has an invalid length. [ 490.412155][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'. [ 490.431744][T15877] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 490.604707][T15894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3493'. [ 490.822280][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3495'. [ 490.843328][T15902] set_capacity_and_notify: 1 callbacks suppressed [ 490.843347][T15902] loop4: detected capacity change from 0 to 512 [ 491.335630][T15902] EXT4-fs (loop4): 1 orphan inode deleted [ 491.341809][T15902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.451654][T15906] loop5: detected capacity change from 0 to 512 [ 491.473160][T15906] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3496: iget: bad i_size value: 38620345925642 [ 491.487695][T15906] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.489094][T15906] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3496: couldn't read orphan inode 15 (err -117) [ 491.491850][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 491.516722][ C0] EXT4-fs (loop5): initial error at time 1780396622: ext4_orphan_get:1397: inode 15 [ 491.521710][T15906] loop5: lost filesystem error report for type 5 error -117 [ 491.526158][ C0] EXT4-fs (loop5): last error at time 1780396622: ext4_orphan_get:1397: inode 15 [ 491.585243][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.642401][T15906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.675055][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3499'. [ 491.688370][T13449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.720776][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 491.823622][T15930] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3506'. [ 491.835114][ T28] audit: type=1400 audit(1780396623.174:2343): avc: denied { create } for pid=15924 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 491.881566][T15919] usb usb7: usbfs: process 15919 (syz.5.3500) did not claim interface 0 before use [ 491.904321][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3506'. [ 491.951062][ T28] audit: type=1400 audit(1780396623.294:2344): avc: denied { setopt } for pid=15926 comm="syz.4.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.021513][T15928] netlink: 'syz.5.3500': attribute type 21 has an invalid length. [ 492.051872][T15928] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3500'. [ 492.080540][T15950] loop6: detected capacity change from 0 to 512 [ 492.091544][T15950] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 492.112796][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 492.195619][T15958] x_tables: ip_tables: osf match: only valid for protocol 6 [ 492.206243][T15950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 492.226805][T15950] System zones: 1-12 [ 492.408372][T15968] netlink: 'syz.3.3514': attribute type 11 has an invalid length. [ 492.416364][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 492.927380][T15972] deleting an unspecified loop device is not supported. [ 492.980996][T15972] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.992749][T15950] EXT4-fs (loop6): 1 truncate cleaned up [ 492.994529][T15972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.097383][T15979] sctp: [Deprecated]: syz.4.3519 (pid 15979) Use of int in max_burst socket option. [ 493.097383][T15979] Use struct sctp_assoc_value instead [ 493.148625][T15972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.165458][T15972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.181919][T15972] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 493.196070][T13899] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.203141][T13899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.211677][T13899] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.215257][T15950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.218737][T13899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.304833][T15994] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 493.337373][T15996] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 493.353688][T15946] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3510'. [ 493.364891][ T28] audit: type=1400 audit(1780396624.714:2345): avc: denied { unlink } for pid=15945 comm="syz.6.3510" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 493.424698][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.436581][T16000] loop2: detected capacity change from 0 to 764 [ 493.454620][ T28] audit: type=1400 audit(1780396624.794:2346): avc: denied { remount } for pid=15999 comm="syz.2.3525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 493.497526][T15998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 493.504167][T15998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.533859][T15998] vhci_hcd vhci_hcd.0: Device attached [ 493.601747][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.617328][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.639052][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.649073][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.660533][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3526'. [ 493.782538][ T3392] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 494.190796][T16007] vhci_hcd: connection reset by peer [ 494.198028][ T3608] vhci_hcd vhci_hcd.3: stop threads [ 494.203414][ T3608] vhci_hcd vhci_hcd.3: release socket [ 494.221883][ T3608] vhci_hcd vhci_hcd.3: disconnect device [ 494.281364][ T28] audit: type=1400 audit(1780396625.624:2347): avc: denied { ioctl } for pid=16020 comm="syz.6.3529" path="socket:[50108]" dev="sockfs" ino=50108 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.397748][T16028] loop6: detected capacity change from 0 to 512 [ 494.414771][T16024] FAULT_INJECTION: forcing a failure. [ 494.414771][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 494.430939][T16024] CPU: 0 UID: 0 PID: 16024 Comm: syz.3.3530 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 494.430971][T16024] Tainted: [W]=WARN [ 494.430978][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.430990][T16024] Call Trace: [ 494.430998][T16024] [ 494.431008][T16024] __dump_stack+0x1d/0x30 [ 494.431035][T16024] dump_stack_lvl+0x95/0xd0 [ 494.431127][T16024] dump_stack+0x15/0x1b [ 494.431149][T16024] should_fail_ex+0x263/0x280 [ 494.431181][T16024] should_failslab+0x8c/0xb0 [ 494.431271][T16024] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 494.431381][T16024] ? __alloc_skb+0x2d6/0x690 [ 494.431463][T16024] ? __rcu_read_unlock+0x4e/0x70 [ 494.431488][T16024] __alloc_skb+0x2d6/0x690 [ 494.431511][T16024] ? __alloc_skb+0x200/0x690 [ 494.431535][T16024] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 494.431641][T16024] ? __rcu_read_unlock+0x4e/0x70 [ 494.431728][T16024] rtmsg_ifinfo+0x6d/0x110 [ 494.431753][T16024] netif_state_change+0x1d9/0x250 [ 494.431786][T16024] do_setlink+0x276d/0x2950 [ 494.431849][T16024] ? _raw_spin_lock_bh+0x56/0xb0 [ 494.431872][T16024] ? _raw_spin_unlock_bh+0x18/0x20 [ 494.431923][T16024] ? br_multicast_set_port_router+0x5ef/0x710 [ 494.431954][T16024] ? br_setport+0xd59/0xdc0 [ 494.431979][T16024] rtnl_newlink+0x108a/0x1400 [ 494.432011][T16024] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 494.432088][T16024] ? rtnl_newlink+0x701/0x1400 [ 494.432127][T16024] ? __siphash_unaligned+0x197/0x2e0 [ 494.432160][T16024] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 494.432210][T16024] ? __rcu_read_unlock+0x4e/0x70 [ 494.432232][T16024] ? avc_has_perm_noaudit+0xab/0x130 [ 494.432330][T16024] ? cred_has_capability+0x224/0x2a0 [ 494.432362][T16024] ? selinux_capable+0x31/0x40 [ 494.432399][T16024] ? security_capable+0x7b/0x90 [ 494.432498][T16024] ? ns_capable+0x7c/0xb0 [ 494.432530][T16024] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.432558][T16024] rtnetlink_rcv_msg+0x64b/0x720 [ 494.432634][T16024] netlink_rcv_skb+0x123/0x220 [ 494.432668][T16024] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.432754][T16024] rtnetlink_rcv+0x1c/0x30 [ 494.432785][T16024] netlink_unicast+0x5a8/0x680 [ 494.432816][T16024] netlink_sendmsg+0x5c8/0x6f0 [ 494.432850][T16024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.432916][T16024] ____sys_sendmsg+0x563/0x5b0 [ 494.433023][T16024] ___sys_sendmsg+0x195/0x1e0 [ 494.433059][T16024] __x64_sys_sendmsg+0xd4/0x160 [ 494.433151][T16024] x64_sys_call+0x194c/0x3020 [ 494.433182][T16024] do_syscall_64+0x12c/0x3b0 [ 494.433212][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.433244][T16024] RIP: 0033:0x7fd435d2ce59 [ 494.433264][T16024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.433297][T16024] RSP: 002b:00007fd434766028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.433322][T16024] RAX: ffffffffffffffda RBX: 00007fd435fa6090 RCX: 00007fd435d2ce59 [ 494.433338][T16024] RDX: 0000000024044040 RSI: 0000200000000200 RDI: 0000000000000009 [ 494.433353][T16024] RBP: 00007fd434766090 R08: 0000000000000000 R09: 0000000000000000 [ 494.433368][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.433383][T16024] R13: 00007fd435fa6128 R14: 00007fd435fa6090 R15: 00007ffeb63b7fe8 [ 494.433409][T16024] [ 494.850283][ T28] audit: type=1400 audit(1780396626.194:2348): avc: denied { write } for pid=16029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.901180][ T28] audit: type=1400 audit(1780396626.244:2349): avc: denied { write } for pid=16042 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.944415][ T28] audit: type=1326 audit(1780396626.294:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222109ce59 code=0x7ffc0000 [ 494.977705][ T28] audit: type=1326 audit(1780396626.294:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222109ce59 code=0x7ffc0000 [ 495.003360][ T28] audit: type=1326 audit(1780396626.294:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222109ce59 code=0x7ffc0000 [ 495.029126][ T28] audit: type=1326 audit(1780396626.294:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f222109ce59 code=0x7ffc0000 [ 495.058668][ T28] audit: type=1326 audit(1780396626.294:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222109ce59 code=0x7ffc0000 [ 495.143755][T16067] netlink: 'syz.6.3536': attribute type 10 has an invalid length. [ 495.307141][ T3372] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 495.315138][ T3372] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 495.417663][T16076] loop6: detected capacity change from 0 to 512 [ 495.428699][T16076] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3540: Invalid inode bitmap blk 4 in block_group 0 [ 495.441539][T16076] loop6: lost filesystem error report for type 5 error -117 [ 495.442255][T16076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.424694][T16000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.483431][T16088] FAULT_INJECTION: forcing a failure. [ 496.483431][T16088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.512114][T16088] CPU: 1 UID: 0 PID: 16088 Comm: syz.5.3541 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 496.512230][T16088] Tainted: [W]=WARN [ 496.512238][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.512252][T16088] Call Trace: [ 496.512259][T16088] [ 496.512267][T16088] __dump_stack+0x1d/0x30 [ 496.512299][T16088] dump_stack_lvl+0x95/0xd0 [ 496.512386][T16088] dump_stack+0x15/0x1b [ 496.512407][T16088] should_fail_ex+0x263/0x280 [ 496.512511][T16088] should_fail+0xb/0x20 [ 496.512530][T16088] should_fail_usercopy+0x1a/0x20 [ 496.512554][T16088] _copy_from_user+0x1c/0xb0 [ 496.512582][T16088] memdup_user+0x5e/0xd0 [ 496.512627][T16088] sctp_getsockopt_connectx3+0x1b2/0x340 [ 496.512734][T16088] sctp_getsockopt+0x910/0xaa0 [ 496.512754][T16088] sock_common_getsockopt+0x60/0x70 [ 496.512788][T16088] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 496.512897][T16088] do_sock_getsockopt+0x2f5/0x570 [ 496.512924][T16088] __x64_sys_getsockopt+0x11d/0x1a0 [ 496.513011][T16088] x64_sys_call+0x2dcf/0x3020 [ 496.513036][T16088] do_syscall_64+0x12c/0x3b0 [ 496.513073][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.513096][T16088] RIP: 0033:0x7f7ef219ce59 [ 496.513121][T16088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.513141][T16088] RSP: 002b:00007f7ef0bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 496.513165][T16088] RAX: ffffffffffffffda RBX: 00007f7ef2415fa0 RCX: 00007f7ef219ce59 [ 496.513200][T16088] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 496.513231][T16088] RBP: 00007f7ef0bef090 R08: 0000200000000100 R09: 0000000000000000 [ 496.513244][T16088] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 496.513258][T16088] R13: 00007f7ef2416038 R14: 00007f7ef2415fa0 R15: 00007fff145dd758 [ 496.513278][T16088] [ 496.720822][T16093] loop3: detected capacity change from 0 to 512 [ 496.727612][T16095] -1: renamed from syzkaller0 [ 496.733112][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.765026][T16097] netlink: 'syz.6.3547': attribute type 10 has an invalid length. [ 496.911491][T16099] loop6: detected capacity change from 0 to 1024 [ 496.934908][T16099] EXT4-fs: Ignoring removed nobh option [ 496.977791][T16099] EXT4-fs: Ignoring removed bh option [ 497.007289][T16099] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 497.017651][T16086] loop2: detected capacity change from 0 to 256 [ 497.034246][T16086] syzkaller0: entered promiscuous mode [ 497.039803][T16086] syzkaller0: entered allmulticast mode [ 497.100213][T16099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.135506][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.190961][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3554'. [ 497.275041][T16121] loop5: detected capacity change from 0 to 8192 [ 497.300397][T16121] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 497.379207][T16125] loop2: detected capacity change from 0 to 512 [ 497.412267][T16125] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3558: invalid indirect mapped block 256 (level 2) [ 497.425624][T16125] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.425898][T16125] EXT4-fs (loop2): 2 truncates cleaned up [ 497.441374][T16125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.464677][T16129] netlink: 'syz.4.3559': attribute type 10 has an invalid length. [ 497.474700][T16129] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 497.484882][T16129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.528212][T16132] netlink: 'syz.6.3560': attribute type 6 has an invalid length. [ 497.546465][T16134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3558'. [ 497.559025][T16132] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3560'. [ 497.584292][T16134] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3558: bg 0: block 5: invalid block bitmap [ 497.608647][T16136] netlink: get zone limit has 8 unknown bytes [ 497.632570][T16134] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 497.657789][T16134] EXT4-fs (loop2): This should not happen!! Data will be lost [ 497.657789][T16134] [ 497.679737][T16134] EXT4-fs (loop2): Total free blocks count 0 [ 497.691749][T16134] EXT4-fs (loop2): Free/Dirty block details [ 497.703623][T16134] EXT4-fs (loop2): free_blocks=0 [ 497.714589][T16134] EXT4-fs (loop2): dirty_blocks=3652 [ 497.725959][T16134] EXT4-fs (loop2): Block reservation details [ 497.726126][T16140] loop6: detected capacity change from 0 to 256 [ 497.738240][T16134] EXT4-fs (loop2): i_reserved_data_blocks=3652 [ 497.767006][T13899] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2048 with error 28 [ 497.795486][ T8779] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 498.025808][T16154] netlink: 'syz.2.3563': attribute type 3 has an invalid length. [ 498.276583][T16163] loop4: detected capacity change from 0 to 8192 [ 498.293427][T16161] loop6: detected capacity change from 0 to 8192 [ 498.757409][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 498.796502][T16175] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3572'. [ 498.834085][T16177] loop2: detected capacity change from 0 to 512 [ 498.854895][T16177] EXT4-fs: Ignoring removed bh option [ 498.872669][T16177] ext3: Unknown parameter 'noacl' [ 498.922310][ T3392] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 499.262685][T16187] loop5: detected capacity change from 0 to 256 [ 499.291993][T16187] syzkaller0: entered promiscuous mode [ 499.297533][T16187] syzkaller0: entered allmulticast mode [ 499.493829][T16204] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 499.503210][T16204] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3582: bg 0: block 104: invalid block bitmap [ 499.515784][T16204] loop3: lost filesystem error report for type 5 error -117 [ 499.515959][T16204] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 499.532115][T16204] loop3: lost filesystem error report for type 5 error -117 [ 499.532322][T16204] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3582: invalid indirect mapped block 1 (level 1) [ 499.541894][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 499.559215][ C0] EXT4-fs (loop3): initial error at time 1780396630: ext4_validate_block_bitmap:432 [ 499.568266][T16204] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 499.568635][ C0] EXT4-fs (loop3): last error at time 1780396630: ext4_free_branches:1023: inode 11 [ 499.590606][T16204] EXT4-fs (loop3): 1 truncate cleaned up [ 499.593312][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3583'. [ 499.598934][T16204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.699867][T16191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.713975][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3576'. [ 499.750783][T16215] tipc: Started in network mode [ 499.755666][T16215] tipc: Node identity ac1414aa, cluster identity 4711 [ 499.762731][T16215] tipc: Enabled bearer , priority 10 [ 499.769761][T16204] tipc: Enabled bearer , priority 0 [ 499.817571][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.876692][ T28] kauditd_printk_skb: 591 callbacks suppressed [ 499.876710][ T28] audit: type=1400 audit(1780396631.224:2946): avc: denied { mounton } for pid=16221 comm="syz.5.3588" path="/133/file0/file0" dev="loop5" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 499.928421][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3588'. [ 499.997710][T16229] syzkaller0: entered promiscuous mode [ 500.004784][T16229] syzkaller0: entered allmulticast mode [ 500.154836][T14437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.287599][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 500.461994][ T28] audit: type=1326 audit(1780396631.794:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.3.3600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd435d2ce59 code=0x0 [ 500.711926][T16260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3603'. [ 500.967605][T16263] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 501.101279][T16263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.594465][T16270] syzkaller0: entered promiscuous mode [ 501.611526][T16270] syzkaller0: entered allmulticast mode [ 501.738369][ T35] tipc: Node number set to 2886997162 [ 501.828766][T16276] netlink: 'syz.3.3607': attribute type 3 has an invalid length. [ 501.920253][T16282] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 501.976361][T16282] bond1: (slave geneve0): making interface the new active one [ 502.015116][T16282] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 502.054561][T13899] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 502.073600][T13899] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 502.113809][T13899] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 502.139538][T13899] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 502.277686][ T28] audit: type=1400 audit(1780396633.624:2948): avc: denied { listen } for pid=16298 comm="syz.2.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 502.367770][ T28] audit: type=1400 audit(1780396633.654:2949): avc: denied { getopt } for pid=16298 comm="syz.2.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 502.414446][T16296] set_capacity_and_notify: 8 callbacks suppressed [ 502.414464][T16296] loop5: detected capacity change from 0 to 8192 [ 502.468678][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.613404][T16314] loop6: detected capacity change from 0 to 256 [ 502.654601][T16314] syzkaller0: entered promiscuous mode [ 502.661038][T16316] hub 8-0:1.0: USB hub found [ 502.665964][T16316] hub 8-0:1.0: 8 ports detected [ 502.686001][T16314] syzkaller0: entered allmulticast mode [ 502.765869][T16321] __nla_validate_parse: 1 callbacks suppressed [ 502.765888][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3621'. [ 502.829272][ T28] audit: type=1400 audit(1780396634.174:2950): avc: denied { setopt } for pid=16322 comm="syz.6.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 502.842767][T16325] FAULT_INJECTION: forcing a failure. [ 502.842767][T16325] name failslab, interval 1, probability 0, space 0, times 0 [ 502.870113][T16325] CPU: 1 UID: 0 PID: 16325 Comm: syz.3.3622 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 502.870225][T16325] Tainted: [W]=WARN [ 502.870231][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.870243][T16325] Call Trace: [ 502.870249][T16325] [ 502.870258][T16325] __dump_stack+0x1d/0x30 [ 502.870286][T16325] dump_stack_lvl+0x95/0xd0 [ 502.870342][T16325] dump_stack+0x15/0x1b [ 502.870366][T16325] should_fail_ex+0x263/0x280 [ 502.870386][T16325] should_failslab+0x8c/0xb0 [ 502.870497][T16325] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 502.870536][T16325] ? __alloc_skb+0x2d6/0x690 [ 502.870566][T16325] __alloc_skb+0x2d6/0x690 [ 502.870648][T16325] ? __alloc_skb+0x200/0x690 [ 502.870681][T16325] netlink_ack+0xfd/0x500 [ 502.870772][T16325] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 502.870800][T16325] ? __pfx_devlink_nl_rate_del_doit+0x10/0x10 [ 502.870860][T16325] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 502.870973][T16325] netlink_rcv_skb+0x192/0x220 [ 502.871066][T16325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.871090][T16325] genl_rcv+0x28/0x40 [ 502.871111][T16325] netlink_unicast+0x5a8/0x680 [ 502.871229][T16325] netlink_sendmsg+0x5c8/0x6f0 [ 502.871267][T16325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.871336][T16325] ____sys_sendmsg+0x563/0x5b0 [ 502.871442][T16325] ___sys_sendmsg+0x195/0x1e0 [ 502.871479][T16325] __x64_sys_sendmsg+0xd4/0x160 [ 502.871505][T16325] x64_sys_call+0x194c/0x3020 [ 502.871577][T16325] do_syscall_64+0x12c/0x3b0 [ 502.871670][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.871692][T16325] RIP: 0033:0x7fd435d2ce59 [ 502.871712][T16325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.871734][T16325] RSP: 002b:00007fd434787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.871925][T16325] RAX: ffffffffffffffda RBX: 00007fd435fa5fa0 RCX: 00007fd435d2ce59 [ 502.871942][T16325] RDX: 0000000000048040 RSI: 0000200000004280 RDI: 000000000000000a [ 502.871988][T16325] RBP: 00007fd434787090 R08: 0000000000000000 R09: 0000000000000000 [ 502.872003][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.872016][T16325] R13: 00007fd435fa6038 R14: 00007fd435fa5fa0 R15: 00007ffeb63b7fe8 [ 502.872034][T16325] [ 503.149297][T16327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3625'. [ 503.426730][T16337] loop6: detected capacity change from 0 to 1024 [ 503.563253][ T28] audit: type=1326 audit(1780396634.914:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.3630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20015ece59 code=0x7ffc0000 [ 503.614772][T16341] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3630'. [ 503.682425][ T28] audit: type=1326 audit(1780396634.944:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16339 comm="syz.2.3630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20015ece59 code=0x7ffc0000 [ 503.803925][T16345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.820797][T16347] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.827907][T16345] audit: audit_lost=47 audit_rate_limit=0 audit_backlog_limit=64 [ 503.844801][T16341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3630'. [ 503.882806][T16347] netlink: 'syz.4.3633': attribute type 1 has an invalid length. [ 503.971334][T16352] loop3: detected capacity change from 0 to 512 [ 503.985853][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3633'. [ 504.023276][T16353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.038805][T16347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16347 comm=syz.4.3633 [ 504.114487][T16337] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 504.210318][T16352] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 504.248693][T16337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.623226][T16362] loop4: detected capacity change from 0 to 8192 [ 505.312561][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.409241][T16394] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3644'. [ 505.443873][T16398] loop5: detected capacity change from 0 to 512 [ 505.539338][T16396] loop3: detected capacity change from 0 to 8192 [ 505.861626][T16412] Process accounting resumed [ 505.885039][T16416] FAULT_INJECTION: forcing a failure. [ 505.885039][T16416] name failslab, interval 1, probability 0, space 0, times 0 [ 505.897667][T16416] CPU: 1 UID: 0 PID: 16416 Comm: syz.5.3652 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 505.897699][T16416] Tainted: [W]=WARN [ 505.897706][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.897717][T16416] Call Trace: [ 505.897725][T16416] [ 505.897752][T16416] __dump_stack+0x1d/0x30 [ 505.897779][T16416] dump_stack_lvl+0x95/0xd0 [ 505.897802][T16416] dump_stack+0x15/0x1b [ 505.897824][T16416] should_fail_ex+0x263/0x280 [ 505.897846][T16416] should_failslab+0x8c/0xb0 [ 505.897959][T16416] kmem_cache_alloc_noprof+0x66/0x3f0 [ 505.897994][T16416] ? skb_clone+0x151/0x1f0 [ 505.898068][T16416] skb_clone+0x151/0x1f0 [ 505.898091][T16416] __netlink_deliver_tap+0x2c9/0x500 [ 505.898155][T16416] __netlink_sendskb+0xc3/0xd0 [ 505.898185][T16416] netlink_dump+0x6fb/0x870 [ 505.898277][T16416] __netlink_dump_start+0x43e/0x520 [ 505.898306][T16416] nf_tables_getsetelem+0x1d6/0xb00 [ 505.898346][T16416] ? __pfx_nf_tables_dump_set_start+0x10/0x10 [ 505.898382][T16416] ? __pfx_nf_tables_dump_set+0x10/0x10 [ 505.898408][T16416] ? __pfx_nf_tables_dump_set_done+0x10/0x10 [ 505.898438][T16416] ? __nla_validate_parse+0x1650/0x1cf0 [ 505.898541][T16416] ? __nla_parse+0x40/0x60 [ 505.898562][T16416] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 505.898591][T16416] nfnetlink_rcv_msg+0x3fb/0x5d0 [ 505.898619][T16416] ? __rcu_read_unlock+0x4e/0x70 [ 505.898725][T16416] netlink_rcv_skb+0x123/0x220 [ 505.898774][T16416] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 505.898810][T16416] nfnetlink_rcv+0x167/0x1720 [ 505.898838][T16416] ? __kfree_skb+0x109/0x150 [ 505.898933][T16416] ? nlmon_xmit+0x4f/0x60 [ 505.898962][T16416] ? consume_skb+0x4b/0x130 [ 505.899001][T16416] ? nlmon_xmit+0x4f/0x60 [ 505.899040][T16416] ? dev_hard_start_xmit+0x36c/0x3a0 [ 505.899127][T16416] ? __dev_queue_xmit+0x1396/0x1ec0 [ 505.899152][T16416] ? __dev_queue_xmit+0x165/0x1ec0 [ 505.899221][T16416] ? ref_tracker_free+0x37d/0x3e0 [ 505.899262][T16416] ? __netlink_deliver_tap+0x4dc/0x500 [ 505.899307][T16416] netlink_unicast+0x5a8/0x680 [ 505.899335][T16416] netlink_sendmsg+0x5c8/0x6f0 [ 505.899408][T16416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.899473][T16416] ____sys_sendmsg+0x563/0x5b0 [ 505.899506][T16416] ___sys_sendmsg+0x195/0x1e0 [ 505.899540][T16416] __x64_sys_sendmsg+0xd4/0x160 [ 505.899566][T16416] x64_sys_call+0x194c/0x3020 [ 505.899589][T16416] do_syscall_64+0x12c/0x3b0 [ 505.899621][T16416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.899661][T16416] RIP: 0033:0x7f7ef219ce59 [ 505.899680][T16416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.899701][T16416] RSP: 002b:00007f7ef0bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.899770][T16416] RAX: ffffffffffffffda RBX: 00007f7ef2415fa0 RCX: 00007f7ef219ce59 [ 505.899787][T16416] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 505.899802][T16416] RBP: 00007f7ef0bef090 R08: 0000000000000000 R09: 0000000000000000 [ 505.899815][T16416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.899830][T16416] R13: 00007f7ef2416038 R14: 00007f7ef2415fa0 R15: 00007fff145dd758 [ 505.899850][T16416] [ 506.477802][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 506.477818][ T28] audit: type=1400 audit(1780396637.824:3082): avc: denied { accept } for pid=16418 comm="syz.5.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.577377][T16431] loop6: detected capacity change from 0 to 1024 [ 506.585878][T16431] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 506.640324][ T28] audit: type=1400 audit(1780396637.864:3083): avc: denied { mount } for pid=16418 comm="syz.5.3653" name="/" dev="configfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 506.712585][T16431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.211746][T16440] macsec1: entered promiscuous mode [ 507.395704][T16438] loop3: detected capacity change from 0 to 512 [ 507.646619][ T28] audit: type=1400 audit(1780396638.984:3084): avc: denied { create } for pid=16447 comm="syz.2.3661" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.920970][T16456] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 507.967365][T16456] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3662'. [ 508.118824][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.242155][ T28] audit: type=1326 audit(1780396639.584:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.6.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04f4ce59 code=0x7ffc0000 [ 508.321116][ T28] audit: type=1326 audit(1780396639.584:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.6.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04f4ce59 code=0x7ffc0000 [ 508.324018][T16459] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 508.354943][ T28] audit: type=1326 audit(1780396639.614:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.6.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04f4ce59 code=0x7ffc0000 [ 508.498896][T16459] audit: out of memory in audit_log_start [ 508.530864][ T28] audit: type=1326 audit(1780396639.614:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.6.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f04f4ce59 code=0x7ffc0000 [ 508.603152][T16460] loop4: detected capacity change from 0 to 256 [ 508.653225][T16464] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3664'. [ 508.676054][ T28] audit: type=1326 audit(1780396639.634:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.6.3663" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1f04f4ce59 code=0x7ffc0000 [ 508.708742][T16438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.721323][T16438] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.768645][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.274327][T16475] loop2: detected capacity change from 0 to 128 [ 509.665539][T16485] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 509.684570][T16485] vhci_hcd vhci_hcd.0: invalid port number 255 [ 509.812698][T16491] hub 8-0:1.0: USB hub found [ 509.822011][T16491] hub 8-0:1.0: 8 ports detected [ 509.915339][T16493] loop6: detected capacity change from 0 to 4096 [ 509.940585][T16493] ext4: Unknown parameter 'fsuuid' [ 510.081195][T16498] FAULT_INJECTION: forcing a failure. [ 510.081195][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 510.122647][T16498] CPU: 0 UID: 0 PID: 16498 Comm: syz.6.3676 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 510.122687][T16498] Tainted: [W]=WARN [ 510.122697][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.122712][T16498] Call Trace: [ 510.122720][T16498] [ 510.122729][T16498] __dump_stack+0x1d/0x30 [ 510.122765][T16498] dump_stack_lvl+0x95/0xd0 [ 510.122787][T16498] dump_stack+0x15/0x1b [ 510.122825][T16498] should_fail_ex+0x263/0x280 [ 510.122844][T16498] should_failslab+0x8c/0xb0 [ 510.122876][T16498] kmem_cache_alloc_noprof+0x66/0x3f0 [ 510.122911][T16498] ? __rds_conn_create+0x3ee/0x11d0 [ 510.122972][T16498] __rds_conn_create+0x3ee/0x11d0 [ 510.123079][T16498] rds_conn_create_outgoing+0x43/0x60 [ 510.123103][T16498] rds_sendmsg+0xc06/0x15b0 [ 510.123136][T16498] ? __pfx_rds_sendmsg+0x10/0x10 [ 510.123171][T16498] ____sys_sendmsg+0x563/0x5b0 [ 510.123279][T16498] ___sys_sendmsg+0x195/0x1e0 [ 510.123319][T16498] __x64_sys_sendmsg+0xd4/0x160 [ 510.123344][T16498] x64_sys_call+0x194c/0x3020 [ 510.123369][T16498] do_syscall_64+0x12c/0x3b0 [ 510.123461][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.123484][T16498] RIP: 0033:0x7f1f04f4ce59 [ 510.123504][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.123532][T16498] RSP: 002b:00007f1f0397e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.123630][T16498] RAX: ffffffffffffffda RBX: 00007f1f051c6090 RCX: 00007f1f04f4ce59 [ 510.123647][T16498] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 510.123660][T16498] RBP: 00007f1f0397e090 R08: 0000000000000000 R09: 0000000000000000 [ 510.123673][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.123685][T16498] R13: 00007f1f051c6128 R14: 00007f1f051c6090 R15: 00007ffc1be3cb68 [ 510.123703][T16498] [ 510.124575][T16499] loop2: detected capacity change from 0 to 512 [ 510.416438][T16507] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3678'. [ 510.426613][T16499] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 510.434759][T16499] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 510.443473][T16499] EXT4-fs (loop2): 1 truncate cleaned up [ 510.449876][T16499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.558594][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.883131][T16521] FAULT_INJECTION: forcing a failure. [ 510.883131][T16521] name failslab, interval 1, probability 0, space 0, times 0 [ 510.896212][T16521] CPU: 0 UID: 0 PID: 16521 Comm: syz.6.3682 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 510.896256][T16521] Tainted: [W]=WARN [ 510.896340][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.896354][T16521] Call Trace: [ 510.896363][T16521] [ 510.896372][T16521] __dump_stack+0x1d/0x30 [ 510.896401][T16521] dump_stack_lvl+0x95/0xd0 [ 510.896426][T16521] dump_stack+0x15/0x1b [ 510.896500][T16521] should_fail_ex+0x263/0x280 [ 510.896519][T16521] ? ipv6_flowlabel_opt+0x8db/0x1a00 [ 510.896554][T16521] should_failslab+0x8c/0xb0 [ 510.896665][T16521] __kmalloc_cache_noprof+0x5f/0x400 [ 510.896697][T16521] ipv6_flowlabel_opt+0x8db/0x1a00 [ 510.896780][T16521] ? lockref_put_return+0xf7/0x130 [ 510.896806][T16521] ? __rcu_read_unlock+0x4e/0x70 [ 510.896885][T16521] ? terminate_walk+0x1e6/0x210 [ 510.896925][T16521] ? path_openat+0x1ab2/0x2050 [ 510.897019][T16521] ? lock_sock_nested+0x84/0x110 [ 510.897120][T16521] do_ipv6_setsockopt+0xb4e/0x2130 [ 510.897141][T16521] ? kstrtoull+0x111/0x140 [ 510.897167][T16521] ? __rcu_read_unlock+0x4e/0x70 [ 510.897186][T16521] ? avc_has_perm_noaudit+0xab/0x130 [ 510.897350][T16521] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 510.897377][T16521] ipv6_setsockopt+0x59/0x130 [ 510.897402][T16521] tcp_setsockopt+0x98/0xb0 [ 510.897432][T16521] sock_common_setsockopt+0x69/0x80 [ 510.897532][T16521] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 510.897614][T16521] __sys_setsockopt+0x184/0x200 [ 510.897720][T16521] __x64_sys_setsockopt+0x64/0x80 [ 510.897746][T16521] x64_sys_call+0x2327/0x3020 [ 510.897841][T16521] do_syscall_64+0x12c/0x3b0 [ 510.897888][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.897909][T16521] RIP: 0033:0x7f1f04f4ce59 [ 510.897925][T16521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.897942][T16521] RSP: 002b:00007f1f0399f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 510.897964][T16521] RAX: ffffffffffffffda RBX: 00007f1f051c5fa0 RCX: 00007f1f04f4ce59 [ 510.897982][T16521] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 510.897997][T16521] RBP: 00007f1f0399f090 R08: 000000000000fe60 R09: 0000000000000000 [ 510.898013][T16521] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 510.898025][T16521] R13: 00007f1f051c6038 R14: 00007f1f051c5fa0 R15: 00007ffc1be3cb68 [ 510.898070][T16521] [ 511.277836][T16529] FAULT_INJECTION: forcing a failure. [ 511.277836][T16529] name failslab, interval 1, probability 0, space 0, times 0 [ 511.290468][T16529] CPU: 1 UID: 0 PID: 16529 Comm: syz.5.3686 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 511.290491][T16529] Tainted: [W]=WARN [ 511.290496][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.290552][T16529] Call Trace: [ 511.290620][T16529] [ 511.290625][T16529] __dump_stack+0x1d/0x30 [ 511.290642][T16529] dump_stack_lvl+0x95/0xd0 [ 511.290684][T16529] dump_stack+0x15/0x1b [ 511.290696][T16529] should_fail_ex+0x263/0x280 [ 511.290709][T16529] should_failslab+0x8c/0xb0 [ 511.290729][T16529] __kmalloc_noprof+0xb8/0x4d0 [ 511.290775][T16529] ? bpf_test_init+0x86/0x130 [ 511.290865][T16529] bpf_test_init+0x86/0x130 [ 511.290882][T16529] bpf_prog_test_run_xdp+0x306/0xa10 [ 511.290924][T16529] ? __rcu_read_unlock+0x4e/0x70 [ 511.290940][T16529] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 511.291001][T16529] bpf_prog_test_run+0x204/0x340 [ 511.291019][T16529] __sys_bpf+0x52e/0x7e0 [ 511.291057][T16529] __x64_sys_bpf+0x41/0x50 [ 511.291070][T16529] x64_sys_call+0x10cb/0x3020 [ 511.291085][T16529] do_syscall_64+0x12c/0x3b0 [ 511.291105][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.291152][T16529] RIP: 0033:0x7f7ef219ce59 [ 511.291163][T16529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.291176][T16529] RSP: 002b:00007f7ef0bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.291191][T16529] RAX: ffffffffffffffda RBX: 00007f7ef2415fa0 RCX: 00007f7ef219ce59 [ 511.291201][T16529] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 511.291209][T16529] RBP: 00007f7ef0bef090 R08: 0000000000000000 R09: 0000000000000000 [ 511.291296][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.291304][T16529] R13: 00007f7ef2416038 R14: 00007f7ef2415fa0 R15: 00007fff145dd758 [ 511.291318][T16529] [ 512.896692][T16559] loop5: detected capacity change from 0 to 1024 [ 512.906933][T16555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3693'. [ 512.922447][T16557] FAULT_INJECTION: forcing a failure. [ 512.922447][T16557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.959644][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.3.3695 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 512.959720][T16557] Tainted: [W]=WARN [ 512.959729][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.959743][T16557] Call Trace: [ 512.959751][T16557] [ 512.959762][T16557] __dump_stack+0x1d/0x30 [ 512.959791][T16557] dump_stack_lvl+0x95/0xd0 [ 512.959814][T16557] dump_stack+0x15/0x1b [ 512.959915][T16557] should_fail_ex+0x263/0x280 [ 512.959938][T16557] ? __pfx_snapshot_ioctl+0x10/0x10 [ 512.959988][T16557] should_fail+0xb/0x20 [ 512.960005][T16557] should_fail_usercopy+0x1a/0x20 [ 512.960031][T16557] _copy_from_user+0x1c/0xb0 [ 512.960113][T16557] snapshot_set_swap_area+0xab/0x1b0 [ 512.960158][T16557] snapshot_ioctl+0x2f3/0x770 [ 512.960194][T16557] __se_sys_ioctl+0xce/0x140 [ 512.960227][T16557] __x64_sys_ioctl+0x43/0x50 [ 512.960282][T16557] x64_sys_call+0x1563/0x3020 [ 512.960319][T16557] do_syscall_64+0x12c/0x3b0 [ 512.960356][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.960377][T16557] RIP: 0033:0x7fd435d2ce59 [ 512.960451][T16557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.960476][T16557] RSP: 002b:00007fd434787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.960502][T16557] RAX: ffffffffffffffda RBX: 00007fd435fa5fa0 RCX: 00007fd435d2ce59 [ 512.960519][T16557] RDX: 0000200000000040 RSI: 00000000400c330d RDI: 0000000000000003 [ 512.960559][T16557] RBP: 00007fd434787090 R08: 0000000000000000 R09: 0000000000000000 [ 512.960575][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.960589][T16557] R13: 00007fd435fa6038 R14: 00007fd435fa5fa0 R15: 00007ffeb63b7fe8 [ 512.960607][T16557] [ 513.345269][T16573] loop5: detected capacity change from 0 to 8192 [ 513.360091][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 513.360110][ T28] audit: type=1400 audit(1780396644.674:3161): avc: denied { search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.393219][ T28] audit: type=1400 audit(1780396644.724:3162): avc: denied { search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.433007][ T28] audit: type=1400 audit(1780396644.724:3163): avc: denied { read } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.460092][ T28] audit: type=1400 audit(1780396644.724:3164): avc: denied { read open } for pid=16571 comm="syz.5.3699" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.517802][T16576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3699'. [ 513.575996][ T28] audit: type=1400 audit(1780396644.724:3165): avc: denied { search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.672521][T16576] can: request_module (can-proto-0) failed. [ 513.794259][T16581] can0: slcan on ptm0. [ 513.851376][ T28] audit: type=1400 audit(1780396644.734:3166): avc: denied { search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.925939][ T28] audit: type=1400 audit(1780396644.744:3167): avc: denied { search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.947982][ T28] audit: type=1400 audit(1780396644.744:3168): avc: denied { search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.973573][ T28] audit: type=1400 audit(1780396644.744:3169): avc: denied { write search } for pid=16571 comm="syz.5.3699" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 513.982522][T16579] can0 (unregistered): slcan off ptm0. [ 513.998574][ T28] audit: type=1400 audit(1780396644.744:3170): avc: denied { add_name } for pid=16571 comm="syz.5.3699" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 514.164371][T16594] loop2: detected capacity change from 0 to 1024 [ 514.195770][T16594] EXT4-fs: test_dummy_encryption option not supported [ 514.224533][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3705'. [ 514.236981][T16603] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3705'. [ 514.322702][T16620] loop6: detected capacity change from 0 to 1024 [ 514.337434][T16620] EXT4-fs: Ignoring removed nobh option [ 514.347141][T16620] EXT4-fs: Ignoring removed bh option [ 514.397557][T16620] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 514.479392][T16628] loop2: detected capacity change from 0 to 512 [ 514.486762][T16628] EXT4-fs: Ignoring removed orlov option [ 514.503319][T16628] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.519046][T16630] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3707'. [ 514.566387][T16628] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3703: invalid indirect mapped block 32768 (level 2) [ 514.580028][T16628] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 514.582582][T16628] EXT4-fs (loop2): 1 orphan inode deleted [ 514.597507][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 514.597529][ C0] EXT4-fs (loop2): initial error at time 1780396645: ext4_free_branches:1023: inode 16 [ 514.597581][ C0] EXT4-fs (loop2): last error at time 1780396645: ext4_free_branches:1023: inode 16 [ 514.623125][T16628] EXT4-fs (loop2): 1 truncate cleaned up [ 514.629636][T16628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.681368][T16620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.397194][T16640] loop5: detected capacity change from 0 to 128 [ 515.428714][T16643] loop3: detected capacity change from 0 to 512 [ 515.439589][T16643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.460672][T16640] FAT-fs (loop5): Directory bread(block 32) failed [ 515.467292][T16640] FAT-fs (loop5): Directory bread(block 33) failed [ 515.473880][T16640] FAT-fs (loop5): Directory bread(block 34) failed [ 515.480468][T16640] FAT-fs (loop5): Directory bread(block 35) failed [ 515.487011][T16640] FAT-fs (loop5): Directory bread(block 36) failed [ 515.493685][T16640] FAT-fs (loop5): Directory bread(block 37) failed [ 515.500216][T16640] FAT-fs (loop5): Directory bread(block 38) failed [ 515.506754][T16640] FAT-fs (loop5): Directory bread(block 39) failed [ 515.513356][T16640] FAT-fs (loop5): Directory bread(block 40) failed [ 515.519869][T16640] FAT-fs (loop5): Directory bread(block 41) failed [ 515.544550][T16640] syz.5.3710: attempt to access beyond end of device [ 515.544550][T16640] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 515.571566][T16643] EXT4-fs (loop3): 1 truncate cleaned up [ 515.580424][T16643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.956251][ T8779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.966631][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.977450][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.015857][T16646] loop5: detected capacity change from 0 to 8192 [ 516.095031][T16653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3714'. [ 516.138578][T16653] loop3: detected capacity change from 0 to 512 [ 516.138578][T16660] FAULT_INJECTION: forcing a failure. [ 516.138578][T16660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.138642][T16660] CPU: 1 UID: 0 PID: 16660 Comm: syz.4.3718 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 516.138675][T16660] Tainted: [W]=WARN [ 516.138683][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.138764][T16660] Call Trace: [ 516.138771][T16660] [ 516.138780][T16660] __dump_stack+0x1d/0x30 [ 516.138805][T16660] dump_stack_lvl+0x95/0xd0 [ 516.138876][T16660] dump_stack+0x15/0x1b [ 516.138896][T16660] should_fail_ex+0x263/0x280 [ 516.138917][T16660] should_fail+0xb/0x20 [ 516.138935][T16660] should_fail_usercopy+0x1a/0x20 [ 516.138957][T16660] _copy_from_user+0x1c/0xb0 [ 516.139029][T16660] proc_control_compat+0x44/0xe0 [ 516.139056][T16660] usbdev_ioctl+0xed7/0x1750 [ 516.139082][T16660] ? __pfx_usbdev_ioctl+0x10/0x10 [ 516.139106][T16660] __se_sys_ioctl+0xce/0x140 [ 516.139156][T16660] __x64_sys_ioctl+0x43/0x50 [ 516.139194][T16660] x64_sys_call+0x1563/0x3020 [ 516.139218][T16660] do_syscall_64+0x12c/0x3b0 [ 516.139248][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.139304][T16660] RIP: 0033:0x7f222109ce59 [ 516.139321][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.139339][T16660] RSP: 002b:00007f221faef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.139362][T16660] RAX: ffffffffffffffda RBX: 00007f2221315fa0 RCX: 00007f222109ce59 [ 516.139433][T16660] RDX: 0000200000000140 RSI: 00000000c0105500 RDI: 0000000000000003 [ 516.139447][T16660] RBP: 00007f221faef090 R08: 0000000000000000 R09: 0000000000000000 [ 516.139461][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.139474][T16660] R13: 00007f2221316038 R14: 00007f2221315fa0 R15: 00007ffc41f74838 [ 516.139494][T16660] [ 516.225034][T16652] loop6: detected capacity change from 0 to 8192 [ 516.501242][T16653] vfat: Unknown parameter 'shortnaƒ¨ývV–O-' [ 516.528256][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3713'. [ 516.551595][T16652] can: request_module (can-proto-0) failed. [ 516.705780][T16680] loop6: detected capacity change from 0 to 512 [ 516.713141][T16680] FAT-fs (loop6): bogus number of FAT sectors [ 516.719351][T16680] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 516.728555][T16680] FAT-fs (loop6): Can't find a valid FAT filesystem [ 516.761064][T16680] loop6: detected capacity change from 0 to 512 [ 517.010488][T16680] EXT4-fs (loop6): 1 orphan inode deleted [ 517.018979][T16680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.317342][T16680] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 517.327088][T16680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.455669][T13196] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.478638][T16687] EXT4-fs: Ignoring removed bh option [ 517.489221][T16687] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 517.537247][T16687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.594820][T13975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.779031][T16714] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 517.898449][T16723] futex_wake_op: syz.3.3733 tries to shift op by 32; fix this program [ 517.928441][T16720] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3732'. [ 518.050116][T16726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16726 comm=syz.6.3734 [ 518.265863][ T2980] ================================================================== [ 518.274028][ T2980] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 518.281102][ T2980] [ 518.283441][ T2980] read-write to 0xffff88811a79b180 of 4 bytes by task 14894 on cpu 1: [ 518.291600][ T2980] d_delete+0xbe/0xe0 [ 518.295613][ T2980] d_delete_notify+0x32/0x100 [ 518.300371][ T2980] vfs_unlink+0x289/0x490 [ 518.304730][ T2980] filename_unlinkat+0x1e2/0x410 [ 518.309698][ T2980] __se_sys_unlink+0x2b/0xe0 [ 518.314330][ T2980] __x64_sys_unlink+0x1f/0x30 [ 518.319037][ T2980] x64_sys_call+0x2eb6/0x3020 [ 518.323739][ T2980] do_syscall_64+0x12c/0x3b0 [ 518.328347][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.334260][ T2980] [ 518.336606][ T2980] read to 0xffff88811a79b180 of 4 bytes by task 2980 on cpu 0: [ 518.344162][ T2980] step_into_slowpath+0xea/0x4c0 [ 518.349127][ T2980] path_lookupat+0x330/0x500 [ 518.353735][ T2980] filename_lookup+0x190/0x390 [ 518.358507][ T2980] do_readlinkat+0x74/0x2f0 [ 518.363017][ T2980] __x64_sys_readlink+0x47/0x60 [ 518.367904][ T2980] x64_sys_call+0x2b51/0x3020 [ 518.372585][ T2980] do_syscall_64+0x12c/0x3b0 [ 518.377183][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.383078][ T2980] [ 518.385402][ T2980] value changed: 0x00300180 -> 0x00004080 [ 518.391119][ T2980] [ 518.393451][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 518.399605][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 518.410055][ T2980] Tainted: [W]=WARN [ 518.413870][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.423939][ T2980] ==================================================================