last executing test programs: 9m49.131685093s ago: executing program 32 (id=170): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x1000, 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x78, r4}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) io_setup(0x71, &(0x7f0000000600)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x6}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m34.094038358s ago: executing program 33 (id=294): r0 = epoll_create1(0x80000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0), &(0x7f0000000300)={'U+', 0x5}, 0x16, 0x1) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x53) r3 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) close(r4) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xa002803f}) 9m16.560893739s ago: executing program 34 (id=451): socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) 7m33.935522518s ago: executing program 5 (id=1243): mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1) unshare(0x62040200) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201fffdffff050102000000000000fb9cc88f5235e525eaf9ee4960b3a11c10395582105da5eba65e686a5d91b52299883a4c33ca3d8ad89d2cfcb70753cd044e676b33208e0a57c3415906529fc12fda65d5f1008134f29629c05dd77ef00d5e0f9747abd4a32a74497815a3a527155d96b1b49d070a96f35cdad0cbadbc56366aa55bd9da9076c2a00545bf665ae40de4866c9622a60f3d7c4d8a61eef16132bcf42e6e647c23e11bcea3cad4e2b2939d9d95e284d6b332ed779500"/202, @ANYRESOCT], 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x18f0c2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000800)=@ethtool_rx_ntuple={0x35, {0x7974c172f899fe31, @sctp_ip4_spec={@local, @rand_addr=0x64010100, 0x4e23, 0x4e20, 0x2a}, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, 0x6, 0x1}, 0x1, 0x5, 0x5, 0x1, 0xfffffffffffffffe}}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x47, 0x7f}}]}, 0x90}}, 0x40850) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x40000100000000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) close(0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 7m29.499324326s ago: executing program 5 (id=1248): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={0x0, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x80010, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000300)={0xa, 0x4}, 0xc) (fail_nth: 1) 7m26.006533734s ago: executing program 5 (id=1262): r0 = socket(0x2, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1f, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000400a00ff14000000750000000000000095000000000000001810000000000000", @ANYRES16=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x2, 0xd}, 0x15144, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f000006f000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x0) r2 = semget(0x2, 0x4, 0x314) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0xdcc1]) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100), 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x4048000) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r5, &(0x7f0000000300)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) fcntl$setstatus(r7, 0x4, 0x42c00) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0b1606000000000021541374000008"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 7m25.362067758s ago: executing program 5 (id=1269): clock_adjtime(0x3, &(0x7f0000000080)={0xba, 0x7, 0xf, 0x855e, 0x6, 0x4, 0x8, 0x8, 0x9, 0x8, 0x1, 0x2a35, 0x1, 0x7, 0x36f22fb9, 0x7, 0x7, 0x1, 0x0, 0x7d, 0x3, 0x6, 0x8000000000000001, 0x2, 0xd86, 0x76}) socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f00000004c0)) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000340)) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x2, 0x6, 0x4, 0xf3, 0x0, 0x7, 0xa0c20, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x8004, 0x4, 0x5, 0x8, 0x4dc, 0x2, 0x10, 0x0, 0x9}, r1, 0xa, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) writev(r3, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000040)="1bb1188c88", 0x5}], 0x2) 7m25.316485499s ago: executing program 5 (id=1270): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x5, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe0a4d27}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0xc0080}, 0x0) 7m25.134272973s ago: executing program 5 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 7m25.134145663s ago: executing program 35 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 3m39.746146424s ago: executing program 0 (id=2669): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d00000009500000038344faed99969b8f3cea000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc4}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4004, 0x7351e163, @remote, 0x3d}, 0x1c) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) socket$kcm(0x23, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) getpid() 3m37.955803184s ago: executing program 0 (id=2674): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a000c4, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x4) write$cgroup_int(r0, &(0x7f0000000280)=0x1ae, 0xfffffe72) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000010d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fa000000dae28c605d02f80d000000000000000000d628ef0a71751a18e0c3a7fbb187000000000000007c031901aa53acef6c8e39cb4dbb406bf41001a09dca449261551cec57691884a761b0df92c50703c5858fb54f817459e0c3f837a0e620028439d6c87106f3022c7b59d66d8e9e85682cd1dcefc053d4356acf1b9f901995ae86a0b78ba83f2ac34529f087382846589bbcdc150b2c028e9bfd8b05f2ab1363e20980eb7279d15ae60164210600874bda656605730fcc0db5b4d5eb4be4b0aabe4aab937923020047b1ea3c"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x24fa71226019f8a0, 0x2000000000000216, &(0x7f0000000900)=ANY=[@ANYRESHEX=r2], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x432dcdef2dbc98b4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x0, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m33.240593619s ago: executing program 0 (id=2720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040000) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/45, 0x2d}, {&(0x7f0000000640)=""/51, 0x33}, {&(0x7f0000000700)=""/153, 0x99}], 0x4, 0xfffffffc, 0x8) 3m32.966855154s ago: executing program 0 (id=2725): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', r4, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r2, &(0x7f00000000c0), 0x400000000000086, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x102802, 0x2e, 0xfffffff8, 0x7, 0xfff, 0x8201, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$nci(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000060000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r6, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@ax25={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 3m32.706383231s ago: executing program 0 (id=2727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)=@can, 0x80, 0x0, 0x1}, 0x4000) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0xff2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="ae9e0db55de778f6fefffffffddbdf250300000080bd6ab7"], 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x30, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast2}}, @RTA_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m32.28006549s ago: executing program 0 (id=2737): semget$private(0x0, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ptrace$getsig(0x4202, r0, 0x65cf, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x3b5, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81"}]}}}}}}, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) r7 = socket$pppoe(0x18, 0x1, 0x0) accept4(r7, &(0x7f0000000000)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80, 0x80800) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m32.27985631s ago: executing program 36 (id=2737): semget$private(0x0, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ptrace$getsig(0x4202, r0, 0x65cf, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000300)) syz_emit_ethernet(0x3b5, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81"}]}}}}}}, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) r7 = socket$pppoe(0x18, 0x1, 0x0) accept4(r7, &(0x7f0000000000)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80, 0x80800) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m30.735077764s ago: executing program 7 (id=2757): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0xfd, 0x4ae, &(0x7f0000000580)="$eJzs3M1rHOUfAPDv7G6Svie//upLa7XRKoovSZNWLSj4AoIHBUEP9SQxSUtt2kgToS3BRin1ImjBuwheRP8CT55EPQle9S6FIr209bQy2ZntptndJpuXTbKfD0zyPNln5nm+88zLMzM7CaBj9ac/kogdEfFnRPRGRKG2wNbKlJa7eX1m9Nb1mdEkyuW3/0nS2eLG9ZnRvGiS/d5eyZTSBRUuJfFynXqnzl84NTIxMX42yw9On/5wcOr8hWdOnh45MX5i/Mzw0aNHDg89/9zwsysSZ9qmG/s+nty/9/V3r7w5euzK+7/+kERsyz+vjWOZXuitJmeq6+ROj61QZevFzpp0UmpjQ1iSnohIu6trbv/vjeKlXdXPeuO1T2+XLLengcCqKZfL5eHGH8+WgU0siVbmKmbHDmDjyk/06fVvPq3R0GNduPZK5QIojftmNlU+KVXug/RUro12rlL9/RFxbPbfr9MplnwfomuVWgUAbGY/peOfp+uM/0oR99aU25U9G+qLiP9FxO6I+H9E7ImIe6JS9r6IuL9+Nf3vNai/v5q6Nfdz4fincHWZITaVjv9ezJ5tzR//VZ+C9RWz3M65+LuS4ycnxg9l66QYXT1pfqju0pOI2fT3H180qr92/JdOaf35WDBrx9VSz/x5xkamR5YdeObaJxH7SvXiT6J0O4rYGxH7Wqzj5JPf7Z//l2I1dff4m1iB50zlbyIer/T/bNwRfy5p/nxycEtMjB8azLeKhX77/fJbjeqvxF+I5vFvXX6gDaT9v63e9v9SNf6+pPZ57dSCRXTfrY7Lf33W8Jqm1e2/O3lnXuXnRqanzw5FdCdvLPx7zQ3uPH9u7Pu58mn8Txysv//vzuZJ438gItKN+MGIeCgiDmRtfzgiHomIg03i/+XVRz9oGP+BJvHfEfdskzpalcY/Vvf416j/l5DYki3h1M8/Now/7/+8w+r2/5E8M9eoxRz/FtvSVtYZAAAAbDSFiNgRSWGgmi4UBgYq35ffE9sKE5NT008dn/zozFjlHYG+6Crkd7p6a+6HDmX3hvP8cJa/mOUPZ/eNvypuncsPjE5OjLU7eOhw2xvs/6m/i+1uHbDqFjxHK/e2pyHAmvO+JnSu1vd/Rw7Y6O6yFxfWqh3A2nMWh85Vb/+/WJtJovIteWDTcf6HzlXd/79cROGa1736V6k9wNppdv73VQDY3Iz/oSO19F7/ekrEtxHNyyTrpalLSny+nNlLa9DCKLRx/XS3pVOGixFt3CRKi/2vFnG+fHHZlbb7yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAy/gsAAP//p4Dbjw==") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200500, 0x0) sync_file_range(r1, 0x6, 0xed, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000180)=""/196, 0xc4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000380)={&(0x7f0000000280), 0x0, 0x0, &(0x7f00000002c0)=""/106, 0x6a}}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r3) socket(0x1e, 0x4, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000b00)=ANY=[@ANYBLOB="00080000000000000252030000000f91a5b76c000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000b80)=ANY=[@ANYRES32=r2, @ANYBLOB="4e0ef49f32508d45c086f288dc20fa09c4e37e86e23544a8ede97d751eedd325fcdb8cd6bec59bb892d46cc5b1e6a4de162f8b96910879b24b4b04067629", @ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r6, 0x1, 0xffffffffffffffff, 0x6, 0x80000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006970366772650000180002800400120008000d0003000000080014000400000008000a00", @ANYRES32], 0x50}, 0x1, 0xba01, 0x0, 0x40000080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x62, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffefffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m29.854033934s ago: executing program 7 (id=2767): ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x8, 0xfffd, 0x3, 0x9, 0xf}}) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000080)=""/159) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1ec, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b560b5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fc351d3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8c70819}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x516bdf64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x454d063f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44559547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eb7ff00}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4934aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe193d45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb9d36c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57a1c2a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd9bdba5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64307ee3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e7b002a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3135d902}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe2f9785}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3826841f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58cef8ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x99d290a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56b00c58}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1985b423}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f66b77e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f020a16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dfe6fc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f8895c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ed8eddf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x370e3f4b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x8090) set_robust_list(&(0x7f0000000680)={&(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000580)}}, 0x16, &(0x7f0000000640)}, 0x18) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x118, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f624710}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38729886}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76073cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bd03089}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46e68ead}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x660b7c1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd25b902}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x412b2ebc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x3, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x34}}, 0x400c000) r5 = signalfd4(r0, &(0x7f0000000a00)={[0x2]}, 0x8, 0x800) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x608, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000011) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r5) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000c00)={0x0, @dev, @remote}, &(0x7f0000000c40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r11, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '\xd5/*--#\''}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '-^:!.-'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040014) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r12, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r13, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x890}, 0x800) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r5) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2f0, r14, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x7a}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "6843b9be134911465549b8a31cb8494dd7614fb7ac43de3e8b0afda029ef2da4f07ab559d53133fd080183c8128d30ff337606fd12b556dd9a63b7644e5ba0cca745ef9f6c22aa1c2687334bb7563f80b1d172cb62e6caba7f9cd5832166a1a0fee308415ae6001054a46aa6db0bb4fc3009d2973e8c1f25705bc1601535683b8dcf261effae1f4e266f7006f6838591a7d8410c4f73d098539326557a61bc32e6fa4f9e39eace040a45ebc49a3588e4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xa7, 0x5b, "ce3516088de38d44a1955dd3e8c2108fefb851a121c99bf68021be4165d33018a4a01d7978da7eaadabdb14d4b09bdc6a3feb19ba85141a24aa7960af555241471d95b2c384cfd90074b8fd6bb0e0ed04a5b4dc59a99253c017416200b1d91bc7d3dfc87aace07b8998c6725f25315d733995e1e3128a6d47ad62373ea43928ccd3cfd553b2a9109e2e7a84f1ce617246e849d0a24265059dd5399ab874c760f8aa2e6"}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "b9e17f83e3316b06aa86b5ed94e07a2480b54a9fb1d97863de0e97f96badb99597279b782eca4db15430924af55407853f72caade0ee61f872cce1e043e2270fa221d8e3c39532bfedd4c8e626906b018ca4841c547dfd5827b015a002b34b347da40901ef574fee99a3163725c22a1d900ad66b70f7a51a9d5666ac20db635198ccf63f2234b46a7352cc64aadee1f0f2b09b10e12ab3766bf9c5d631330ac9756678aee309c1"}, @NL80211_ATTR_FRAME_MATCH={0xae, 0x5b, "25b9fa76b2e7fc266c3b900b750d299041e965545e976368e8472c1e2ca5013ace09d5a715d83f2fda99f3a7f16224fefa02af7ad9db6a72d1d12a6079374ce6503a212ffbef8655cea5d5d7c756c9377061a0329c524ea404c05c62033654389ed1ed33c4de20acd25e10f7253b0ec3c513772d823812b13e0978965514940c21049730fbdeffc6896a1958991f31b717ff23abc7a51665372ee2a9443fad4229ace28f3ef75c042a37"}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x200000c9}, 0x48000) socket$inet_tcp(0x2, 0x1, 0x0) 3m29.694646827s ago: executing program 7 (id=2768): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x4}], 0x1, 0x40002122, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) 3m29.59957794s ago: executing program 7 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r0 = inotify_init() (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x44840}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008014) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x42}, {0x0, 0x2}, @raw32}], 0x1c) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x7f, @time={0x7, 0x3}, 0x0, {}, 0x0, 0x0, 0x9}) (rerun: 64) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003440)=[{{&(0x7f0000000400)=@abs={0xfaba80aa5e1ac865, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000540)="e2bd08913c17a946cba45e010fd7c08a474841d7f4d77265be25aaf434ebbad12128ccfb8a0e3a0c2739c4a413c8acb5ec904aad50bec942458f477113e977a3217192c1b3fa1ec3ae05652e052e2fb12cb6a6233b714dd3726eb98a83ff7a257c5e58cda4efc32f3171609c37335b3c4330bff6944179c290a0ef148454cc671e4ddc8fb2ae26126da88bed6bfad1a66323fa12ab25", 0x96}, {&(0x7f0000000600)="7d1aeee4f0d48cd7e3fc2609469d53dedd52c6e5e35727225c54d13a9027df274db19251bedd4705e289ccc6c6d122dda75396af1853c6b34b357f906059a55887772676fa13111adccc8bf6cf9c8396646434687bd6c26bef1c1d015d6ca1323902b10cbfd9db20cd690385d32b2db8f5e054ee12823dd44844e462d9081ed4bd7b8ec4509a25f9675e69d65f600a90d555d05a9dc30cdd9bef884b4c518b415dd98a5636caef2934955e67e0bf800b3f8e7a4f0fa6c12a62f3cd712ebae4f6f1e3fa8b5bce5b49078db5a64f7a8dc38c3ebc0fb25fd0fd7eb5d8f3", 0xdc}, {&(0x7f0000000700)}, {&(0x7f0000000740)="4d6e0a28c2ece91b8213783ec2443032ab50d50809d99bab6668a2ae8fe450299093680e1a9239fbbb300d89e059373d8aa71d057a753c2377a7857fc83d0325e830f975dd8ba7ef8cde023c9b7f16826253b68f68af1a1786863a48dad94a07e596ae4f0b62003e1be910d8cb639f299c0471afa6089c8e55b560983908360a8452f3d585a42dcf6818", 0x8a}, {&(0x7f0000000800)="35c51244647b1fcdf746d842cc48283cbdc5e1f1a5636b898026abd765ad4548878b35a1bbc39818bf62290bf4a03452d91f78d959e4a166936723b4da76fc7479f3adb8ffd4c603d4cadf460eceb9141db4edf1edc5a5897f32f32fe51a74858855f2f2d14be515a48ade818c19b438b36e8072a7ca8480f8ca7a40e72d3eb5fb54199d161bc0145336976c41dcbb84528ba14694c7782a7a6b5d5f6186655c94497f2ebfc2193ad0395c372d7ee0fc4f12c1c18a224382d9cd0ac7676ab4b03a9ea05c1c8b35b90d4b9e84cd58c4cd3b6f2a07b7201dadb68b", 0xda}, {&(0x7f0000000900)="ac4db582653873df6855b32e5c13ea40583eb4497d8e0e8cd8fd878904c3989b52b476165bfcf068aa1af8e1f8ff09f840b89f28e7", 0x35}, {&(0x7f0000000940)="41c3", 0x2}, {&(0x7f0000000ac0)="139e099e6b05e3115c900af9291ed5b6a63b38be539ed0feb1ab9ccfd4b2f48bed1fdb9024cbb63e53e1552fa70c55b084241246182ead7ba5ba78d8afe7d13dce641939fb7209fd08db046f037ad1c3175608ed39484204e3b7436b71de7d02f3b5e1ed23450e083fdb106ad6621ce853c68d38b97f12d4de70d4e00ae949e995", 0x81}], 0x8, &(0x7f0000000c00)=[@rights={{0x18, 0x1, 0x1, [r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x200000c4}}, {{&(0x7f0000000c80)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d00)="d46e70a43f74fac60c9ce49f8127d94fe17deb82e41e67cc6b865fa16bcfdcc513b3eba804255414da8accdb1971b5dad4802ece0415735b209dcc5018ff8bc7839f3234f095422bf582f846e76790add60dcbe4117c1d1376377a2eb8eb2ec5cfbe11819cdb202b53479a86895a0aac4b087324b450993530714f7ce2eff35c5f5706d45584876bb021e5baba0de419", 0x90}, {&(0x7f0000000dc0)="b3933bfaac26956a6c4bfc293360f4d886ccbeec77953dedaf29af66560c198dbbee014b995a763406c7d3a3ead58bcd1e17fe64efeb3ae41591c702292e2297d4c1721c664414b54feeb433b8ffe51fe459edcd46a9556aa884d339d54613abe0154eee7fca6fb661c6838bb025af8a287be4d0d9c3e4fa70f85a9b7b417a85b98f0687c6fcbde5fbe8", 0x8a}, {&(0x7f0000000e80)="e176a9104b1977073ecc73126c349d4af00a665e7e57276827febff1b33c4891d45d49a8f5f094bdd759ef452ff639ed554ed4247476927f3b00f8ea91c809938d46582e03d0ad171cece1b6d2ef1154b9348ac7be0c3ec0efcc9939203ad621a892ac50eb443cdaaacc5ffe736af5718231955c0a42aede551e24e23c40709908116d6f841f9f26be906fce5c8ea7fa26c77614b7438bda2130ec838b17e13834ee461c091ec42e43470eaca60b3a119a37531583", 0xb5}, {&(0x7f0000000f40)="5b80bc4ccd07cb30fd66a67d3ec54fd97b05186a2d7a16c31d621e6efa6eec59f260b3ae48c305dd1a7aa2396f67aed08d8e6c1abc6940dfda0417e2fd396c535f369b83beaedb0e85ce5d6028edbcf2295c86ac6cde1bb476edf8cb83443d4e9cdf3d7b81bd4de9e46671396aa6c88d678224794dc8abf0cdd3088aae0fbdfec5d7c9ddb22f860d5cc5f313996f3c9e1b1fa079126b18ea1178c83d4c6b9c189e7c8d4d86afb525", 0xa8}], 0x4, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r3]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48, 0x90}}, {{&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000013c0), 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r6, r5, r3, 0xffffffffffffffff, r3, r6]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x80, 0x818}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001540)="32b2a728415e5536147f9d668e5543300571f13f6f74b59c26ffa75323fbf9e61c5ae533618d04ab8dc7491c8d4d380315edc4d81a3f41570e26ff72292cbaac3e5ee47ab71642e3dccb4a620b6d552930c726429e00ae2780d39d6c838db894e5ac4fe1dba196427cbb27bccc2bcc3e13927f717fe8e4ce0e2682e8a02b7d6a9413d8c7986a5c88109a3c752156b5e3b80095895eecc6af5b9415ad6745c3783f5779", 0xa3}, {&(0x7f0000001600)="302ae6c72412d301770c81742f0492a4c43ecec1a4209df3008ad47dfadb6fff585720393a51304c0a8f602a10fa449dba41a9f5e8272d14ed1078d96000b789694da09de0908fd98c6e549e9ad29ac1e78a7ab41780358f552769ac7b", 0x5d}, {&(0x7f0000001680)="6a4776c081712e48b706d1eb74afdcc5c1f02b5367eb66cb1983df055a3690c5e3f0da4f7095a0e2b8a0931064680cad1e1de0a3b81e8c65e81ae7380d94df3b891a478689b4f0e131866de40962c110cc12673163f870ab370c1866f0d96307384e7cbe8bf1423ac8b251c17f", 0x6d}, {&(0x7f0000001700)="e49cb28e175852b16d74aee9a6de0762966b3565b519d0fab18ac32825e781baf86c40dfa71a83c3fe23e467a278549a70c0d4f6784a6a78bcf1df9f505ba63da29ea7db0d6e5f8efbe955b99816cdd7780fa0bc001514f3304f", 0x5a}], 0x4, &(0x7f0000001840)=[@rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x1c, 0x1, 0x1, [r6, r4, r3]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r6, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, r2, 0xffffffffffffffff, r6, r0, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}], 0x160, 0x4000010}}, {{&(0x7f00000019c0)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001ac0)="9b15978858a9fb4b27c732fc70c78ce104af3af64e83edafecfed93043312a99cd9fde6104f99eb91665af4d7125bc4438618272eef5c4834af9e875daf35b6d902b4ebe1433e30fefc8a5", 0x4b}, {&(0x7f0000001b40)="b9e7559da2f01614df99186b10e6e54e4415390e17adf50e8e4fe17be2b22685a762b7830a1e1c27c80e3cbb0a8a157f7433dc28b8a4535af3160ab3869e56841b38cf27f4e3cc9547441496f75d3bab155160a2fe4021ac4a4fc929ea4089f64fcede76995feedb5bc71247802786f7589a436ccc6dd5484c332fc6892ef31308ced70a7040a13b5c04eb0a474c6c77f88ad0c708c266785f2a396d268d8e65e9ed26b7bcdd81e68c6cf312975aa263518604c95579cf98771b2ad449a60bb5a9bb07096513b8338a8a358045d9ebe9fbe3f7fe2458753ce2d7fa2d90276368592987f2", 0xe4}, {&(0x7f0000001c40)="155546f3142407f2c6447186af77c9d8f9d7d7b554323a3df83f809bd1932cd109a151d79f81830af18f3176550f3c284c6402f4b7407e0e6e61a121d63c3450cc58d3496635c56a96843c2737560f0f38997c521475b1f030409cc78a32c94d11e732bb18754687805e06abb092c46ebb8a9b15c046fea1d3162d36678883ed99124b63fae297a01f5a3daa9655f072fc72d67b90bdf3eda138e7b6305b96cf97beb108cd12c7ebe65fba5109e3c8befaa34714e4f4f34c133669af0fa62d276c1cbfa0d447d95d87aad9f2c587da2a2edbe5e05b5ee7132c373251991c0d598b62b21e090981ab145c52fe46226adc918ef91479dc6606cf6bb09e0ae7e4ba7b47ca5b2a8dae26301552a73887f3a8853289e6f2939789c3fd4dd412be03e551653ee3092c45337744db953359ecd5cd55c819099bf14b97d294e1b04b5ebf16fb5001cde883b039072e410038402eef866e39f9b4a7ea26dabc9eaaa94405d3bbe4763b8a4fa44b9dd0c8154847fd3121d6fa61d9ba2b4168b4a44da0a9d84d55a20625a72b4ce5e8503c4e147d917ce9f3c746ad081c478211c1b5b472173a0baf92861ad37261d415106fd4aef1c3aec9648e6c684b061f2fe246ecb05e063eb8dd0c42309f6264970bae50c8da71bbe6e88a14d0d0ad5589508c2576b686f5ee2d6182e4de6cc67a9f1d07f155a6bf9279a738fd95b4e3335c6e86c3a6399679035bc548deff593b77a6cd4e5c19a5803782b71b140f1e3c0a641608d935f1269c7e4c35fbdb4902172a8c8d9c5d6c8f122daf38fbdc324be5fa46121f60578b495fe387db467aca920509c09ba2eef57e91f54cec09628e2039afd35683357a825d00a66d2e97616b1574823edcaa7138a875c748e4cc39a15b4219519e83f8757ce4e3acba72de09b48ac9f53d50495a46a4b59aad870a2678836549ea4f3359fc0b179ea183a94918c4c4aab0b75ec407370a04b2fe9c9f423822c0d8f56ae2dad4f3e8aa0dcadf750a5a6ce8a15478230ae303b58f9bfe94323e61ecbd1fe0ca22b5ef2aeb001fa67c9773285c717eeb54708517537dabfab3d7891457c75f8b6e23e4f56e343d403745be4a81ab5ef84f125b1468084b1ed4f4ba79d846557e5b15a3bee91002923f4136b41ad281fa655f62320e9a9c3337e619fe108b991bae5b4c572e3191076523a3ae596b0425c6e95647f618d57aeac43ce26d4a200b3f1b7c025c0ac7a72c5758880c1c6c15f48a696b7c6c742a185ad3a41a8e7a64eea93f8cbf626cfb4818e6a6679c02116e2f7a7f4e538f54124ae0f18d511743ca54eea1dcc80a5fb9b154d058882c0da3f53d795e2254f25dc99766942d994e57dc56a283c6b1e8893654e1aef0cbbb94ff34515eb218801ee2a8c28ba8791f4f57c9eb06cce91311c3ba4ae084658ed23ffc723badb5d41893d17ed8eff799bec7d15a2d63ec80a9a59a37ddbb56cbf3ba2a0325517a29f1954bfd025fb7a028ee74c0ab74b69be6ae66765fc0d16a4f2bc3f948399c2708f5c72ca3483404de44cc28adadb8a3248c8cd8918a32d118440f2f8b8b9f18cb0c5c3a275dc7ca6da4e8af826dbfa2c846dde263a4ccd827532b9a3e666edeb0068d4aafa89ab84bf066b36d939601b8b5b740332cbb2a9ce98572d8a45db20e68783e31b1fbe5984a75f549e1599915adedcee60ce30c8fb75e5130fc02b9320f358a4adbe62db41124d5dbca37c8759ba642d7cdd50f16a0c023db2521f402dad5d7da246caf9f41baa62f6866a249141ff80be6ef1ed5e90550f62c446c785bae0a7e3a8171a571e0801c84c57a98c34489dc9cf62ea3c379d0f6cda525a2697d90a1c0952abfdc6537cd04c785845e7eec517a82c2842ba3045ba908e9d9479b2395408bf31f3f55aef967df19be7b1e249d21338974645b1fa659a86c7aaea1e3a0f015a1f5fc397e64c8ccd75d8a56dee5865516dcc9b851b8ce8b939683c0b628b82327edca1214ab40f9ad1fe6bba81d30a3ff18ad22744e09c6cde7d2b4c7cbcc486a85e940b4a36aacc3d5b216d1a936d6c2cfef916c0e1f5b435d51905a18071822280cb9ba5bf7a32f118b9842a6b7f1dbb81e7ca14250f450234940c0d15232c3b8552d808547206a0ce8813c74dc36dadf1ac009fabfbd78ed2a05ad4a2329ba73c38be119018cfe1ecc2b0793ab482567e3eb3ea2707723432f29d8b676ea4e0afa65fd96a8b52f5bf74b2c806c7b2a2af32dc4eae585e5672c200995cb9ad2194d17a9d045bc19ac94927ba8fbce5d321bb1915baf3bf8ac90faf61394baf25046be888292d9511115e57f9ef6bc095c1fff5fcfdff1be6da987583d9c277d04518a64c56f697242fcf92076fa227353b0c35a4d486801a3e6125ef051358243e4d6d02206adeb5a73aa4552fe9e60af9418cb40438277cf32ec3e2e70004466b89f14dacdc1248a3b34f3ffe4df3f7653a7f821cad553359ed647eb40703ccb1ed1ea34d951ac05da8973ed8d7ccfad3ec80525e2fa2fd28427b2ed70c2cf2455100aea5458d226daf8ecb92d2fb971d115bbdd1bbbbf0d535776e27ad8fc368cb9c708d939ecbfe97201a68c8601efcb1d4022b89cb70a31ce2550ed1c1b6be59a5d2c5088cffa87242cef84ea6fbc1f9e0ed615b235755b9f11b5296c74cf139bcd162129d4bbf019d7920ac35eb5ca16b55628b87cbb8ea5873f34217be6c157cd639664751ceb95d9d3bf5eaba9a856e60dce5843b9dd208e6001ee41b2a95fbdc22d61277dc10bb08023daa9e79f047c29cb732899fb564a3667a0935de9127d940d1ae0012610d1c48387dd0e1e0957e2666158a74bf15dac220ccc0a886752391b78f53af047f3788e4089eaee9320f3fba6387eb9a2554035f801b8edf36b6fd1a5d0e1e856d0e9c43292beb6c11e294698b624b63511f3d15057c52a8c70b3814acd4aa596fd2ed355911bb32dfc17fd2a5d35ffaa4354d8503e571c4ba3884322a8a08b6d430286c8fc352cee951ce9c875f9ff346f4f193e5d334700b70f6313d001a06232bcfd4fd458ba523e3e8d456c03e5c9d04d7d59cd591ac7ad5d0b58147307ba26f4bb5e4b6f148541b3e97ccca23df42ba56e9278f8c152262bcae805d84c58c88a2f5f215d643abb6cfe250eb777b81e443b152bf0a528860f021c843d7f7bf541f271fcb35d48e25c85cb8789897f4d6deb018b2f9883cfc74cd8a355a06b6857ce955f7dcee3b59ba11c1bdc4d4e3744ad11846dc1beb526a1e701ab29fef454df96a796d1b934aff2497503cd268441e909984a5dca9ceceb6a22f159a934f6d211c6ab6d23ae3a89d57f6c20ed813e9e1020afed9d61d568aa2f38bf7398d0d0a7fd7d1f2270858272f52dc73e5bb3c555ec514537d8e975bcee50f2ebee9c7ed2b02f4802ded3cb222124581744ac95fa866011815a18787a045676e76f5cd37e4898775aea66f9c26245412c0b1311d6ca300a71b2913bb87753c669e4b08fdd4e9796cf283cddff5d60775d0df2f7a32e34f93150dd95d2e0fed14e4a28079acbf5075a7eafc87ed813e306ba29626e58be0b2aac79c0fbe8721f62530dcb96ab33857e909d1f8f9280752fcb6a45104808dd8ba5e2fdc89adde7fdce5a1f57f823713ee8809ac980fd0274345cf572f390a94e4d41cad34b9b149eeb08c8c717b753b5ac024d43126de3b65557029f1b4f12c05cc9b37e0f70b31466107f28fb0e420d915d7ba129e8da15b3cdc8d260eb718b92422b5353dd83982720e65714a31364601e822be1a48603dfc0edd698dbbbb9b6601d986dc7ba5646180226153a8d0d995842d5b00301b93b48ac12d664e41ae22d88a263eeb3852f92db0d0cf61f9f8e9c5ab1b1768836b8fdeeec1196984edf8c50ad01fec2aa1a0b41cbfce9863770de2202d6c6c8a19cc882d5f3e5bcb4b88a08dcf2dfce09fb7587adde6c444ddd95f58d9d25674a08c1a0438f6c85acaa5b862467dfd93eb9fbc9666eac4398f8a4070b801295054209704a479e4cf84eea9d1e070078f7b527cef12651d88baad30d515cd41b610bd60a54f6af3a237cf8dbf098b3d94b0d24ec621cea33c75bfee6ce5a5dbeea5813210395bcccf83433447d4d52e7cf6a9364706931a4a53a848ca156200408da11297ea2726daf504b89a41d3a4ebaf9b1d2b38105fe69f33f359d048db43c94e52922d603d8efe30102710d7076998a0cf0a990f68754a065a07ed02a2d0f38f4e7c85f522df78903594902a36277d337d09f1c59997621aaae71d25a160657af05c82b0d6be14fe95926594cad37fd7047ca6d6a40a71ab24d6a21330cd91c0c4c52dee8ddf6df194d6ce0648f4cfa979feedb263caee8875be384df3ce730b09ff89b67de94758e76e8095161e02e4aa33b3f4ef8caa816697631ea073321179626af317c84046bcff6c47c376e6fd76db6887c2ecbc09c886d710ee2a4b65335356afa75d8aa58c680ac415b8d45786b192707fbb579cefcc57a4fc71c2c5f065800127ff2e70458d73d6abef011a3d84036f6271ab29d8f9b1201f0a311fc50ee0394c55a33a6bd450eb7a11a4c140d24301910694c5ea32b5ae8852a6753df509501811997ccb8f35c54c3542f1e4cfc6b72b78e160b2f3aee88a74137c00e687ad7124fd63f421b388cb05c1f59d61b02b81b043991bf092a5b06e980aa831d2f528523d4a354b059d4b93b6cf8195948fe886b9339cbffe3689a4849e984b08473751b3b38355ce2478957f2727c9be1229f4f7297904daed2f3fda8b01f9721fc03b155b0f25b5600f402a9a9c57492f47f5a1afaf86c1b2cc73f2f0f1afd220e28d82746c0f04c4a4c9ca07fbaa3e1ae926d7db163479241479d97b5c2b3b7740049a017ed03c5f3477d43fa502ca9d89d2ac6f456b5ac58cccac61cf7cff07119a4138d8e284eeb4dfec8fe5e6dd8365c2159197518a3cca2fa2e6d17a2e1fd11459c90dcf07e42b8f0bdccc348813aa7bc9e236d0f14605d9d66589dee6ed92207daa0b04d753c42a0f30974906e7841068e0cdd47a9edc84541487bac1edaa7ff053c03cc7aa0f591f570541313b6a62589752125db86e3f12f54c078ac76f6116fec83cda346df6d7f1989a00a1de996c5e9aa07b7f84de006f83aa7a94c03ef38ccbeea995b0af16ef07b8d0261a41d63a21b138f62d9110ef5fba45d6feb5e736767d9d1ab78c2d7cefef6245fbc115f822a45cf89327c4d3f78550ac04208fbf3996d99f32176e83bf10202b03ea85f098d1feecc266895da20005e255da29595ea1b31e4c63ba134d2804b1e3cd9409cfb003631900351fd33c9674e0f06792099215afe5ae7739a873faadcb28b1499555740455ee44fc424c45b002c8ec1f6faaa79d3506e413f99d3e496f4d4a5693cc34e65df549d44f8772534d374ad4c52ebff4b0815594e6dacc52f44f35da9675eb500cb5ce4d5c0e91595cf3ef141697d799edb13107b502ceb63040c1d9e2771554a88172e8e8203781d6dc0d50805e39467546d3adc143d60c4503d80f7d6e845a0448a9bf10eaadf878478c1b85274e8489d4609284f43a3e5db7e973e674a426cf3c1ac5b7f8369997af84a95df0c8c59e024efc9da5a77aa0fb5a08c41473f8cf1ca2708d212ff056194595165e31fe3cfcf115a4eb3f5dd7f779c8e020647f823f64bbc32f58e74f76420018c474b82cd30830ba01477fabb8cb8dd672c63a19cf19d364d3eb3aa2652a2019d1a4a87c2a2dea0f0ce9df92af28218aba702469d17", 0x1000}, {&(0x7f0000002c40)="8a45fd3a076233918baf9b64a752", 0xe}], 0x4, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4000}}, {{&(0x7f0000002d00)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000003880)=[{&(0x7f0000002d80)="c3567a84c450893a", 0x8}, {&(0x7f0000003180)="3c699d85b49dccce1ff9f56873bd35b36cea1dc06c9c0d9cc11cfbca2ab9748bd608c7d495ce744b67d369221f328547858b1aa52782474db03079cfdc41dbdd30e8de0e70d02c9abf62b6b22ef85002c24925822ea9723e42b0074ff208fc42f9a5e222c24227dd1a4d223190f9a5a5843e4edf377c63d16044525ec197a291da8e8b65b5fa52ff314b819d6beee680b030700bb5e62a0ad47821ab473bc42986597f7bbce9d016a0db91a057c5074b9bd738e090d5498fb7ce2328e4172f2ae3188c5b268b71f0b4431fff938e86417fc6257766da6485cbe1d36f26688b65c8b9df5203d2c5b9", 0xe8}, {&(0x7f0000003280)="c689b0764a6c79b8da88a9c5ca478f3221ee63aa57d3f8b0f7b54645b6d4ebe4a5d4741c3f7cace165f576e0af668e1d210d0ca27468f67faf9aff885e6d1d9db3aeda3ac26dab7249d47378c723bfa6f0032751c357d3b08192f6f6686dd551d58ab70a3c305f4adf4d4ac7b89d75a6292063a5578750eadc6f1def797d01a3d1d16682aa65a2d32f7d956700ed89a22f6370196866ba06443d537c11a8e7b2ab51da0f782e3dd6e76f26d4149082aa67025b856f800fb8d715754e", 0xbc}, {&(0x7f0000003600)="b0add0fc8015bee36d4dfd33bab0bda9cdf62398988af0e77c5509c959887d76a8cb42a0b9b1c03425c4529cc3c925528c5e79ded8451718b046d9b97e5dc63714879f789e453347ebe4372282cfd2a34a7b211a22d565bc8abc4fec1f2d43988ff2a6bb6f7f9a27e1e86b4daeea6492569eb7c5241e1616", 0x78}, {&(0x7f0000003900)="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", 0xfe}, {&(0x7f0000003780)="3e622e8392e92c3e06a3e43b8e9bbe620b80f02b02aef4a149a399eaf7c8e18a7b5d988608d5a8080c5c13f20d5a460702563827f3bc3d23195b5cd7eb394aafd4bb546e499a2567eb1cf38733da755ec97f75ceb5eb2689cb7f08c154ab5500db27ce342b7aa8c508600426764bdc76b9048f7b46b0eab3ac0e72a503f124bcee0f0293f64147f769e99faced99917f535f091e70553d05aae498a381010470023192585b99093878a41c8ed083c4f725fd5fa00f3fce0932a4d6d08204064d7f44a17f7b2644735e60d11633080293b92c77bf0ef352d2d0df982f", 0xdc}], 0x6, 0x0, 0x0, 0x20040005}}, {{&(0x7f0000002e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002e80)="22da73db35fc89a1523040e1f49d9604da3ae71d297183a67b9947815e77daa3497d5fbba295d573a323c5367565f545f9f5ddc50dffab23e03bf3df0367d3b1bfbbfbc44ab256544b8557e74b475cd17dff1a70fb61abd4b902b780524a00208518842d8e394feff253855c30208ce770f0577cffa14ff3fa9bc0886d33dc8bc9823f4c5db95aa881d77ba35d33c7bc", 0x90}, {&(0x7f0000002f40)="a585c41a1ebd88cf4d2745bef31289b9d10ab09c2c5c62897bd991d92bfe523f4d4d6c7942504a13645c09ca512f457d8005814e55f9e21048e9913a028ded88c0191943254f2ed1481f9e4ffbd87306e423624e625cfc21ffe1e279505597150fbbd91ab730c49f4f576157ccd6e04b49eaf68b5fbea615e9918c6254193908015e3874a70e130649e7d732fe594774c43167d148f7b91a3f5747bc7be8d31951c94d755df81ce47d88e94e3ee33fff061451a291", 0xb5}, {&(0x7f0000003000)="31474eaa3fa581675644cd1bf0ce43d0ecc657d3b5b2a2eee44a55d855e46ea244c19a8a8d11503f8c00a038545186add7c2143f6fb64002b2cab3962d7372384f8a737bd5afbfcdfb7e5247cfa0e6f77c30a57f4a8a7021c1459a3b14da4940acb453a8608f0426f01e49644752af058b18f4db61eda030e03e1b09726d43cd2b0f040c11ef47d0b68f90c64c8f014443da7440d566353f8372e9c7c57a7cbcf5ac1556f1410ff678d5720c25d83e805c99c782e740dec0be2dfcfdd7099e26fea0d53f2e08174cf9b3a9fc99ca9d53e3d42e", 0xd3}, {&(0x7f0000003100)="945baa204fb42ecb0ae0b99996a88fabeffd2a4d647fd90c4e339e03a8d1f7ac22ce0856ebaefc0a060ac75ab6e41b79b1d9c9a6100b3c8849c9ef3e51dfcc1a", 0x40}], 0x4, &(0x7f0000003340)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x30, 0x1, 0x1, [r6, r2, r3, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0xf0, 0x20040001}}], 0x7, 0x20024001) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a8f480, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) semget$private(0x0, 0x0, 0x20) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x82, 0x10}, 0x18) (async) r7 = io_uring_setup(0x1198, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x0, 0xce}) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000280)=[r3]}, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) (async) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m29.313359716s ago: executing program 7 (id=2773): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x14, r2, 0x1, 0x7fffefff, 0x4000000}, 0x14}, 0x1, 0x0, 0x0, 0x100540c1}, 0x20000054) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x150, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x20040001) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000000002) 3m27.659910412s ago: executing program 7 (id=2780): socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x5abb, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) syz_emit_ethernet(0x71, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="468d7acda0b2", 0x0, 0x0, 0x40, 0x0, 0x0}) 3m27.659702823s ago: executing program 37 (id=2780): socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x5abb, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) syz_emit_ethernet(0x71, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="468d7acda0b2", 0x0, 0x0, 0x40, 0x0, 0x0}) 1m32.666171834s ago: executing program 6 (id=3489): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x0, @void}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000f618c5909c1bafe14f54ad3594000050a245d5cde0080045ff00"/39], 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffc, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 1m32.552671207s ago: executing program 6 (id=3491): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) (async) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x2) (async) r4 = socket$inet(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) 1m32.40208931s ago: executing program 6 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x1}, 0x1}) 1m32.40137868s ago: executing program 6 (id=3494): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018002000000", 0x2c}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x100}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$eJzs3cFqE1EUxvFjU5s0pU0EERTUg250M7TxATRIC2JAqY2oC2FqJxoyJmUmVCJisxG3Pkdx6U5QX6AbcePeXREEN12II52ZtJM2bdM2TWL7/0GZO3Pux71N0nISSLLy4N3zUsE1CmZVBhIqAyJ1WRVJr41CJ8LjgD8ekqi6XB35/f38vYePbmdzuclp1anszLWMqo5d/PTi1ftLX6oj9z+MfYzLcvrxyq/Mj+Wh5bMrf2eeFV0tulquVNXU2Uqlas7als4V3ZKhete2TNfSYtm1nKZ6wa7Mz9fULM+NJucdy3XVLNe0ZNW0WtGqU1PzqVksq2EYOpqU422wjTn5pelpM7tt2Yt1dEc4dMOtLjpOtt66mF/qwp4AAECf2bn/D3r97fr/je5wL/3/md37f5Fo/58IF6H/74B609ku/T+OBMfJmsnw77cZ/T8AAAAAAAAAAAAAAAAAAAAAAP+DVc9LeZ6XWjuGl/zzuIgkgreA++c93iYOSfT+9yI/6/d/eL4pdr1H20WHRd64lxCx3y7kF/LBMahnC1IUWywZl5T88R8PoWA8dSs3Oa6+tHy2F8P84kI+JvFGviHdKn/h1ESQ1+b8SUlG189ISk63Xj/TMj8kVy5H8oak5OsTqYgtc/7jeiP/ekL15p3cpvywPw8AAAAAgKPA0HVbnr/7dX9CQrbWg3zk9QHP8xZ3en1g0/PrQTnXzkdUAgAAAACAA3NrL0umbVvOPgZxETlAvPMDzxPp/TZi0h+3RvPghoj0wTa6NUiISHBF9xP/uR5vK+W1MWcw/AaO/rh9dh/0+j8TAAAAgE7baPr3EPr25hB3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8dPu54E15m8pNQo7xCPLxbr+CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB95F8AAAD//6loFW8=") perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x100002, 0x20000}, 0x112065, 0x0, 0x4, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) 1m31.463566311s ago: executing program 6 (id=3505): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m31.334043713s ago: executing program 6 (id=3506): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0xa22}, 0x8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) setuid(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x80, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x3, 0xe}, {0xa, 0x4}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}]}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004890) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xff) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x4) io_uring_setup(0x5923, &(0x7f0000000800)={0x0, 0x5fa1, 0x400}) epoll_create1(0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, 0x0, 0x0}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m16.284393428s ago: executing program 38 (id=3506): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0xa22}, 0x8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) setuid(0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x80, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x3, 0xe}, {0xa, 0x4}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}]}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004890) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xff) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x4) io_uring_setup(0x5923, &(0x7f0000000800)={0x0, 0x5fa1, 0x400}) epoll_create1(0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, 0x0, 0x0}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m1.724697901s ago: executing program 1 (id=3696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xff83, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "cd9a"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m1.654296172s ago: executing program 1 (id=3697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "cd9a"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m1.587078373s ago: executing program 1 (id=3699): r0 = syz_clone(0x6889200, &(0x7f00000013c0)="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", 0x1df, &(0x7f0000001180), &(0x7f0000001080), &(0x7f0000001300)="ed2233b63baad24b2caab96b3b1c6034e59c7f236e89a7b4cbe7e5ebbd3022c75c63dba1beff6b1da032d2b9a68a51ef4b1af389bde80ca4523172faca4dd5f95e99cc623fa55a5ef154deadfe1acc9e5dc79b2f2dfcec15a612e566ab08ec6166a3e8c1811d1aa41700ff2b037552d3a41963275f280c0fddd09edf6b6d58d2d5ae3fda716819374ea961d40310bb7201dc24058b5855a44f0f23") (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102f) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) (async) sched_setparam(r0, &(0x7f00000010c0)=0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x1}, 0x8) (async) sendto$inet(r1, &(0x7f00000002c0)=')', 0x34000, 0x2000c8c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) syz_read_part_table(0x104e, &(0x7f0000000000)="$eJzsz7ENwjAQBdBLHCWkQKJlMPbxJlQ0LMYKUB0yWGQChJDeK8722V/WBT81lDnKa7crQ43IzLlfTVMsUcd+2pct815qK+t8ucXSmr37yLhnRBz6++MntrZyznX7fDxdvzgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyNZwAAAP//P1oNLw==") 1m1.556747165s ago: executing program 1 (id=3700): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="020a0509070000002cbd7000fddbdf2505001a"], 0x38}}, 0x40004) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'sit0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'sit0\x00', 0x4000}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080, 0x0) 1m1.33032455s ago: executing program 1 (id=3704): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r3, @ANYBLOB="402000000000000014001a80100006800c00"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x800) 59.874219382s ago: executing program 1 (id=3710): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x37f, &(0x7f0000001640)="$eJzs3U9rXFUUAPDTsfmryWQhgop46c7NkMQv0CAtiAEldqS6EF7NpA6ZZsK8ITJFtAvBrd/AfXHpThC/QBa6d+cuG5ddlD6Zf2mSjiklTR7V3w+Ge97ce2bufY/3uJvHObj5w53trby2lXWjcjVFJSIqDyKWBtHQpVFbGcTTcdS9eKd688+3Pv70sw/W1tevbaR0fe3Gu6sppcW3f/3q65+u/NZ9+ZOfF3+Zif2lzw/+Xv1r/7X91w8e3fiymadmnnba3ZSlW+12N7vVaqTNZr5dS+mjViPLG6m5kzc6x/q3Wu3d3V7KdjYX5nc7jTxP2U4vbTd6qdtO3U4vZbez5k6q1WppYT54mvr9jY1sbRjPnjLu6kVNiHPQ6axl/Xt45ome+v1SJgQAlOqs+//p57r/nwr7/4t0dP/Pf1V//z89un+Ps/8HAAAAAAAAAAAAAIAXwYOiqBZFUR23xfgl4dFxydPjnD1x/U98yp4f5+vIi3uzEa3v9+p79WE77F/bima0ohHLUY2H/cfC2DC+/v76teU0sBQLd74d5F/5PaL+0vH8lajG0uT8lWF+OsyPfjsV80fzV6Mar07OX52YPx3LPx7Jr0U1/vgi2tGKzcHj7XH+Nyspvffh+on8mcE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4famnszRjWvd+rR8zF3qh+f+3xgKXj9fGH+Yf19ZejGg8n1+dfnlif/3K8cbnctQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAWN67u521Wo3ORQXjmv+Db6bHwb9nXRoOv3eiay6OD5552u+cMag8U9bcaJETuh4VRTEIbn/33Kc6e7GX8izBVEScMqYYncCz/9crEXHKmJmIONeVLvaDSvkn/JmDMp5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUK7Dot/9g0tlzwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICy5L2721mr1eicY1D2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4k/wQAAP//La4MhQ==") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') unlink(&(0x7f0000000040)='./bus\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf25020000000400b7000400d10074370b0100000000290002006272cfbb9d8f3f4658022f03696467653007000000000000000008000c010900"/76], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 59.874033992s ago: executing program 39 (id=3710): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x37f, &(0x7f0000001640)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') unlink(&(0x7f0000000040)='./bus\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf25020000000400b7000400d10074370b0100000000290002006272cfbb9d8f3f4658022f03696467653007000000000000000008000c010900"/76], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 8.042332992s ago: executing program 2 (id=3993): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15, 0x0, 0x29, 0xfffffffc}, {}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000007c0)='cpu<=0||!') 6.230175412s ago: executing program 2 (id=4001): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@debug}]}, 0xfd, 0x272, &(0x7f0000000c80)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) fallocate(r2, 0x0, 0x800657, 0x40000b7) fallocate(r2, 0x0, 0x4, 0x3) accept4(r1, 0x0, 0x0, 0x800) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x9, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040), 0x0, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) fcntl$notify(r0, 0x402, 0x20) 6.160050244s ago: executing program 4 (id=4002): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ftruncate(r0, 0x5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) close(r1) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) 4.798509604s ago: executing program 3 (id=4013): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1251010, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x2c3, &(0x7f0000000e80)="$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") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) socket$key(0xf, 0x3, 0x2) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x392d034, 0x0, 0x0, 0x0, &(0x7f0000000140)) rseq(0x0, 0x0, 0x1, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="1800000069006bcd8effffff", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc800) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0x4525, 0x2) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @empty}}, [0x1, 0x6, 0xfffffffffffffff8, 0x2, 0x4, 0x401, 0xe, 0x7, 0x9, 0x7, 0x8, 0x7, 0x7, 0xda, 0x7f]}, &(0x7f0000000300)=0x100) 4.298204005s ago: executing program 2 (id=4014): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401b, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x1, 0x0, 0x8, 0xa858, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) rename(0x0, 0x0) syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000b40)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 4.258083656s ago: executing program 4 (id=4015): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000d0000850000000d0000004e0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") keyctl$join(0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000640), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x40, 0x7e, 0x9}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 3.694623029s ago: executing program 4 (id=4020): bpf$MAP_CREATE(0x0, 0x0, 0x82) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2f, @remote, 0x4e23, 0x1, 'wrr\x00', 0xe, 0x3, 0x46}, 0x2c) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000013c0)={r1, &(0x7f0000000000)="62c70a2f16fb6329ef1eb0b3535357b8c59d2981860d", &(0x7f00000003c0)=""/4096}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x10800) 3.514330493s ago: executing program 9 (id=4022): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a310000000044000000050a9cab8b48f6d001020000000000000000010020000c00024000000000000000010900010073797a3100000000180004801400030076657468315f6d61637674"], 0xb8}}, 0x0) (fail_nth: 8) 3.514058713s ago: executing program 9 (id=4024): r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) sigaltstack(&(0x7f0000001dc0)={0x0, 0x80000002}, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0), 0x7fff, 0x800) r3 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x83, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = mq_open(&(0x7f0000000080)='\\\x9f-:,@', 0x2, 0xc0, 0x0) mq_notify(r4, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = timerfd_create(0x0, 0x0) read(r5, &(0x7f0000002180)=""/262, 0x106) syz_emit_ethernet(0xc2, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f00000006c0)={'#! ', './file1', [{}, {0x20, '\xa2\xaa\xaa\xaa\xaa'}, {0x20, '\\\x9f-:,@'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "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"}, 0xffffffffffffff5a) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="bd7f0000", @ANYRES16=r7, @ANYBLOB="01002dbd7000090000003b0000000c0099000700000058000000080027000000000008002700020000000800a0000200000008002700020000000e00cd000001040008008100fbff00000800a00003000000050019010b00000008009f0002000000"], 0x68}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.432028214s ago: executing program 4 (id=4025): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffff0}}, {{0xa, 0x0, 0x6, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x801, 0x2000000, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10001}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x872}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan1\x00'}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x40000000}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.15119544s ago: executing program 8 (id=4026): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ftruncate(r0, 0x5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) close(r1) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) 1.912287678s ago: executing program 9 (id=4027): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2400) 1.634223114s ago: executing program 9 (id=4028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)=@can, 0x80, 0x0, 0x1}, 0x4000) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0xff2e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x30, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast2}}, @RTA_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@abort}]}, 0xf7, 0x491, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x80, 0x0, 0xf8c, 0x100, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x9}, 0x0, 0x80000002, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x10ec00, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000008c0)="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", 0xfc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000100)={0xffffffffffff8000, 0x1}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.263867332s ago: executing program 8 (id=4029): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r1 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x10020, &(0x7f0000000180)={[{}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@nocompress}, {@showassoc}, {@check_strict}, {@mode={'mode', 0x3d, 0x8}}, {@overriderock}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'default'}}], [{@fowner_lt={'fowner<', r0}}, {@uid_gt}, {@pcr={'pcr', 0x3d, 0x16}}, {@fowner_eq}, {@dont_hash}]}, 0x2, 0xa45, &(0x7f00000007c0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAzu7a2WJ7ke1IiTg0pXFQFEOhBamtkEglxAFRgQTiwq3ixKlSL/SCeoMbXOCAhPovVJzCyWhmd+21veu1E8d2k8/H2t2Zd55532d+7LzxZj1v8MWycmzd3MpK/rjL+ct/3IOMOcAulj/78KMPssf7t+NQ9MTLyZ8i+iMijeiNiKci+krl+dpsl4puRVyLiE8jkog4HPXXbbkWya/i0bX5TyP5fdZuR4e2WzPdrPBQ2+/zDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqKkVC4WR5NDUZ27fCWti0g3KZXna0msrGxe0lyn7pN81O/kk1880qXdiCR7RH9/c6jvp06sLX4yItLT8XR97ul8QPLoj/ceefL4K0/0Fprrd8rmnhzuUG1PNHdMEnE7Syh9+933br2+vLz01g6b6L/nJA+G6cpcdaFWnZ2crqTVhVo6cf588dylqYV0qjpTWbi6sFiZTUvzlcnF2nw6VHohHZ2YGE8rI1drl+emyyMzlWbhha+MFYvn01dHvlWZnF+ozZ17dWShdKk6M1Odm85jssVZzIXsRPxmdTFdrEzOpumNm8tL4xtyWjtMDVnQaLctyYLGugWNFcfGRkfHxkbfb4yevVpw/uWJly8Ui73FDWJTxH06aTlYjnQ+zPfhKg53p1Dv/yNmohpzcTmuRNr2pxTlmI9azHZY3tDs/8+cq2zZbmv/3+jle1sWn8yeTsezjdn+Dv1/h1z27ufteDfei1vxeizHcizFW/ue0eaf7Ih0WHbkXuuejkrMRTUWohbVmI3JvCRtlKQxEefjfBTjtbgUg7EQaUxFNWaiEgtxNRZiMSr5GVWK+ajEZCxGLeYjjaEoxQuRxmhMxESMRxqVGImrUYvLMRfTUY7JvJYbcTPf7+Nb5LgaNLqdoLHWwobm/KbOfMf9f2XjP0546Ozm5RvuyUqj/z/UPXSotBcJAQAAALvuS3+Noyce/8u/I5J4Jv9cfqo6Uynud1oAAADALkoiiXg6e+rLZp+JxO//AAAA8KBJ8r+xSyJiIAbrU82/hPIhAAAAADwg8tv1PBvJ4FqB3/8BAADgAbN6j/36JwGr99i90tMs7XoX/mS4eavU9Hr99XojolHFwFR1pjJSqs28Mhpn87sM5H9psKm2noikL//zgxfjVD3q1ED9TvsDazVmbfZnUaMjr4zGi3G6sSFDz2Uvzw21iRyrRz5fj3y+NbIn1kWOZ5EA8KA7vUV/XL/Hfvf+/8UYrkcMn8y7/N6Tbfrgop4VAA6K1TF2/tsY0qxN/9+IeLZT///VLX7/zyIejxuD9a8UjMQb8WYsx/UYjsY3Dgbb1docjaD+NYThlk8Dchs+DRhofGXh7xcKMbzp84D+1W1tjV2KsbjT2OQjjeWNzw6S1dikmcN4PaDnvhwCANhzp7fsh7fX/w93+f1/wFcKAeBAWR3BfrsT2UrbDq5P7Pc2AgDr6aUBAAAAAAAAAAAAAAAAAAAAAAAAAABg923rBv5/OxuxvLwUsdPBAnYwcXxjSf9OMtx6ohD3J+c2E733v4mtJnp2PjrDNif+0TXm67HjmrNjvD87ykS3iX2+MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAnkoieduWFw/lLMSLO7XVO99Pt/U5gt6R3t1pyJ+7EO3F0t9MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjYNe7/X4j66yP1ougtRJyJiGsR8e39znE33dnvBPbN9/Lnlvv/FyL6YiWJ3vphj6SvVJ6vzWaHPzmcLf/sw48+yB7d6948qkI+fERhw+ASjRZaSvrWr/VYvtZAeentWz968wdp+WJ+Yl5cnJopz07Pf2Mt8Mnk4/oQCK3DIDTz/cmZP/+6pfhQo/GPsy1tb2O7U3m75c3t/n+7tTu0uw03l5fGstfFypXFH3//5jstix6PUxHPDUUMrW/pu9mjQ0unNu7P9ZLPk58nR+N3cS0//tneSFaS7BAdy7f/yI2by0sjb7y5fL3QzOmn63I6HoMRcT2if/s5DebXk7bys67Ql7VazIOypxNd6ttSS42jhfb79bH8lBlosw0L0anNtPM25PL93vHkamY03jaj3/zwiTi74yN9tuVIb51bi+Tz5F/Jpfhn/Kxl/I9CdvzPRNt3Z5sq8siWM6V12bo9UDiztuVjrQte21jnFjuOXffL+E58bfX4F1qu/41j1eF9s8vXo5YW278vInb+vvjDsU09ypq8RzqxoUdqXH3artC/mueJw6uFbfL8v3gpovfkjq6KL3V71+7g/b89jfZuD8V/4rbxfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIMviehpV16IOBMRxyPiWDafRqxsjLl9F+0VBpK7SXPX3E3OB1nS27a0ZUPXb3FyJ+7EO3F0D1IDAAAAAAAAYA9cLH/24UcfZI/8/+N74suFxpI0ojcijie/7SuV52uzXSrqi7jW/C/9/p3lcC17enRt/tNs7qkuK+3v1wcA4AvtfwEAAP//Z6BwJg==") ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb78}}]}, &(0x7f0000000440)='syzkaller\x00', 0xc, 0x83, &(0x7f0000000480)=""/131, 0x41000, 0x1c, '\x00', r3, @xdp=0x25, r4, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x6, 0x6c8, 0x9}, 0x10, 0x0, r2, 0x2, 0x0, &(0x7f0000000640)=[{0x3, 0x5, 0x8, 0xb}, {0x3, 0x1, 0xc, 0x5}], 0x10, 0x86d}, 0x94) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68) 1.195047384s ago: executing program 8 (id=4030): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg(r2, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000200)="2b2a1dc6f7a74bfcfd0b7334bc61002ddf624fe5a144", 0x16}, {&(0x7f0000000240)="41540d188bf57d22a999fc88286e678f21e953", 0x13}], 0x2}}], 0x1, 0x2000000) 1.127969655s ago: executing program 8 (id=4031): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000d0000850000000d0000004e0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") keyctl$join(0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000640), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, 0x1}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x40, 0x7e, 0x9}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0, 0x0, 0x2e5b}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x1, 0x1, 0x3, 0x0, 0x0, {0x6, 0x0, 0x1}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x5bf4, 0x0, 0xfffffffb, 0x8, 0x401, 0x5, 0xfffffff8, 0x9]}, @CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x999e0f3c6b33cdba}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000740)={'icmp\x00'}, &(0x7f0000000780)=0x1e) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000800)={0x2, 0x4, 0x9, 0x0, 0x0, [{{r3}}, {{r5}, 0x5}, {{r6}, 0x8000}, {{}, 0x10}, {{}, 0x3}, {{r0}}, {{r4}, 0xa8a7}, {{}, 0x1}, {{r0}, 0x649}]}) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x20044010) r7 = syz_ublk_setup_io_uring(0x4f4a, &(0x7f0000000a40)={0x0, 0x29d8, 0x100, 0x2, 0xc6}, &(0x7f0000000ac0), &(0x7f0000000b00)=0x0, &(0x7f0000000b40)) r9 = syz_io_uring_complete(0x0, r8) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, &(0x7f0000000b80)={0x1}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000bc0)={'filter\x00', 0x2, [{}, {}]}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000c80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000c40)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r9, &(0x7f0000000cc0)={0xa, 0x4, 0xfa00, {r10}}, 0xc) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000d40)={&(0x7f0000000d00)=[{0x73, 0xafe, 0x1}, {0xf6bf, 0xbb5, 0x2}, {0x6, 0xd}], 0x3, 0x10, 0x10, 0x1000}) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000d80)=0x46c1) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000dc0)={{r3}, 0x28, 0x40, 0xd1}) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000e00)={0x2, 0x9d, "7467319bffa19344b92436469b5f7c05164482be41dfec62e3cc66b82e9dcb69edc97ef4987cb9521762a9eb480a6c8c38a7644c674d1e2648ea45e1601e56952509e818482fbfd4b5f8e707b6b22f369f561aab0a534b2b22c828e1946e00c13c8a131185de78c4571c6525b59af344677e74cc28d356e20c354fa48a82bed557269bed039f2718246037e0641acedfde84a8614b28b319e383384ddd"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r5, {0x67}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000f00)={{r1}, 0x0, 0x14, @unused=[0x7506, 0x1, 0x6, 0xffffffffffffff00], @devid=r2}) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000001f00)) bind$qrtr(r11, &(0x7f0000001f40)={0x2a, 0x3, 0x4001}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000002000)={0x0, 0x2, r4, 0x9}) 755.869134ms ago: executing program 8 (id=4036): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (fail_nth: 9) 586.245958ms ago: executing program 4 (id=4037): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6(0xa, 0x3, 0x9) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 355.133862ms ago: executing program 9 (id=4038): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x100, 0x80) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x8800000, 0x0, 0x3) socket(0x2a, 0x5, 0x0) close(0x3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11003, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_io_uring_setup(0x31c5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000)) 122.012448ms ago: executing program 3 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x56ce2967f5271398}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffc, 0x3}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) set_mempolicy(0x2, &(0x7f00000002c0)=0x1ff, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c032, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x3c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 2.25427ms ago: executing program 8 (id=4040): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 2.00107ms ago: executing program 2 (id=4041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000200)="2b2a1dc6f7a74bfcfd0b7334bc61002ddf624fe5a144", 0x16}, {&(0x7f0000000240)="41540d188bf57d22a999fc88286e678f21e953", 0x13}], 0x2}}], 0x1, 0x2000000) 1.40595ms ago: executing program 2 (id=4042): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdff, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00002fc000/0x6000)=nil, 0x6000, 0x4003, &(0x7f0000000c00)=0xc, 0xb, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, 0x0, 0x20040000) ioperm(0x2, 0x7ff, 0x8) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000340)=ANY=[], 0x1, 0x805, &(0x7f0000001580)="$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") 0s ago: executing program 9 (id=4043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x200000) kernel console output (not intermixed with test programs): de #2: comm syz.4.3679: Corrupt directory, running e2fsck is recommended [ 576.975041][T17222] ext4: Unknown parameter 'permit_directio' [ 576.992674][ T3383] usb usb20-port1: unable to enumerate USB device [ 577.016520][ T28] audit: type=1400 audit(2000000029.220:2987): avc: denied { write } for pid=17197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.155301][ T28] audit: type=1400 audit(2000000029.260:2988): avc: denied { write } for pid=17211 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.177800][ T28] audit: type=1326 audit(2000000030.030:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.8.3681" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ce83de99 code=0x7ffc0000 [ 577.205052][ T28] audit: type=1326 audit(2000000030.030:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.8.3681" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ce83de99 code=0x7ffc0000 [ 577.231110][ T28] audit: type=1326 audit(2000000030.030:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.8.3681" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ce83de99 code=0x7ffc0000 [ 577.263124][ T28] audit: type=1326 audit(2000000030.030:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.8.3681" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87ce83de99 code=0x7ffc0000 [ 577.416083][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.521111][T17248] FAULT_INJECTION: forcing a failure. [ 577.521111][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 577.533794][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.9.3685 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 577.533892][T17248] Tainted: [W]=WARN [ 577.533899][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.533911][T17248] Call Trace: [ 577.533917][T17248] [ 577.533925][T17248] __dump_stack+0x1d/0x30 [ 577.533947][T17248] dump_stack_lvl+0x95/0xd0 [ 577.533967][T17248] dump_stack+0x15/0x1b [ 577.534034][T17248] should_fail_ex+0x25e/0x270 [ 577.534118][T17248] should_failslab+0x8c/0xb0 [ 577.534141][T17248] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 577.534166][T17248] ? security_inode_alloc+0x37/0x100 [ 577.534215][T17248] ? security_inode_alloc+0x37/0x100 [ 577.534239][T17248] security_inode_alloc+0x37/0x100 [ 577.534262][T17248] inode_init_always_gfp+0x495/0x4e0 [ 577.534365][T17248] ? __pfx_proc_alloc_inode+0x10/0x10 [ 577.534388][T17248] alloc_inode+0x58/0x170 [ 577.534409][T17248] new_inode+0x1d/0xe0 [ 577.534438][T17248] proc_pid_make_inode+0x24/0x200 [ 577.534503][T17248] proc_fdinfo_instantiate+0x34/0x140 [ 577.534620][T17248] proc_fill_cache+0x1a6/0x220 [ 577.534675][T17248] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 577.534712][T17248] proc_readfd_common+0x292/0x3e0 [ 577.534817][T17248] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 577.534900][T17248] proc_fdinfo_iterate+0x24/0x30 [ 577.534932][T17248] iterate_dir+0x109/0x2f0 [ 577.534956][T17248] __se_sys_getdents+0xd2/0x220 [ 577.535015][T17248] ? __pfx_filldir+0x10/0x10 [ 577.535143][T17248] __x64_sys_getdents+0x43/0x50 [ 577.535179][T17248] x64_sys_call+0xea8/0x3020 [ 577.535201][T17248] do_syscall_64+0x136/0x3c0 [ 577.535228][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.535284][T17248] RIP: 0033:0x7fa7b150de99 [ 577.535300][T17248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.535319][T17248] RSP: 002b:00007fa7aff46028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 577.535343][T17248] RAX: ffffffffffffffda RBX: 00007fa7b1796090 RCX: 00007fa7b150de99 [ 577.535419][T17248] RDX: 0000000000001000 RSI: 0000200000001ec0 RDI: 0000000000000007 [ 577.535432][T17248] RBP: 00007fa7aff46090 R08: 0000000000000000 R09: 0000000000000000 [ 577.535446][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.535462][T17248] R13: 00007fa7b1796128 R14: 00007fa7b1796090 R15: 00007fff78ce29f8 [ 577.535484][T17248] [ 577.859038][T17249] loop4: detected capacity change from 0 to 128 [ 577.919137][T17244] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 578.018365][T17244] FAT-fs (loop4): Filesystem has been set read-only [ 579.099285][T17273] FAULT_INJECTION: forcing a failure. [ 579.099285][T17273] name failslab, interval 1, probability 0, space 0, times 0 [ 579.127023][T17272] loop4: detected capacity change from 0 to 1024 [ 579.142532][T17272] EXT4-fs: Ignoring removed nobh option [ 579.156238][T17273] CPU: 0 UID: 0 PID: 17273 Comm: syz.8.3693 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 579.156274][T17273] Tainted: [W]=WARN [ 579.156283][T17273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.156297][T17273] Call Trace: [ 579.156318][T17273] [ 579.156328][T17273] __dump_stack+0x1d/0x30 [ 579.156358][T17273] dump_stack_lvl+0x95/0xd0 [ 579.156378][T17273] dump_stack+0x15/0x1b [ 579.156399][T17273] should_fail_ex+0x25e/0x270 [ 579.156432][T17273] should_failslab+0x8c/0xb0 [ 579.156459][T17273] __kvmalloc_node_noprof+0x15b/0x590 [ 579.156490][T17273] ? traverse+0x9c/0x3b0 [ 579.156580][T17273] ? traverse+0x9c/0x3b0 [ 579.156660][T17273] traverse+0x9c/0x3b0 [ 579.156740][T17273] seq_read_iter+0x7dc/0x8f0 [ 579.156830][T17273] seq_read+0x279/0x2c0 [ 579.156931][T17273] ? __pfx_seq_read+0x10/0x10 [ 579.156958][T17273] proc_reg_read+0x128/0x1c0 [ 579.157037][T17273] ? __pfx_proc_reg_read+0x10/0x10 [ 579.157062][T17273] vfs_readv+0x417/0x6d0 [ 579.157135][T17273] ? __pfx_proc_reg_read+0x10/0x10 [ 579.157171][T17273] __x64_sys_preadv+0xfd/0x1c0 [ 579.157208][T17273] x64_sys_call+0x2915/0x3020 [ 579.157232][T17273] do_syscall_64+0x136/0x3c0 [ 579.157255][T17273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.157308][T17273] RIP: 0033:0x7f87ce83de99 [ 579.157327][T17273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.157351][T17273] RSP: 002b:00007f87cd297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 579.157370][T17273] RAX: ffffffffffffffda RBX: 00007f87ceac5fa0 RCX: 00007f87ce83de99 [ 579.157389][T17273] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000005 [ 579.157406][T17273] RBP: 00007f87cd297090 R08: 0000000020000000 R09: 0000000000000000 [ 579.157449][T17273] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 579.157464][T17273] R13: 00007f87ceac6038 R14: 00007f87ceac5fa0 R15: 00007ffff62927b8 [ 579.157484][T17273] [ 579.363588][T17272] EXT4-fs: Ignoring removed i_version option [ 579.389874][T17268] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3692'. [ 579.407244][T17272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.495584][T17285] netlink: 'syz.8.3698': attribute type 1 has an invalid length. [ 579.513451][T17285] bond4: entered promiscuous mode [ 579.518585][T17285] bond4: entered allmulticast mode [ 579.523753][T17279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 579.538908][T17285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.621321][T17297] loop1: detected capacity change from 0 to 512 [ 579.642586][T17297] EXT4-fs (loop1): 1 truncate cleaned up [ 579.652477][T17297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.721341][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.736414][T17302] loop8: detected capacity change from 0 to 128 [ 579.760855][T17302] EXT4-fs: Ignoring removed orlov option [ 579.772900][T17307] loop4: detected capacity change from 0 to 764 [ 579.794163][T13368] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 579.807104][T13368] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 579.857066][T17302] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 579.874970][T17302] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.905506][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3702'. [ 579.947298][ T8228] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.991468][T17308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.402886][ T3481] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.457008][T17318] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3707'. [ 580.471958][ T3481] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.537866][ T3481] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.597260][T17324] syzkaller0: entered promiscuous mode [ 580.603094][T17324] syzkaller0: entered allmulticast mode [ 580.700668][ T3481] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.922874][ T3481] bridge_slave_1: left allmulticast mode [ 580.957490][ T3481] bridge_slave_1: left promiscuous mode [ 580.981382][ T3481] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.031148][ T3481] bridge_slave_0: left allmulticast mode [ 581.060486][ T3481] bridge_slave_0: left promiscuous mode [ 581.093255][ T3481] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.334651][ T3481] bond0 (unregistering): left promiscuous mode [ 581.358113][ T3481] bond_slave_0: left promiscuous mode [ 581.373310][ T3481] bond_slave_1: left promiscuous mode [ 581.388043][ T3481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.405884][ T3481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.424352][ T3481] bond0 (unregistering): Released all slaves [ 581.438529][ T3481] bond1 (unregistering): (slave veth3): Releasing active interface [ 581.454381][ T3481] dummy0: entered promiscuous mode [ 581.472575][ T3481] bond1 (unregistering): (slave dummy0): Releasing active interface [ 581.486763][ T3481] bond1 (unregistering): Released all slaves [ 581.502398][T17336] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3705'. [ 581.619736][ T3481] batadv0: left promiscuous mode [ 581.633224][ T3481] hsr_slave_0: left promiscuous mode [ 581.645329][ T3481] hsr_slave_1: left promiscuous mode [ 581.657329][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.672427][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.692096][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.702762][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.721119][ T3481] veth1_macvtap: left promiscuous mode [ 581.728351][ T3481] veth0_macvtap: left promiscuous mode [ 581.739989][ T3481] veth1_vlan: left promiscuous mode [ 581.751655][ T3481] veth0_vlan: left promiscuous mode [ 581.872529][ T3481] team0 (unregistering): Port device team_slave_1 removed [ 581.894237][ T3481] team0 (unregistering): Port device team_slave_0 removed [ 581.925461][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 581.925477][ T28] audit: type=1400 audit(2000000034.800:3003): avc: denied { write } for pid=17328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.005513][ T28] audit: type=1400 audit(2000000034.860:3004): avc: denied { write } for pid=17360 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.060853][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 582.095712][T17365] syzkaller0: entered promiscuous mode [ 582.107138][T17365] syzkaller0: entered allmulticast mode [ 582.249845][ T28] audit: type=1400 audit(2000000035.110:3005): avc: denied { write } for pid=17376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.275946][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 582.297942][ T28] audit: type=1400 audit(2000000035.120:3006): avc: denied { write } for pid=17388 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.857514][ T28] audit: type=1400 audit(2000000035.730:3007): avc: denied { write } for pid=17394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.015639][ T28] audit: type=1400 audit(2000000035.890:3008): avc: denied { write } for pid=17418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.286476][T17405] syzkaller0: entered promiscuous mode [ 583.296132][T17405] syzkaller0: entered allmulticast mode [ 583.304009][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 583.355277][T17340] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.363529][T17340] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.434659][T17434] loop2: detected capacity change from 0 to 8192 [ 583.443467][T17340] bridge_slave_0: entered allmulticast mode [ 583.449940][T17340] bridge_slave_0: entered promiscuous mode [ 583.479246][T17436] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3719'. [ 583.491416][T17340] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.506823][T17340] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.525386][T17340] bridge_slave_1: entered allmulticast mode [ 583.536161][T17340] bridge_slave_1: entered promiscuous mode [ 583.600238][T17340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.615590][ T28] audit: type=1400 audit(2000000036.490:3009): avc: denied { write } for pid=17438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.641441][T17340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.681000][ T28] audit: type=1400 audit(2000000036.540:3010): avc: denied { write } for pid=17449 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.716481][T17340] team0: Port device team_slave_0 added [ 583.726254][T17340] team0: Port device team_slave_1 added [ 583.743809][T17340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.751041][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.777431][T17340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.792488][T17340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.799866][T17340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.828584][T17340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.855740][T17340] hsr_slave_0: entered promiscuous mode [ 583.861790][T17340] hsr_slave_1: entered promiscuous mode [ 583.932076][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 583.937787][T13849] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 584.049033][T13849] FAT-fs (loop2): Filesystem has been set read-only [ 586.031352][T17462] loop9: detected capacity change from 0 to 512 [ 586.114467][ T28] audit: type=1400 audit(2000000038.950:3011): avc: denied { write } for pid=17458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.137745][T17462] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 586.166790][T17462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 586.174772][T17462] System zones: 1-12 [ 586.178858][T17462] EXT4-fs (loop9): orphan cleanup on readonly fs [ 586.185400][T17462] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3724: invalid indirect mapped block 12 (level 1) [ 586.198687][T17462] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 586.202197][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 586.217753][ C0] EXT4-fs (loop9): initial error at time 2000000039: ext4_free_branches:1023: inode 11 [ 586.227417][ C0] EXT4-fs (loop9): last error at time 2000000039: ext4_free_branches:1023: inode 11 [ 586.237127][T17462] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3724: invalid indirect mapped block 2 (level 2) [ 586.250349][T17462] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 586.250953][T17462] EXT4-fs (loop9): 1 truncate cleaned up [ 586.266174][T17462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 586.279934][T17462] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3724'. [ 586.412908][T17485] loop4: detected capacity change from 0 to 1024 [ 586.447270][T17485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.515492][ T28] audit: type=1400 audit(2000000039.390:3012): avc: denied { append } for pid=17489 comm="syz.8.3728" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 586.546695][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.547416][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 586.594094][T17340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 586.609458][T17496] loop9: detected capacity change from 0 to 2048 [ 586.621755][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.631603][T17340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 586.635010][T17502] FAULT_INJECTION: forcing a failure. [ 586.635010][T17502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.652525][T17502] CPU: 1 UID: 0 PID: 17502 Comm: syz.4.3727 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 586.652626][T17502] Tainted: [W]=WARN [ 586.652632][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.652705][T17502] Call Trace: [ 586.652712][T17502] [ 586.652721][T17502] __dump_stack+0x1d/0x30 [ 586.652758][T17502] dump_stack_lvl+0x95/0xd0 [ 586.652777][T17502] dump_stack+0x15/0x1b [ 586.652795][T17502] should_fail_ex+0x25e/0x270 [ 586.652835][T17502] should_fail+0xb/0x20 [ 586.652968][T17502] should_fail_usercopy+0x1a/0x20 [ 586.652996][T17502] strncpy_from_user+0x27/0x250 [ 586.653019][T17502] do_getname+0x59/0x1c0 [ 586.653065][T17502] getname_flags+0x1d/0x30 [ 586.653089][T17502] __se_sys_newlstat+0x48/0x3f0 [ 586.653125][T17502] ? mutex_lock+0x57/0x90 [ 586.653161][T17502] ? mutex_unlock+0x4e/0x90 [ 586.653254][T17502] ? fput+0x8f/0xc0 [ 586.653282][T17502] ? ksys_write+0x194/0x1a0 [ 586.653317][T17502] __x64_sys_newlstat+0x31/0x40 [ 586.653341][T17502] x64_sys_call+0x1b8c/0x3020 [ 586.653427][T17502] do_syscall_64+0x136/0x3c0 [ 586.653448][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.653469][T17502] RIP: 0033:0x7fb62bfede99 [ 586.653487][T17502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.653520][T17502] RSP: 002b:00007fb62aa47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 586.653541][T17502] RAX: ffffffffffffffda RBX: 00007fb62c275fa0 RCX: 00007fb62bfede99 [ 586.653627][T17502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 586.653639][T17502] RBP: 00007fb62aa47090 R08: 0000000000000000 R09: 0000000000000000 [ 586.653652][T17502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.653664][T17502] R13: 00007fb62c276038 R14: 00007fb62c275fa0 R15: 00007ffdf7ae7a78 [ 586.653683][T17502] [ 586.867502][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.877879][T17340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 586.888205][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.896232][T17340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 586.946537][T17340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.957780][T17496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.971864][T17496] EXT4-fs error (device loop9): __ext4_add_entry:2412: inode #2: comm syz.9.3729: Directory hole found for htree leaf block 0 [ 586.986700][T17496] EXT4-fs error (device loop9): __ext4_add_entry:2412: inode #2: comm syz.9.3729: Directory hole found for htree leaf block 0 [ 587.007002][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 587.007018][ T28] audit: type=1400 audit(2000000039.880:3014): avc: denied { write } for pid=17493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.023594][T17521] syzkaller0: entered promiscuous mode [ 587.023741][T17521] syzkaller0: entered allmulticast mode [ 587.138182][T17533] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.147936][ T28] audit: type=1400 audit(2000000040.000:3015): avc: denied { write } for pid=17531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.257613][T17340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.358160][T17340] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.407495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.414621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.454736][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.489666][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.496900][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.537971][T17340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 587.576142][T17340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.604489][ T28] audit: type=1400 audit(2000000040.470:3016): avc: denied { write } for pid=17536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.741831][ T28] audit: type=1400 audit(2000000040.610:3017): avc: denied { write } for pid=17548 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.918453][T17340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.998042][T17572] loop9: detected capacity change from 0 to 128 [ 588.030875][T17572] EXT4-fs: Ignoring removed orlov option [ 588.047575][ T28] audit: type=1400 audit(2000000040.920:3018): avc: denied { write } for pid=17559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.079434][T17572] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 588.100335][ T28] audit: type=1400 audit(2000000040.970:3019): avc: denied { write } for pid=17583 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.135711][T17572] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.149976][T17520] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3733'. [ 588.187385][T17340] veth0_vlan: entered promiscuous mode [ 588.201711][T17340] veth1_vlan: entered promiscuous mode [ 588.237420][T17340] veth0_macvtap: entered promiscuous mode [ 588.254554][T17340] veth1_macvtap: entered promiscuous mode [ 588.280276][T17340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.303144][T17340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.310743][ T28] audit: type=1400 audit(2000000041.170:3020): avc: denied { write } for pid=17586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.346803][ T360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.362333][ T360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.381304][ T28] audit: type=1400 audit(2000000041.250:3021): avc: denied { write } for pid=17597 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.481165][ T28] audit: type=1400 audit(2000000041.350:3022): avc: denied { write } for pid=17599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.530460][ T28] audit: type=1400 audit(2000000041.400:3023): avc: denied { write } for pid=17610 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 588.573502][ T360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.594773][ T360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.649279][T13127] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 588.682719][T17622] 9pnet_fd: Insufficient options for proto=fd [ 588.690442][T17622] loop3: detected capacity change from 0 to 256 [ 588.721428][T17626] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 588.727984][T17626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 588.791933][T17626] vhci_hcd vhci_hcd.0: Device attached [ 588.818523][T17627] vhci_hcd: connection closed [ 588.818735][ T360] vhci_hcd vhci_hcd.4: stop threads [ 588.818756][ T360] vhci_hcd vhci_hcd.4: release socket [ 588.818772][ T360] vhci_hcd vhci_hcd.4: disconnect device [ 589.077639][T17688] loop3: detected capacity change from 0 to 128 [ 589.102304][T17688] EXT4-fs: Ignoring removed orlov option [ 589.111961][T17688] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.126547][T17688] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.186573][T17340] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.373588][T17706] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3746'. [ 589.465392][T17743] loop2: detected capacity change from 0 to 512 [ 589.472423][T17743] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 589.484756][T17728] loop3: detected capacity change from 0 to 512 [ 589.547136][T17743] lo speed is unknown, defaulting to 1000 [ 589.553523][T17743] lo speed is unknown, defaulting to 1000 [ 589.559597][T17743] lo speed is unknown, defaulting to 1000 [ 589.583715][T17728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.599789][T17743] infiniband sz1: set down [ 589.604499][T17743] infiniband sz1: added lo [ 589.616878][T17743] RDS/IB: sz1: added [ 589.620964][T17743] smc: adding ib device sz1 with port count 1 [ 589.626890][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 589.627208][T17743] smc: ib device sz1 port 1 has no pnetid [ 589.627561][T17743] lo speed is unknown, defaulting to 1000 [ 589.656445][T17753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.665792][T17753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.675979][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.700242][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.708758][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.717753][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.726081][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.734545][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.734757][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.734915][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.735058][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.735192][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.735357][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.735505][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.735568][T17753] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 589.735748][T17753] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 589.736137][T17749] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3753'. [ 589.803980][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3754'. [ 589.809841][T17749] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3753'. [ 589.845614][T17754] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3753'. [ 589.845637][T17754] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3753'. [ 589.845689][ T3384] lo speed is unknown, defaulting to 1000 [ 589.845720][ T3360] lo speed is unknown, defaulting to 1000 [ 589.845748][T17743] lo speed is unknown, defaulting to 1000 [ 589.877569][T17743] lo speed is unknown, defaulting to 1000 [ 589.888041][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.919721][T17757] loop9: detected capacity change from 0 to 512 [ 589.922445][T17743] lo speed is unknown, defaulting to 1000 [ 589.927217][T17757] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 589.947964][T17757] EXT4-fs (loop9): 1 truncate cleaned up [ 589.954776][T17757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.961646][T17743] lo speed is unknown, defaulting to 1000 [ 590.047332][T17768] loop3: detected capacity change from 0 to 512 [ 590.053961][T17768] vfat: Unknown parameter 'ÿÿ¥•£u›‰YÄ›ø³q¶åw¢®á]bÎik‘tõÛ [ 590.053961][T17768] 2³Ú ôñ5èÓžˆÒBK-¯æ—' [ 590.080973][T17770] netlink: 'syz.8.3756': attribute type 21 has an invalid length. [ 590.093472][T17768] rdma_rxe: rxe_newlink: failed to add lo [ 590.100712][T17768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.109270][T17768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.283559][T17757] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.325798][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3759'. [ 590.551889][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3758'. [ 590.658085][T17814] loop9: detected capacity change from 0 to 512 [ 590.668909][T17814] EXT4-fs: Ignoring removed i_version option [ 590.675626][T17814] EXT4-fs: Ignoring removed bh option [ 592.055074][T17814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.069184][T17814] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 592.100718][T17814] ªªªªªª: renamed from vlan0 (while UP) [ 592.491229][T17831] netlink: 'syz.3.3762': attribute type 3 has an invalid length. [ 592.538160][T17821] loop4: detected capacity change from 0 to 512 [ 592.614783][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.652472][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 592.652488][ T28] audit: type=1400 audit(2000000045.530:3211): avc: denied { write } for pid=17818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.717209][ T28] audit: type=1400 audit(2000000045.590:3212): avc: denied { write } for pid=17851 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.741181][T17833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27861 sclass=netlink_route_socket pid=17833 comm=syz.2.3761 [ 592.764522][T17833] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3761'. [ 592.774163][T17821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.801360][T17850] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.821905][T17821] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.861906][T17859] loop9: detected capacity change from 0 to 8192 [ 592.885299][ T28] audit: type=1400 audit(2000000045.760:3213): avc: denied { write } for pid=17861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.932319][ T28] audit: type=1400 audit(2000000045.800:3214): avc: denied { write } for pid=17874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.959718][T17847] loop8: detected capacity change from 0 to 512 [ 592.995709][T17859] loop9: p1 p2 p3 p4 [ 593.012514][T17859] loop9: p2 start 201326592 is beyond EOD, truncated [ 593.035409][T17859] loop9: p3 start 36132 is beyond EOD, truncated [ 593.041807][T17859] loop9: p4 start 167772160 is beyond EOD, truncated [ 593.097117][T17847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 593.114248][T17847] ext4 filesystem being mounted at /504/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.122113][T17883] GUP no longer grows the stack in syz.2.3768 (17883): 200000004000-20000000a000 (200000002000) [ 593.135356][T17883] CPU: 0 UID: 0 PID: 17883 Comm: syz.2.3768 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 593.135462][T17883] Tainted: [W]=WARN [ 593.135471][T17883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 593.135487][T17883] Call Trace: [ 593.135494][T17883] [ 593.135504][T17883] __dump_stack+0x1d/0x30 [ 593.135533][T17883] dump_stack_lvl+0x95/0xd0 [ 593.135578][T17883] dump_stack+0x15/0x1b [ 593.135598][T17883] __get_user_pages+0x1b27/0x1f10 [ 593.135669][T17883] ? try_grab_folio_fast+0x49e/0x580 [ 593.135693][T17883] ? gup_fast_folio_allowed+0x107/0x190 [ 593.135716][T17883] ? __rcu_read_unlock+0x4e/0x70 [ 593.135748][T17883] __gup_longterm_locked+0x2e9/0xe30 [ 593.135834][T17883] gup_fast_fallback+0x312/0x5c0 [ 593.135942][T17883] ? __kvmalloc_node_noprof+0x3eb/0x590 [ 593.135973][T17883] pin_user_pages_fast+0x5f/0x90 [ 593.136119][T17883] io_pin_pages+0xc7/0x170 [ 593.136212][T17883] io_region_pin_pages+0x58/0xf0 [ 593.136247][T17883] io_create_region+0x2b2/0x320 [ 593.136362][T17883] io_allocate_scq_urings+0x114/0x3d0 [ 593.136434][T17883] io_uring_create+0x2ec/0x4f0 [ 593.136469][T17883] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 593.136502][T17883] __x64_sys_io_uring_setup+0x31/0x40 [ 593.136536][T17883] x64_sys_call+0x2962/0x3020 [ 593.136581][T17883] do_syscall_64+0x136/0x3c0 [ 593.136608][T17883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.136670][T17883] RIP: 0033:0x7fe734a7de99 [ 593.136689][T17883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.136709][T17883] RSP: 002b:00007fe7334d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 593.136782][T17883] RAX: ffffffffffffffda RBX: 00007fe734d05fa0 RCX: 00007fe734a7de99 [ 593.136801][T17883] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000899 [ 593.136819][T17883] RBP: 00007fe734b13eaf R08: 0000000000000000 R09: 0000000000000000 [ 593.136835][T17883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.136852][T17883] R13: 00007fe734d06038 R14: 00007fe734d05fa0 R15: 00007ffc4a8c8448 [ 593.136874][T17883] [ 593.137025][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.143256][ T28] audit: type=1326 audit(2000000045.980:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.2.3768" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734a7de99 code=0x7ffc0000 [ 593.228615][T17884] usb usb5: usbfs: process 17884 (syz.8.3766) did not claim interface 0 before use [ 593.232161][ T28] audit: type=1326 audit(2000000045.980:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.2.3768" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734a7de99 code=0x7ffc0000 [ 593.348094][T17886] netlink: 'syz.2.3770': attribute type 11 has an invalid length. [ 593.349520][ T28] audit: type=1326 audit(2000000045.980:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.2.3768" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734a7de99 code=0x7ffc0000 [ 593.452246][ T28] audit: type=1326 audit(2000000045.980:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.2.3768" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734a7de99 code=0x7ffc0000 [ 593.477934][ T28] audit: type=1326 audit(2000000045.980:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.2.3768" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe734a7de99 code=0x7ffc0000 [ 593.508009][ T28] audit: type=1326 audit(2000000046.030:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.2.3768" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe734a7de99 code=0x7ffc0000 [ 593.586265][T17893] FAULT_INJECTION: forcing a failure. [ 593.586265][T17893] name failslab, interval 1, probability 0, space 0, times 0 [ 593.599105][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz.3.3772 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 593.599141][T17893] Tainted: [W]=WARN [ 593.599150][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 593.599184][T17893] Call Trace: [ 593.599192][T17893] [ 593.599200][T17893] __dump_stack+0x1d/0x30 [ 593.599292][T17893] dump_stack_lvl+0x95/0xd0 [ 593.599316][T17893] dump_stack+0x15/0x1b [ 593.599418][T17893] should_fail_ex+0x25e/0x270 [ 593.599454][T17893] should_failslab+0x8c/0xb0 [ 593.599481][T17893] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 593.599505][T17893] ? __kernfs_new_node+0x70/0x440 [ 593.599648][T17893] ? __kernfs_new_node+0x70/0x440 [ 593.599682][T17893] __kernfs_new_node+0x70/0x440 [ 593.599703][T17893] ? __rcu_read_unlock+0x4e/0x70 [ 593.599730][T17893] ? up_write+0x18/0x60 [ 593.599759][T17893] ? kernfs_activate+0x210/0x220 [ 593.599806][T17893] ? kernfs_add_one+0x208/0x290 [ 593.599852][T17893] kernfs_new_node+0xcf/0xf0 [ 593.599876][T17893] __kernfs_create_file+0x4b/0x180 [ 593.599938][T17893] ? __pfx_dev_attr_show+0x10/0x10 [ 593.599961][T17893] ? __pfx_dev_attr_store+0x10/0x10 [ 593.599981][T17893] sysfs_add_file_mode_ns+0x132/0x1b0 [ 593.600014][T17893] sysfs_create_file_ns+0xd9/0x120 [ 593.600061][T17893] device_create_file+0xa5/0x110 [ 593.600103][T17893] device_add+0x32e/0x790 [ 593.600191][T17893] wakeup_source_sysfs_add+0x15a/0x1d0 [ 593.600224][T17893] wakeup_source_register+0xfd/0x240 [ 593.600341][T17893] ep_insert+0x851/0xd80 [ 593.600378][T17893] do_epoll_ctl_file+0x645/0x700 [ 593.600474][T17893] __se_sys_epoll_ctl+0xf1/0x190 [ 593.600544][T17893] __x64_sys_epoll_ctl+0x55/0x70 [ 593.600651][T17893] x64_sys_call+0x2a8b/0x3020 [ 593.600679][T17893] do_syscall_64+0x136/0x3c0 [ 593.600700][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.600757][T17893] RIP: 0033:0x7fcf0019de99 [ 593.600775][T17893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.600793][T17893] RSP: 002b:00007fcefebf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 593.600813][T17893] RAX: ffffffffffffffda RBX: 00007fcf00425fa0 RCX: 00007fcf0019de99 [ 593.600830][T17893] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 593.600845][T17893] RBP: 00007fcefebf7090 R08: 0000000000000000 R09: 0000000000000000 [ 593.600939][T17893] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 593.601029][T17893] R13: 00007fcf00426038 R14: 00007fcf00425fa0 R15: 00007ffec8714a88 [ 593.601051][T17893] [ 594.423456][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 594.473403][T17910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27861 sclass=netlink_route_socket pid=17910 comm=syz.9.3778 [ 594.488078][T17910] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3778'. [ 595.463816][T17921] loop4: detected capacity change from 0 to 128 [ 595.560441][T17921] EXT4-fs: Ignoring removed orlov option [ 597.412843][T17921] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.444588][T17921] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.661021][T16579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.722023][T17943] loop4: detected capacity change from 0 to 512 [ 597.755433][T17943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.790827][T17943] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 597.819492][T17937] loop8: detected capacity change from 0 to 512 [ 597.935232][T17937] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 597.951187][T17937] ext4 filesystem being mounted at /507/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.975659][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.028250][T17937] usb usb5: usbfs: process 17937 (syz.8.3784) did not claim interface 0 before use [ 598.091248][T17961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27861 sclass=netlink_route_socket pid=17961 comm=syz.2.3789 [ 598.115283][T17961] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3789'. [ 598.138470][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 598.708449][T17984] syzkaller0: entered promiscuous mode [ 598.726823][T17984] syzkaller0: entered allmulticast mode [ 598.746647][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 598.746661][ T28] audit: type=1400 audit(2000000051.620:3258): avc: denied { write } for pid=17977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.906234][ T28] audit: type=1400 audit(2000000051.730:3259): avc: denied { write } for pid=17992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.592028][ T28] audit: type=1400 audit(2000000052.460:3260): avc: denied { setopt } for pid=18010 comm="syz.4.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 599.649712][T18012] bridge0: port 3(macvlan2) entered blocking state [ 599.676237][T18012] bridge0: port 3(macvlan2) entered disabled state [ 599.707867][T18012] macvlan2: entered allmulticast mode [ 599.736782][T18012] ip6gretap0: entered allmulticast mode [ 599.754218][T18012] macvlan2: entered promiscuous mode [ 599.770555][ T28] audit: type=1400 audit(2000000052.640:3261): avc: denied { write } for pid=18008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.798851][T18012] bridge0: port 3(macvlan2) entered blocking state [ 599.805469][T18012] bridge0: port 3(macvlan2) entered forwarding state [ 599.826624][T18023] loop3: detected capacity change from 0 to 512 [ 599.887812][T18023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 599.920799][ T28] audit: type=1400 audit(2000000052.790:3262): avc: denied { write } for pid=18024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.964002][T18023] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.988997][T18035] loop4: detected capacity change from 0 to 128 [ 600.012753][T18039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54528 sclass=netlink_route_socket pid=18039 comm=syz.9.3802 [ 600.024366][T18035] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 600.051664][T18029] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3802'. [ 600.084050][T18017] usb usb5: usbfs: process 18017 (syz.3.3801) did not claim interface 0 before use [ 600.098669][T18035] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 600.240316][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 600.255690][ T4133] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 600.441140][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3808'. [ 600.483632][T18059] loop3: detected capacity change from 0 to 512 [ 600.517848][T18059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 600.533043][T18059] EXT4-fs (loop3): 1 truncate cleaned up [ 600.539518][T18059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.821833][T18063] loop4: detected capacity change from 0 to 128 [ 600.844041][T18063] EXT4-fs: Ignoring removed orlov option [ 600.852606][T18063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.865172][T18063] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.912771][T16579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.923372][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.092554][T18076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54528 sclass=netlink_route_socket pid=18076 comm=syz.9.3815 [ 601.211343][T18094] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3815'. [ 601.401259][T18100] loop8: detected capacity change from 0 to 512 [ 601.402732][ T28] audit: type=1400 audit(2000000054.280:3263): avc: denied { write } for pid=18077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.513319][T18100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 601.551185][ T28] audit: type=1400 audit(2000000054.420:3264): avc: denied { write } for pid=18105 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.581602][T18100] ext4 filesystem being mounted at /512/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.646830][T18096] usb usb5: usbfs: process 18096 (syz.8.3817) did not claim interface 0 before use [ 602.070138][T18026] loop2: detected capacity change from 0 to 256 [ 602.138199][T18026] FAT-fs (loop2): codepage cp950 not found [ 602.162871][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 602.201436][T18114] loop9: detected capacity change from 0 to 1024 [ 602.231880][T18114] EXT4-fs: Ignoring removed bh option [ 602.240032][T18114] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 602.276849][T18114] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.294940][T18114] dns_resolver: Unsupported server list version (0) [ 602.444277][ T28] audit: type=1400 audit(2000000055.320:3265): avc: denied { write } for pid=18119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.491463][ T28] audit: type=1400 audit(2000000055.360:3266): avc: denied { write } for pid=18137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.751287][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.777495][T18145] loop4: detected capacity change from 0 to 128 [ 602.820553][T18145] EXT4-fs: Ignoring removed orlov option [ 602.845930][T18145] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 602.858242][T18145] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.858362][T18147] loop9: detected capacity change from 0 to 1024 [ 602.888507][T18147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 602.896697][T18147] System zones: 0-1, 3-36 [ 602.897680][T16579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 602.901451][T18147] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3822: bad orphan inode 134217728 [ 602.920573][T18147] loop9: lost filesystem error report for type 5 error -117 [ 602.923262][T18147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.105713][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3828'. [ 603.142603][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.170782][T18165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54528 sclass=netlink_route_socket pid=18165 comm=syz.3.3829 [ 603.209448][T18165] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3829'. [ 603.214635][T18166] loop8: detected capacity change from 0 to 512 [ 603.249615][T18175] FAULT_INJECTION: forcing a failure. [ 603.249615][T18175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.273134][T18175] CPU: 0 UID: 0 PID: 18175 Comm: syz.4.3832 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 603.273210][T18175] Tainted: [W]=WARN [ 603.273218][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.273232][T18175] Call Trace: [ 603.273240][T18175] [ 603.273250][T18175] __dump_stack+0x1d/0x30 [ 603.273274][T18175] dump_stack_lvl+0x95/0xd0 [ 603.273296][T18175] dump_stack+0x15/0x1b [ 603.273314][T18175] should_fail_ex+0x25e/0x270 [ 603.273343][T18175] should_fail+0xb/0x20 [ 603.273409][T18175] should_fail_usercopy+0x1a/0x20 [ 603.273489][T18175] _copy_from_user+0x1c/0xb0 [ 603.273582][T18175] kstrtouint_from_user+0x69/0xf0 [ 603.273659][T18175] ? 0xffffffff81000000 [ 603.273673][T18175] ? avc_policy_seqno+0x15/0x30 [ 603.273697][T18175] proc_fail_nth_write+0x50/0x160 [ 603.273724][T18175] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 603.273786][T18175] vfs_write+0x252/0x990 [ 603.273806][T18175] ? __fget_files+0x184/0x1c0 [ 603.273908][T18175] ? mutex_lock+0x57/0x90 [ 603.273940][T18175] ksys_write+0xdc/0x1a0 [ 603.273964][T18175] __x64_sys_write+0x40/0x50 [ 603.273982][T18175] x64_sys_call+0x27e1/0x3020 [ 603.274006][T18175] do_syscall_64+0x136/0x3c0 [ 603.274031][T18175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.274057][T18175] RIP: 0033:0x7fb62bfae6ce [ 603.274075][T18175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.274103][T18175] RSP: 002b:00007fb62aa46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.274126][T18175] RAX: ffffffffffffffda RBX: 00007fb62aa476c0 RCX: 00007fb62bfae6ce [ 603.274143][T18175] RDX: 0000000000000001 RSI: 00007fb62aa470a0 RDI: 0000000000000004 [ 603.274240][T18175] RBP: 00007fb62aa47090 R08: 0000000000000000 R09: 0000000000000000 [ 603.274252][T18175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.274266][T18175] R13: 00007fb62c276038 R14: 00007fb62c275fa0 R15: 00007ffdf7ae7a78 [ 603.274285][T18175] [ 603.511921][T18185] IPv6: NLM_F_REPLACE set, but no existing node found! [ 603.522012][T18185] loop3: detected capacity change from 0 to 512 [ 603.528798][T18166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 603.542923][T18166] ext4 filesystem being mounted at /516/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.544977][T18185] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3835: inode has both inline data and extents flags [ 603.587872][T18166] usb usb5: usbfs: process 18166 (syz.8.3830) did not claim interface 0 before use [ 603.596167][T18185] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 603.597954][T18185] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3835: couldn't read orphan inode 15 (err -117) [ 603.607145][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 603.607168][ C1] EXT4-fs (loop3): initial error at time 2000000056: ext4_orphan_get:1399: inode 15 [ 603.607222][ C1] EXT4-fs (loop3): last error at time 2000000056: ext4_orphan_get:1399: inode 15 [ 603.645169][T18185] loop3: lost filesystem error report for type 5 error -117 [ 603.646721][T18185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.686954][T18185] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3835'. [ 603.711035][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 603.722792][T18196] lo speed is unknown, defaulting to 1000 [ 603.754396][T18198] FAULT_INJECTION: forcing a failure. [ 603.754396][T18198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.767847][T18198] CPU: 0 UID: 0 PID: 18198 Comm: syz.8.3839 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 603.767881][T18198] Tainted: [W]=WARN [ 603.767889][T18198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.767902][T18198] Call Trace: [ 603.767909][T18198] [ 603.767917][T18198] __dump_stack+0x1d/0x30 [ 603.767941][T18198] dump_stack_lvl+0x95/0xd0 [ 603.767961][T18198] dump_stack+0x15/0x1b [ 603.767979][T18198] should_fail_ex+0x25e/0x270 [ 603.768011][T18198] should_fail+0xb/0x20 [ 603.768068][T18198] should_fail_usercopy+0x1a/0x20 [ 603.768114][T18198] _copy_to_user+0x20/0xa0 [ 603.768135][T18198] simple_read_from_buffer+0xb5/0x130 [ 603.768161][T18198] proc_fail_nth_read+0x10e/0x150 [ 603.768228][T18198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.768249][T18198] vfs_read+0x18e/0x7c0 [ 603.768280][T18198] ? __rcu_read_unlock+0x4e/0x70 [ 603.768309][T18198] ? __fget_files+0x184/0x1c0 [ 603.768377][T18198] ? mutex_lock+0x57/0x90 [ 603.768404][T18198] ksys_read+0xdc/0x1a0 [ 603.768424][T18198] __x64_sys_read+0x40/0x50 [ 603.768504][T18198] x64_sys_call+0x2886/0x3020 [ 603.768526][T18198] do_syscall_64+0x136/0x3c0 [ 603.768616][T18198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.768636][T18198] RIP: 0033:0x7f87ce7fe6ce [ 603.768653][T18198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.768675][T18198] RSP: 002b:00007f87cd296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.768697][T18198] RAX: ffffffffffffffda RBX: 00007f87cd2976c0 RCX: 00007f87ce7fe6ce [ 603.768764][T18198] RDX: 000000000000000f RSI: 00007f87cd2970a0 RDI: 0000000000000003 [ 603.768778][T18198] RBP: 00007f87cd297090 R08: 0000000000000000 R09: 0000000000000000 [ 603.768790][T18198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.768802][T18198] R13: 00007f87ceac6038 R14: 00007f87ceac5fa0 R15: 00007ffff62927b8 [ 603.768823][T18198] [ 604.004233][T18206] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3842'. [ 604.013896][T18204] loop8: detected capacity change from 0 to 512 [ 604.032436][T18204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.045399][T18204] ext4 filesystem being mounted at /518/blkio.bfq.io_service_bytes_recursive supports timestamps until 2038-01-19 (0x7fffffff) [ 604.064113][T18206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 604.067137][T18204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.079072][T18206] System zones: 0-1, 3-36 [ 604.095894][T18206] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3842: bad orphan inode 134217728 [ 604.114838][T18214] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3843'. [ 604.122399][T18206] loop9: lost filesystem error report for type 5 error -117 [ 604.126227][T18206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.156092][T18202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.163632][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.173833][ T4799] lo speed is unknown, defaulting to 1000 [ 604.185622][ T4799] sz1: Port: 1 Link ACTIVE [ 604.216166][T18216] cgroup: Unknown subsys name 'smackfstransmute' [ 604.228713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.235822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.253431][T11193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.272973][ T35] lo speed is unknown, defaulting to 1000 [ 604.286954][ T28] audit: type=1400 audit(2000000057.160:3267): avc: denied { setattr } for pid=18221 comm="syz.8.3846" name="SCTP" dev="sockfs" ino=54723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 604.380930][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.391200][T18216] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.411456][ T28] audit: type=1400 audit(2000000057.250:3268): avc: denied { mounton } for pid=18226 comm="syz.4.3848" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 604.532213][T18216] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.562795][T18236] netlink: 'syz.8.3849': attribute type 29 has an invalid length. [ 604.625564][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 604.705017][T18245] msdos: Unknown parameter 'nodot' [ 604.746023][T18216] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.935953][T18216] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.029327][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.044157][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.068379][ T3481] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.076589][ T3481] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.190398][T18251] FAULT_INJECTION: forcing a failure. [ 605.190398][T18251] name failslab, interval 1, probability 0, space 0, times 0 [ 605.203327][T18251] CPU: 0 UID: 0 PID: 18251 Comm: syz.2.3855 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 605.203360][T18251] Tainted: [W]=WARN [ 605.203366][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.203377][T18251] Call Trace: [ 605.203383][T18251] [ 605.203391][T18251] __dump_stack+0x1d/0x30 [ 605.203415][T18251] dump_stack_lvl+0x95/0xd0 [ 605.203434][T18251] dump_stack+0x15/0x1b [ 605.203450][T18251] should_fail_ex+0x25e/0x270 [ 605.203479][T18251] should_failslab+0x8c/0xb0 [ 605.203502][T18251] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 605.203529][T18251] ? __d_alloc+0x34/0x320 [ 605.203553][T18251] ? __d_alloc+0x34/0x320 [ 605.203578][T18251] __d_alloc+0x34/0x320 [ 605.203606][T18251] ? d_alloc_pseudo+0x13/0x80 [ 605.203637][T18251] d_alloc_pseudo+0x1e/0x80 [ 605.203668][T18251] alloc_path_pseudo+0xa4/0x140 [ 605.203697][T18251] alloc_file_pseudo+0x55/0x120 [ 605.203722][T18251] __shmem_file_setup+0x226/0x260 [ 605.203748][T18251] shmem_zero_setup+0x66/0xe0 [ 605.203768][T18251] mmap_region+0x18c0/0x20c0 [ 605.203810][T18251] do_mmap+0x970/0xbc0 [ 605.203838][T18251] vm_mmap_pgoff+0x183/0x2d0 [ 605.203858][T18251] ksys_mmap_pgoff+0xc1/0x310 [ 605.203879][T18251] ? __x64_sys_mmap+0x49/0x70 [ 605.203905][T18251] x64_sys_call+0x14df/0x3020 [ 605.203930][T18251] do_syscall_64+0x136/0x3c0 [ 605.203955][T18251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.203977][T18251] RIP: 0033:0x7fe734a7de99 [ 605.204003][T18251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.204024][T18251] RSP: 002b:00007fe7334d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 605.204046][T18251] RAX: ffffffffffffffda RBX: 00007fe734d05fa0 RCX: 00007fe734a7de99 [ 605.204062][T18251] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 605.204076][T18251] RBP: 00007fe7334d7090 R08: ffffffffffffffff R09: 0000000017440000 [ 605.204089][T18251] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 605.204104][T18251] R13: 00007fe734d06038 R14: 00007fe734d05fa0 R15: 00007ffc4a8c8448 [ 605.204121][T18251] [ 606.346960][T18266] set_capacity_and_notify: 2 callbacks suppressed [ 606.346975][T18266] loop4: detected capacity change from 0 to 256 [ 606.367825][T18266] FAT-fs (loop4): Directory bread(block 1285) failed [ 606.372948][T18259] loop8: detected capacity change from 0 to 512 [ 606.374655][T18266] FAT-fs (loop4): Directory bread(block 1286) failed [ 606.387703][T18266] FAT-fs (loop4): Directory bread(block 1287) failed [ 606.394480][T18266] FAT-fs (loop4): Directory bread(block 1288) failed [ 606.404786][T18259] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3858: inode has both inline data and extents flags [ 606.404883][T18266] FAT-fs (loop4): Directory bread(block 1285) failed [ 606.404933][T18266] FAT-fs (loop4): Directory bread(block 1286) failed [ 606.418121][T18259] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 606.418665][T18259] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3858: couldn't read orphan inode 15 (err -117) [ 606.418695][T18259] loop8: lost filesystem error report for type 5 error -117 [ 606.419208][T18259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.422694][T18259] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3858'. [ 606.426358][T18266] FAT-fs (loop4): Directory bread(block 1287) failed [ 606.493748][T18266] FAT-fs (loop4): Directory bread(block 1288) failed [ 606.500968][T18266] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 606.589879][ T28] audit: type=1400 audit(2000000059.460:3269): avc: denied { setattr } for pid=18274 comm="syz.4.3864" name="NFC_RAW" dev="sockfs" ino=55647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 606.613086][T18278] loop3: detected capacity change from 0 to 256 [ 606.653127][ T28] audit: type=1400 audit(2000000059.460:3270): avc: denied { accept } for pid=18274 comm="syz.4.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 606.674004][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3866'. [ 606.686872][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.736465][T18288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.751560][T18288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.524472][T18296] loop8: detected capacity change from 0 to 764 [ 608.678394][T18316] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 608.702284][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.842028][T18322] syzkaller1: entered promiscuous mode [ 608.899098][T18326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=18326 comm=syz.4.3876 [ 608.915315][T18322] syzkaller1: entered allmulticast mode [ 608.990747][T18336] loop3: detected capacity change from 0 to 2048 [ 609.004789][T18336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.063154][T18335] IPv6: NLM_F_REPLACE set, but no existing node found! [ 609.072916][T18335] loop2: detected capacity change from 0 to 512 [ 609.137129][T18352] FAULT_INJECTION: forcing a failure. [ 609.137129][T18352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 609.150960][T18352] CPU: 1 UID: 0 PID: 18352 Comm: syz.9.3886 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 609.150998][T18352] Tainted: [W]=WARN [ 609.151007][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.151025][T18352] Call Trace: [ 609.151033][T18352] [ 609.151066][T18352] __dump_stack+0x1d/0x30 [ 609.151124][T18352] dump_stack_lvl+0x95/0xd0 [ 609.151143][T18352] dump_stack+0x15/0x1b [ 609.151161][T18352] should_fail_ex+0x25e/0x270 [ 609.151192][T18352] should_fail_alloc_page+0xf2/0x100 [ 609.151215][T18352] __alloc_frozen_pages_noprof+0x108/0x350 [ 609.151284][T18352] alloc_pages_mpol+0xa9/0x1d0 [ 609.151311][T18352] alloc_pages_noprof+0x8f/0x140 [ 609.151419][T18352] pte_alloc_one+0x1c/0xc0 [ 609.151453][T18352] __pte_alloc+0x32/0x2a0 [ 609.151477][T18352] handle_mm_fault+0x22f6/0x2da0 [ 609.151513][T18352] do_user_addr_fault+0x634/0x1060 [ 609.151575][T18352] ? irqentry_exit+0x40/0x610 [ 609.151685][T18352] ? trace_page_fault_user+0x1f/0xa0 [ 609.151712][T18352] exc_page_fault+0x62/0xa0 [ 609.151739][T18352] asm_exc_page_fault+0x26/0x30 [ 609.151830][T18352] RIP: 0033:0x7fa7b13c5123 [ 609.151849][T18352] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 609.151870][T18352] RSP: 002b:00007fa7aff66470 EFLAGS: 00010206 [ 609.151889][T18352] RAX: 0000000000000000 RBX: 00007fa7aff66530 RCX: 00007fa7a7b47000 [ 609.151905][T18352] RDX: 00007fa7aff666d0 RSI: 000000000000000f RDI: 00007fa7aff665d0 [ 609.151978][T18352] RBP: 0000000000000000 R08: 0000000000000009 R09: 00000000000001cc [ 609.151993][T18352] R10: 00000000000001de R11: 00007fa7aff66530 R12: 000000000000011e [ 609.152008][T18352] R13: 00007fa7b15c3e00 R14: 0000000000000060 R15: 00007fa7aff665d0 [ 609.152028][T18352] [ 609.152116][T18352] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 609.351713][T18335] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3879: inode has both inline data and extents flags [ 609.410613][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.419169][T18352] loop9: detected capacity change from 0 to 512 [ 609.445409][T18359] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 609.447537][T18335] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 609.456609][T18335] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3879: couldn't read orphan inode 15 (err -117) [ 609.465806][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 609.465828][ C1] EXT4-fs (loop2): initial error at time 2000000062: ext4_orphan_get:1399: inode 15 [ 609.465856][ C1] EXT4-fs (loop2): last error at time 2000000062: ext4_orphan_get:1399: inode 15 [ 609.530680][T18352] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 609.557767][T18335] loop2: lost filesystem error report for type 5 error -117 [ 609.562699][T18335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.597646][T18335] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3879'. [ 609.658917][T18373] loop4: detected capacity change from 0 to 256 [ 609.713683][T18373] loop4: detected capacity change from 0 to 512 [ 609.735456][T18373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.748908][T18373] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.787808][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.921305][T13849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.960133][ T28] audit: type=1400 audit(2000000062.830:3271): avc: denied { ioctl } for pid=18390 comm="syz.2.3897" path="socket:[55122]" dev="sockfs" ino=55122 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 610.717265][ T28] audit: type=1400 audit(2000000063.490:3272): avc: denied { unlink } for pid=8228 comm="syz-executor" name="file0" dev="tmpfs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 611.144143][T18487] loop9: detected capacity change from 0 to 512 [ 611.160219][T18487] EXT4-fs (loop9): 1 orphan inode deleted [ 611.175483][T18487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.358834][T18461] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 611.387961][T18461] EXT4-fs (loop3): orphan cleanup on readonly fs [ 611.397027][T18461] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 611.408678][T18461] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 611.429999][T18461] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 611.438534][T18461] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.3902: inode has both inline data and extents flags [ 611.453128][T18461] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.454363][T18461] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3902: couldn't read orphan inode 16 (err -117) [ 611.463753][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 611.463801][ C0] EXT4-fs (loop3): initial error at time 2000000064: ext4_orphan_get:1399: inode 16 [ 611.463983][ C0] EXT4-fs (loop3): last error at time 2000000064: ext4_orphan_get:1399: inode 16 [ 611.528993][T18461] loop3: lost filesystem error report for type 5 error -117 [ 611.536313][T18461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 611.613797][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.421527][T18506] set_capacity_and_notify: 1 callbacks suppressed [ 612.421582][T18506] loop8: detected capacity change from 0 to 512 [ 612.422610][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.458373][T18506] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3907: inode has both inline data and extents flags [ 612.479728][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 612.496611][T18506] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 612.496758][T18506] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3907: couldn't read orphan inode 15 (err -117) [ 612.505983][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 612.506015][ C0] EXT4-fs (loop8): initial error at time 2000000065: ext4_orphan_get:1399: inode 15 [ 612.506050][ C0] EXT4-fs (loop8): last error at time 2000000065: ext4_orphan_get:1399: inode 15 [ 612.543506][T18506] loop8: lost filesystem error report for type 5 error -117 [ 612.544551][T18506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.621505][T18506] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3907'. [ 612.896967][T18518] loop4: detected capacity change from 0 to 128 [ 613.128881][T18518] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 613.143779][T18518] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 613.267295][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.474854][ T28] audit: type=1400 audit(2000000066.300:3273): avc: denied { mount } for pid=18524 comm="syz.3.3914" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 613.540710][ T28] audit: type=1400 audit(2000000066.380:3274): avc: denied { unmount } for pid=17340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 613.567829][T18528] netlink: 'syz.3.3915': attribute type 4 has an invalid length. [ 613.575614][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3915'. [ 614.357556][T16579] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 614.669761][T18541] loop9: detected capacity change from 0 to 1024 [ 615.256326][T18541] loop9: detected capacity change from 0 to 1024 [ 615.291427][ T28] audit: type=1400 audit(2000000068.160:3275): avc: denied { connect } for pid=18549 comm="syz.4.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 615.320433][T18541] loop9: detected capacity change from 0 to 1024 [ 615.381520][T18541] loop9: detected capacity change from 0 to 1024 [ 615.436485][T18541] loop9: detected capacity change from 0 to 1024 [ 615.462403][T18541] loop9: detected capacity change from 0 to 1024 [ 615.491243][T18541] loop9: detected capacity change from 0 to 1024 [ 615.531924][T18541] loop9: detected capacity change from 0 to 1024 [ 615.580035][T18557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.614628][T18557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.630447][T18557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.656039][T18557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.685925][T18561] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3924: inode has both inline data and extents flags [ 615.712491][T18561] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 615.722202][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 615.737822][ C1] EXT4-fs (loop8): initial error at time 2000000068: ext4_orphan_get:1399: inode 15 [ 615.747228][ C1] EXT4-fs (loop8): last error at time 2000000068: ext4_orphan_get:1399: inode 15 [ 615.759533][T18561] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3924: couldn't read orphan inode 15 (err -117) [ 615.774685][T18561] loop8: lost filesystem error report for type 5 error -117 [ 615.777968][T18561] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3924'. [ 615.930644][ T28] audit: type=1326 audit(2000000068.800:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.007080][ T28] audit: type=1326 audit(2000000068.800:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.060696][ T28] audit: type=1326 audit(2000000068.800:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.120021][ T28] audit: type=1326 audit(2000000068.800:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.168839][ T28] audit: type=1326 audit(2000000068.830:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.222003][ T28] audit: type=1326 audit(2000000068.850:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.306639][ T28] audit: type=1326 audit(2000000068.850:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.332394][ T28] audit: type=1326 audit(2000000068.850:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0019de99 code=0x7ffc0000 [ 616.358837][ T28] audit: type=1326 audit(2000000068.850:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18556 comm="syz.3.3923" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf0019dc02 code=0x7ffc0000 [ 616.488948][ T8228] EXT4-fs unmount: 1 callbacks suppressed [ 616.488975][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.570674][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3927'. [ 616.653616][T18579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18579 comm=syz.4.3929 [ 616.681660][T18579] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3929'. [ 616.725860][T18575] syzkaller1: entered promiscuous mode [ 616.740922][T18575] syzkaller1: entered allmulticast mode [ 617.902328][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.399459][T18601] set_capacity_and_notify: 27 callbacks suppressed [ 618.399476][T18601] loop4: detected capacity change from 0 to 764 [ 620.492046][T18619] loop8: detected capacity change from 0 to 512 [ 620.593767][T18619] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3937: inode has both inline data and extents flags [ 620.647247][T18619] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 620.647531][T18619] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3937: couldn't read orphan inode 15 (err -117) [ 620.656740][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 620.656774][ C1] EXT4-fs (loop8): initial error at time 2000000073: ext4_orphan_get:1399: inode 15 [ 620.656809][ C1] EXT4-fs (loop8): last error at time 2000000073: ext4_orphan_get:1399: inode 15 [ 620.791252][T18619] loop8: lost filesystem error report for type 5 error -117 [ 620.794222][T18619] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.866557][T18619] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3937'. [ 621.489333][T18628] lo speed is unknown, defaulting to 1000 [ 621.924189][T18629] x_tables: ip_tables: osf match: only valid for protocol 6 [ 621.943753][T18632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.032323][T18632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.045831][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.055494][T18631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18631 comm=syz.3.3940 [ 622.078726][T18631] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3940'. [ 622.179622][T18643] loop3: detected capacity change from 0 to 1024 [ 622.186538][T18645] loop4: detected capacity change from 0 to 512 [ 622.195363][T18643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.227774][T18649] hub 5-0:1.0: USB hub found [ 622.232492][T18649] hub 5-0:1.0: 8 ports detected [ 622.247943][T18649] usb usb5: usbfs: interface 0 claimed by hub while 'syz.9.3944' sets config #1 [ 622.286997][T18653] loop9: detected capacity change from 0 to 128 [ 622.294779][T18653] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 622.303497][T18645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 622.320570][T18653] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.320846][T18645] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.358533][T11188] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.405735][T18645] usb usb5: usbfs: process 18645 (syz.4.3943) did not claim interface 0 before use [ 622.454065][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 623.262571][T18663] loop4: detected capacity change from 0 to 764 [ 623.658757][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.647797][T18677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18677 comm=syz.4.3952 [ 624.705024][T18674] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3952'. [ 624.756901][T18681] loop9: detected capacity change from 0 to 512 [ 624.805368][T18681] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3953: inode has both inline data and extents flags [ 624.827968][T18679] loop3: detected capacity change from 0 to 1024 [ 624.834843][T18679] EXT4-fs: Ignoring removed oldalloc option [ 624.840742][T18679] EXT4-fs: Ignoring removed oldalloc option [ 625.402055][T18681] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 625.402190][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 625.417784][ C1] EXT4-fs (loop9): initial error at time 2000000078: ext4_orphan_get:1399: inode 15 [ 625.427216][ C1] EXT4-fs (loop9): last error at time 2000000078: ext4_orphan_get:1399: inode 15 [ 625.439079][T18686] FAULT_INJECTION: forcing a failure. [ 625.439079][T18686] name failslab, interval 1, probability 0, space 0, times 0 [ 625.451787][T18686] CPU: 1 UID: 0 PID: 18686 Comm: syz.4.3954 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 625.451818][T18686] Tainted: [W]=WARN [ 625.451872][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.451885][T18686] Call Trace: [ 625.451892][T18686] [ 625.451900][T18686] __dump_stack+0x1d/0x30 [ 625.451922][T18686] dump_stack_lvl+0x95/0xd0 [ 625.451942][T18686] dump_stack+0x15/0x1b [ 625.451979][T18686] should_fail_ex+0x25e/0x270 [ 625.452005][T18686] ? sctp_add_bind_addr+0x71/0x1e0 [ 625.452038][T18686] should_failslab+0x8c/0xb0 [ 625.452135][T18686] __kmalloc_cache_noprof+0x7b/0x3d0 [ 625.452162][T18686] ? sctp_add_bind_addr+0x71/0x1e0 [ 625.452216][T18686] sctp_add_bind_addr+0x71/0x1e0 [ 625.452294][T18686] sctp_copy_local_addr_list+0x1b4/0x250 [ 625.452326][T18686] sctp_copy_one_addr+0x7f/0x280 [ 625.452367][T18686] sctp_bind_addr_copy+0x79/0x290 [ 625.452415][T18686] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 625.452445][T18686] sctp_connect_new_asoc+0x1c3/0x3a0 [ 625.452476][T18686] sctp_sendmsg+0x105f/0x1d00 [ 625.452551][T18686] ? __pfx_sctp_sendmsg+0x10/0x10 [ 625.452577][T18686] inet_sendmsg+0xc5/0xd0 [ 625.452607][T18686] ? __pfx_inet_sendmsg+0x10/0x10 [ 625.452657][T18686] ____sys_sendmsg+0x4e8/0x580 [ 625.452738][T18686] ___sys_sendmsg+0x195/0x1e0 [ 625.452766][T18686] ? terminate_walk+0x1d5/0x200 [ 625.452916][T18686] __sys_sendmmsg+0x185/0x320 [ 625.452951][T18686] __x64_sys_sendmmsg+0x57/0x70 [ 625.453039][T18686] x64_sys_call+0x27aa/0x3020 [ 625.453061][T18686] do_syscall_64+0x136/0x3c0 [ 625.453088][T18686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.453114][T18686] RIP: 0033:0x7fb62bfede99 [ 625.453133][T18686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.453199][T18686] RSP: 002b:00007fb62aa26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 625.453219][T18686] RAX: ffffffffffffffda RBX: 00007fb62c276090 RCX: 00007fb62bfede99 [ 625.453259][T18686] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 625.453271][T18686] RBP: 00007fb62aa26090 R08: 0000000000000000 R09: 0000000000000000 [ 625.453334][T18686] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000002 [ 625.453349][T18686] R13: 00007fb62c276128 R14: 00007fb62c276090 R15: 00007ffdf7ae7a78 [ 625.453437][T18686] [ 625.703499][T18679] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 625.788558][T18679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.805393][T18681] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3953: couldn't read orphan inode 15 (err -117) [ 625.823923][T18681] loop9: lost filesystem error report for type 5 error -117 [ 625.824811][T18681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.849813][T18679] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 625.856437][T18679] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 625.870575][T18679] vhci_hcd vhci_hcd.0: Device attached [ 625.872448][T18681] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3953'. [ 625.884894][T18679] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 625.892165][T18679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 625.901533][T18679] vhci_hcd vhci_hcd.0: Device attached [ 626.045893][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 626.091732][T18698] x_tables: duplicate underflow at hook 3 [ 626.100277][T18698] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3955'. [ 626.112224][ T35] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 626.168244][T18691] vhci_hcd: connection reset by peer [ 626.169598][T18693] vhci_hcd: connection closed [ 626.174260][T11194] vhci_hcd vhci_hcd.3: stop threads [ 626.176443][T18698] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3955'. [ 626.184131][T11194] vhci_hcd vhci_hcd.3: release socket [ 626.198943][T11194] vhci_hcd vhci_hcd.3: disconnect device [ 626.205342][T11194] vhci_hcd vhci_hcd.3: stop threads [ 626.210826][T11194] vhci_hcd vhci_hcd.3: release socket [ 626.216606][T11194] vhci_hcd vhci_hcd.3: disconnect device [ 626.252603][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.384911][T18707] lo speed is unknown, defaulting to 1000 [ 626.423225][T18712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.432967][T18712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.466698][T18713] loop4: detected capacity change from 0 to 1024 [ 626.479875][T18713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.792661][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.482157][T18722] loop2: detected capacity change from 0 to 764 [ 627.876680][T18730] loop9: detected capacity change from 0 to 512 [ 628.385732][T18730] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.3964: corrupted inode contents [ 628.397895][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.398145][T18730] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #16: comm syz.9.3964: mark_inode_dirty error [ 628.407380][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 628.407401][ C0] EXT4-fs (loop9): initial error at time 2000000081: ext4_do_update_inode:5742: inode 16 [ 628.407431][ C0] EXT4-fs (loop9): last error at time 2000000081: ext4_do_update_inode:5742: inode 16 [ 628.450867][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.451172][T18730] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.3964: corrupted inode contents [ 628.477254][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.477922][T18730] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.3964: mark_inode_dirty error [ 628.498961][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.499472][T18730] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.3964: corrupted inode contents [ 628.521234][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.796194][T18730] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 628.813818][T18730] loop9: lost filesystem error report for type 5 error -117 [ 628.814250][T18730] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.3964: corrupted inode contents [ 628.833430][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.833582][T18730] EXT4-fs error (device loop9): ext4_truncate:4691: inode #16: comm syz.9.3964: mark_inode_dirty error [ 628.853730][T18730] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.853929][T18730] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 628.871867][T18730] loop9: lost filesystem error report for type 5 error -117 [ 628.881992][T18730] EXT4-fs (loop9): 1 truncate cleaned up [ 628.895603][T18730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.908127][T18730] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.952460][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 628.952473][ T28] audit: type=1400 audit(2000000081.830:3354): avc: denied { create } for pid=18739 comm="syz.2.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 629.038963][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'. [ 629.133911][T18743] tmpfs: Bad value for 'mpol' [ 629.140013][T18743] netlink: 'syz.2.3969': attribute type 6 has an invalid length. [ 629.148622][T11194] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 629.159418][T11194] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:23: Failed to release dquot type 1 [ 629.173531][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.266454][T18749] loop9: detected capacity change from 0 to 512 [ 629.283180][T18749] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.3968: inode has both inline data and extents flags [ 629.304841][T18749] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 629.304952][T18749] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3968: couldn't read orphan inode 15 (err -117) [ 629.314137][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 629.314152][ C0] EXT4-fs (loop9): initial error at time 2000000082: ext4_orphan_get:1399: inode 15 [ 629.314205][ C0] EXT4-fs (loop9): last error at time 2000000082: ext4_orphan_get:1399: inode 15 [ 629.351437][T18749] loop9: lost filesystem error report for type 5 error -117 [ 629.351919][T18749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.374390][T18749] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3968'. [ 629.397321][T18745] loop2: detected capacity change from 0 to 512 [ 629.511686][T18745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 629.525478][T18745] ext4 filesystem being mounted at /185/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.552970][T18745] usb usb5: usbfs: process 18745 (syz.2.3970) did not claim interface 0 before use [ 629.573985][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.666669][T13849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 629.955515][T18761] lo speed is unknown, defaulting to 1000 [ 629.997974][T18765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.009469][T18765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.062991][T18759] loop2: detected capacity change from 0 to 512 [ 630.163449][T18767] tmpfs: Bad value for 'mpol' [ 630.227260][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.300236][T18759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 630.318574][T18759] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.380306][T18759] usb usb5: usbfs: process 18759 (syz.2.3972) did not claim interface 0 before use [ 630.460391][T13849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 630.483121][T18773] loop9: detected capacity change from 0 to 512 [ 630.496523][T18773] EXT4-fs: Ignoring removed nobh option [ 630.507561][T18773] ext4: Unknown parameter 'permit_directio' [ 630.831345][ T28] audit: type=1326 audit(2000000083.700:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 630.879055][ T28] audit: type=1326 audit(2000000083.700:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 630.936554][ T28] audit: type=1326 audit(2000000083.700:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 630.996577][ T28] audit: type=1326 audit(2000000083.700:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 631.031772][ T28] audit: type=1326 audit(2000000083.700:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 631.059964][ T28] audit: type=1326 audit(2000000083.700:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 631.086187][T18789] loop8: detected capacity change from 0 to 128 [ 631.087107][ T28] audit: type=1326 audit(2000000083.700:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 631.094502][T18789] EXT4-fs: Ignoring removed orlov option [ 631.119636][ T28] audit: type=1326 audit(2000000083.700:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18784 comm="syz.4.3980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 631.152270][T18789] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 631.164619][T18789] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.182292][ T35] usb 7-1: enqueue for inactive port 0 [ 631.193514][ T35] usb 7-1: enqueue for inactive port 0 [ 631.220871][ T8228] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.273433][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 631.385876][T18793] loop8: detected capacity change from 0 to 512 [ 631.519593][T18803] loop3: detected capacity change from 0 to 512 [ 631.733972][T18803] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3985: inode has both inline data and extents flags [ 631.752233][T18803] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 631.752486][T18803] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3985: couldn't read orphan inode 15 (err -117) [ 631.773704][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 631.773723][ C0] EXT4-fs (loop3): initial error at time 2000000084: ext4_orphan_get:1399: inode 15 [ 631.773752][ C0] EXT4-fs (loop3): last error at time 2000000084: ext4_orphan_get:1399: inode 15 [ 631.806636][T18803] loop3: lost filesystem error report for type 5 error -117 [ 631.807899][T18803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.834205][T18803] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3985'. [ 632.240428][T18793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 632.254716][T18793] ext4 filesystem being mounted at /550/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.292672][T18793] usb usb5: usbfs: process 18793 (syz.8.3982) did not claim interface 0 before use [ 632.335153][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 632.358094][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.794534][T18825] FAULT_INJECTION: forcing a failure. [ 632.794534][T18825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.808139][T18825] CPU: 0 UID: 0 PID: 18825 Comm: syz.2.3991 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 632.808175][T18825] Tainted: [W]=WARN [ 632.808182][T18825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.808195][T18825] Call Trace: [ 632.808203][T18825] [ 632.808212][T18825] __dump_stack+0x1d/0x30 [ 632.808268][T18825] dump_stack_lvl+0x95/0xd0 [ 632.808350][T18825] dump_stack+0x15/0x1b [ 632.808368][T18825] should_fail_ex+0x25e/0x270 [ 632.808440][T18825] should_fail+0xb/0x20 [ 632.808463][T18825] should_fail_usercopy+0x1a/0x20 [ 632.808506][T18825] _copy_to_user+0x20/0xa0 [ 632.808533][T18825] simple_read_from_buffer+0xb5/0x130 [ 632.808557][T18825] proc_fail_nth_read+0x10e/0x150 [ 632.808580][T18825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.808627][T18825] vfs_read+0x18e/0x7c0 [ 632.808643][T18825] ? __rcu_read_unlock+0x4e/0x70 [ 632.808667][T18825] ? __fget_files+0x184/0x1c0 [ 632.808696][T18825] ? mutex_lock+0x57/0x90 [ 632.808801][T18825] ksys_read+0xdc/0x1a0 [ 632.808827][T18825] __x64_sys_read+0x40/0x50 [ 632.808846][T18825] x64_sys_call+0x2886/0x3020 [ 632.808869][T18825] do_syscall_64+0x136/0x3c0 [ 632.808891][T18825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.808947][T18825] RIP: 0033:0x7fe734a3e6ce [ 632.808962][T18825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 632.808982][T18825] RSP: 002b:00007fe7334d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.809005][T18825] RAX: ffffffffffffffda RBX: 00007fe7334d76c0 RCX: 00007fe734a3e6ce [ 632.809018][T18825] RDX: 000000000000000f RSI: 00007fe7334d70a0 RDI: 0000000000000004 [ 632.809031][T18825] RBP: 00007fe7334d7090 R08: 0000000000000000 R09: 0000000000000000 [ 632.809089][T18825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.809105][T18825] R13: 00007fe734d06038 R14: 00007fe734d05fa0 R15: 00007ffc4a8c8448 [ 632.809126][T18825] [ 633.525206][T18832] loop3: detected capacity change from 0 to 764 [ 633.616762][T18838] loop8: detected capacity change from 0 to 512 [ 633.625654][T18839] loop9: detected capacity change from 0 to 512 [ 633.636476][T18838] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3995: inode has both inline data and extents flags [ 633.788813][T18839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 633.798899][T18838] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 633.799053][T18838] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3995: couldn't read orphan inode 15 (err -117) [ 633.808183][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 633.808206][ C0] EXT4-fs (loop8): initial error at time 2000000086: ext4_orphan_get:1399: inode 15 [ 633.808234][ C0] EXT4-fs (loop8): last error at time 2000000086: ext4_orphan_get:1399: inode 15 [ 633.849472][T18839] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.3992: invalid indirect mapped block 83886080 (level 1) [ 633.863592][T18839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 633.863733][T18839] EXT4-fs (loop9): Remounting filesystem read-only [ 633.872879][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 633.872902][ C0] EXT4-fs (loop9): initial error at time 2000000086: ext4_free_branches:1023: inode 16 [ 633.872937][ C0] EXT4-fs (loop9): last error at time 2000000086: ext4_free_branches:1023: inode 16 [ 633.909197][T18838] loop8: lost filesystem error report for type 5 error -117 [ 633.909795][T18838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.935924][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3995'. [ 633.945071][T18839] EXT4-fs (loop9): 1 orphan inode deleted [ 633.956400][T18839] EXT4-fs (loop9): 1 truncate cleaned up [ 633.967740][T18839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.995209][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.074875][ T28] kauditd_printk_skb: 384 callbacks suppressed [ 634.074939][ T28] audit: type=1326 audit(2000000086.950:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.164966][ T28] audit: type=1326 audit(2000000086.950:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.293299][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.312818][ T28] audit: type=1326 audit(2000000086.990:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.485520][ T28] audit: type=1326 audit(2000000087.040:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.545568][ T28] audit: type=1326 audit(2000000087.040:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.576324][T18852] loop8: detected capacity change from 0 to 128 [ 634.584393][T18852] EXT4-fs: Ignoring removed orlov option [ 634.606437][ T28] audit: type=1326 audit(2000000087.120:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.634106][T18852] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 634.652029][T18852] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.664325][ T28] audit: type=1326 audit(2000000087.120:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.743257][ T28] audit: type=1326 audit(2000000087.120:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.787551][ T28] audit: type=1326 audit(2000000087.140:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.801570][T18857] syzkaller0: entered promiscuous mode [ 634.815768][ T8228] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 634.832094][ T28] audit: type=1326 audit(2000000087.350:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.4.3996" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62bfede99 code=0x7ffc0000 [ 634.869585][T18857] syzkaller0: entered allmulticast mode [ 634.890075][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4000'. [ 634.950602][T18855] loop3: detected capacity change from 0 to 512 [ 635.010875][T18855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 635.035458][T18855] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.079756][T18855] usb usb5: usbfs: process 18855 (syz.3.3999) did not claim interface 0 before use [ 635.162731][T18864] loop2: detected capacity change from 0 to 128 [ 635.243505][T18872] netlink: 'syz.8.4003': attribute type 1 has an invalid length. [ 635.259968][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 635.261809][T18872] netlink: 112860 bytes leftover after parsing attributes in process `syz.8.4003'. [ 635.276002][T18864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 635.286754][T18864] System zones: 1-3, 19-19, 35-36 [ 635.292682][T18864] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.305188][T18864] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 635.721065][T18879] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 635.728026][T18879] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 635.743151][T18872] loop8: detected capacity change from 0 to 128 [ 635.751327][T18872] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 635.833169][T18872] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 636.001310][T18883] ip6gre1: entered promiscuous mode [ 636.006772][T18883] ip6gre1: entered allmulticast mode [ 636.091066][T18892] loop9: detected capacity change from 0 to 512 [ 636.180320][T11188] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 636.203609][T18892] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.4011: inode has both inline data and extents flags [ 636.223713][T18892] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 636.223816][T18892] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4011: couldn't read orphan inode 15 (err -117) [ 636.233010][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 636.233030][ C0] EXT4-fs (loop9): initial error at time 2000000089: ext4_orphan_get:1399: inode 15 [ 636.233059][ C0] EXT4-fs (loop9): last error at time 2000000089: ext4_orphan_get:1399: inode 15 [ 636.271179][T18895] loop8: detected capacity change from 0 to 128 [ 636.277973][T18895] EXT4-fs: Ignoring removed orlov option [ 636.300051][T18895] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 636.316157][T18895] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.343282][ T8228] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 636.369926][T18892] loop9: lost filesystem error report for type 5 error -117 [ 636.370494][T18892] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.397230][T18900] loop3: detected capacity change from 0 to 256 [ 636.431131][T18900] loop3: detected capacity change from 0 to 128 [ 636.444502][T18902] loop8: detected capacity change from 0 to 128 [ 636.451255][T18902] EXT4-fs: Ignoring removed orlov option [ 636.465286][T18900] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 636.477178][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 636.538920][T18903] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4011'. [ 636.835330][T18900] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 636.846314][T18902] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 636.869458][T18902] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.887931][T13849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 636.929135][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.939198][ T8228] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 636.995422][T18912] syzkaller0: entered promiscuous mode [ 637.005938][T18913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=18913 comm=syz.3.4013 [ 637.006527][T18912] syzkaller0: entered allmulticast mode [ 637.041552][T18913] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4013'. [ 637.068235][T11195] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 637.073522][T18908] loop4: detected capacity change from 0 to 512 [ 637.101734][T18914] bridge_slave_0: left allmulticast mode [ 637.121050][T18914] bridge_slave_0: left promiscuous mode [ 637.136269][T18914] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.151295][T18914] bridge_slave_1: left allmulticast mode [ 637.157847][T18914] bridge_slave_1: left promiscuous mode [ 637.165903][T18914] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.195129][T18908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 637.214095][T18914] bond0: (slave bond_slave_0): Releasing backup interface [ 637.224122][T18908] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.256674][T18914] bond0: (slave bond_slave_1): Releasing backup interface [ 637.295544][T18914] team0: Port device team_slave_0 removed [ 637.328364][T18914] team0: Port device team_slave_1 removed [ 637.350053][T18914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.357889][T18914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.368907][T18914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.376805][T18914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.389005][T18914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 637.441487][T18908] usb usb5: usbfs: process 18908 (syz.4.4015) did not claim interface 0 before use [ 637.470823][T16579] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 638.163677][T18941] bridge0: port 3(macvlan2) entered disabled state [ 638.170390][T18941] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.178107][T18941] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.309464][T18954] loop9: detected capacity change from 0 to 128 [ 639.324057][T18954] EXT4-fs: Ignoring removed orlov option [ 639.423220][T18954] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 639.450347][T18954] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.487433][T13127] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 639.606090][T18941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.649681][T18941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.930742][T18960] loop8: detected capacity change from 0 to 1764 [ 639.944831][T18959] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.4028: inode has both inline data and extents flags [ 639.972874][T18959] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 639.973052][T18959] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4028: couldn't read orphan inode 15 (err -117) [ 639.982242][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 639.982261][ C0] EXT4-fs (loop9): initial error at time 2000000092: ext4_orphan_get:1399: inode 15 [ 639.982298][ C0] EXT4-fs (loop9): last error at time 2000000092: ext4_orphan_get:1399: inode 15 [ 640.043145][T18959] loop9: lost filesystem error report for type 5 error -117 [ 640.045077][T18959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.152582][T18965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 640.169776][T18965] ext4 filesystem being mounted at /563/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.183690][T18959] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4028'. [ 640.199944][ T40] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.208943][ T40] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.217945][ T40] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.227019][ T40] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.265171][T18965] usb usb5: usbfs: process 18965 (syz.8.4031) did not claim interface 0 before use [ 640.317417][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4033'. [ 640.333822][T18976] set_capacity_and_notify: 2 callbacks suppressed [ 640.333836][T18976] loop3: detected capacity change from 0 to 512 [ 640.359410][T18976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 640.384834][T18976] EXT4-fs error (device loop3): __ext4_iget:5533: inode #16: block 8388380: comm syz.3.4034: invalid block [ 640.404248][T18976] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 640.404395][T18976] EXT4-fs (loop3): Remounting filesystem read-only [ 640.408230][ T8228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 640.422212][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 640.429288][T18976] EXT4-fs (loop3): 1 orphan inode deleted [ 640.435455][ C0] EXT4-fs (loop3): initial error at time 2000000093: __ext4_iget:5533: inode 16: block 8388380 [ 640.442291][T18976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.451597][ C0] EXT4-fs (loop3): last error at time 2000000093: __ext4_iget:5533: inode 16: block 8388380 [ 640.501264][T18982] FAULT_INJECTION: forcing a failure. [ 640.501264][T18982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 640.506761][T18976] FAULT_INJECTION: forcing a failure. [ 640.506761][T18976] name failslab, interval 1, probability 0, space 0, times 0 [ 640.538589][T18982] CPU: 0 UID: 0 PID: 18982 Comm: syz.8.4036 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 640.538679][T18982] Tainted: [W]=WARN [ 640.538690][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 640.538776][T18982] Call Trace: [ 640.538784][T18982] [ 640.538792][T18982] __dump_stack+0x1d/0x30 [ 640.538818][T18982] dump_stack_lvl+0x95/0xd0 [ 640.538842][T18982] dump_stack+0x15/0x1b [ 640.538864][T18982] should_fail_ex+0x25e/0x270 [ 640.538927][T18982] should_fail_alloc_page+0xf2/0x100 [ 640.538953][T18982] __alloc_frozen_pages_noprof+0x108/0x350 [ 640.539020][T18982] alloc_pages_mpol+0xa9/0x1d0 [ 640.539054][T18982] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 640.539115][T18982] do_wp_page+0x6f6/0x2030 [ 640.539148][T18982] ? __rcu_read_lock+0x36/0x50 [ 640.539211][T18982] handle_mm_fault+0x8bc/0x2da0 [ 640.539257][T18982] do_user_addr_fault+0x634/0x1060 [ 640.539284][T18982] ? __x64_sys_recvfrom+0x76/0x90 [ 640.539317][T18982] ? trace_page_fault_user+0x1f/0xa0 [ 640.539417][T18982] exc_page_fault+0x62/0xa0 [ 640.539453][T18982] asm_exc_page_fault+0x26/0x30 [ 640.539476][T18982] RIP: 0033:0x7f87ce7fdc85 [ 640.539501][T18982] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 640.539596][T18982] RSP: 002b:00007f87cd295de0 EFLAGS: 00010293 [ 640.539616][T18982] RAX: 0000000000000008 RBX: 00007f87cf5f7e20 RCX: 0000000000000000 [ 640.539632][T18982] RDX: 0000000000000000 RSI: 00007f87ce8f138e RDI: 00007f87cf5f7e20 [ 640.539648][T18982] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 640.539664][T18982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87ce8f1234 [ 640.539680][T18982] R13: ffffffffffffffe8 R14: 0000000000000001 R15: 00007f87ce8f138e [ 640.539749][T18982] [ 640.539760][T18982] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 640.543369][T18976] CPU: 1 UID: 0 PID: 18976 Comm: syz.3.4034 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 640.543404][T18976] Tainted: [W]=WARN [ 640.543412][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 640.543493][T18976] Call Trace: [ 640.543500][T18976] [ 640.543507][T18976] __dump_stack+0x1d/0x30 [ 640.543535][T18976] dump_stack_lvl+0x95/0xd0 [ 640.543557][T18976] dump_stack+0x15/0x1b [ 640.543658][T18976] should_fail_ex+0x25e/0x270 [ 640.543703][T18976] should_failslab+0x8c/0xb0 [ 640.543727][T18976] __kmalloc_noprof+0xd4/0x4a0 [ 640.543812][T18976] ? ext4_htree_store_dirent+0x55/0x2c0 [ 640.543843][T18976] ? ext4_htree_store_dirent+0x55/0x2c0 [ 640.543876][T18976] ext4_htree_store_dirent+0x55/0x2c0 [ 640.543966][T18976] htree_dirblock_to_tree+0x48c/0x5e0 [ 640.544057][T18976] ext4_htree_fill_tree+0x46b/0xa70 [ 640.544092][T18976] ? perf_trace_run_bpf_submit+0xac/0x110 [ 640.544176][T18976] ? kfree+0x108/0x370 [ 640.544217][T18976] ? inode_query_iversion+0xb9/0x110 [ 640.544247][T18976] ext4_readdir+0x188a/0x1f20 [ 640.544342][T18976] ? lapic_next_event+0x11/0x20 [ 640.544364][T18976] ? clockevents_program_event+0x2fd/0x340 [ 640.544394][T18976] ? _raw_spin_unlock+0x9/0x30 [ 640.544483][T18976] ? __hrtimer_rearm_deferred+0x571/0x650 [ 640.544560][T18976] ? get_pid_task+0x92/0xc0 [ 640.544579][T18976] ? proc_fail_nth_write+0x13b/0x160 [ 640.544603][T18976] ? avc_policy_seqno+0x15/0x30 [ 640.544626][T18976] ? selinux_file_permission+0x1dc/0x310 [ 640.544683][T18976] iterate_dir+0x109/0x2f0 [ 640.544705][T18976] __se_sys_getdents+0xd2/0x220 [ 640.544733][T18976] ? __pfx_filldir+0x10/0x10 [ 640.544756][T18976] __x64_sys_getdents+0x43/0x50 [ 640.544778][T18976] x64_sys_call+0xea8/0x3020 [ 640.544840][T18976] do_syscall_64+0x136/0x3c0 [ 640.544883][T18976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.544906][T18976] RIP: 0033:0x7fcf0019de99 [ 640.544988][T18976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.545014][T18976] RSP: 002b:00007fcefebf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 640.545035][T18976] RAX: ffffffffffffffda RBX: 00007fcf00425fa0 RCX: 00007fcf0019de99 [ 640.545113][T18976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 640.545127][T18976] RBP: 00007fcefebf7090 R08: 0000000000000000 R09: 0000000000000000 [ 640.545141][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.545155][T18976] R13: 00007fcf00426038 R14: 00007fcf00425fa0 R15: 00007ffec8714a88 [ 640.545176][T18976] [ 640.647672][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 640.647687][ T28] audit: type=1400 audit(2000000093.520:3782): avc: denied { getopt } for pid=18986 comm="syz.2.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 641.014895][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.048252][T17340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.064615][T18990] loop9: detected capacity change from 0 to 2048 [ 641.089795][T18990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.100249][T18992] syzkaller0: entered promiscuous mode [ 641.112013][T18992] syzkaller0: entered allmulticast mode [ 641.162835][ T2979] ================================================================== [ 641.167699][T13127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.170950][ T2979] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 641.187333][ T2979] [ 641.189643][ T2979] write to 0xffff888107276600 of 4 bytes by task 11509 on cpu 0: [ 641.197342][ T2979] d_make_discardable+0x4f/0x90 [ 641.202190][ T2979] simple_unlink+0x68/0x80 [ 641.206597][ T2979] shmem_unlink+0x12d/0x140 [ 641.211094][ T2979] vfs_unlink+0x1c3/0x490 [ 641.215410][ T2979] filename_unlinkat+0x1dc/0x410 [ 641.220346][ T2979] __se_sys_unlink+0x2b/0xe0 [ 641.224925][ T2979] __x64_sys_unlink+0x1f/0x30 [ 641.229594][ T2979] x64_sys_call+0x2eb6/0x3020 [ 641.234260][ T2979] do_syscall_64+0x136/0x3c0 [ 641.238837][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.244717][ T2979] [ 641.247024][ T2979] read to 0xffff888107276600 of 4 bytes by task 2979 on cpu 1: [ 641.254547][ T2979] path_lookupat+0x19b/0x4c0 [ 641.259127][ T2979] filename_lookup+0x18f/0x390 [ 641.263885][ T2979] do_readlinkat+0x74/0x2f0 [ 641.268386][ T2979] __x64_sys_readlink+0x47/0x60 [ 641.273230][ T2979] x64_sys_call+0x2b51/0x3020 [ 641.277895][ T2979] do_syscall_64+0x136/0x3c0 [ 641.282473][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.288355][ T2979] [ 641.290660][ T2979] value changed: 0x08300080 -> 0x00000080 [ 641.296384][ T2979] [ 641.298694][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 641.304828][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 641.315228][ T2979] Tainted: [W]=WARN [ 641.319012][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 641.329051][ T2979] ================================================================== [ 642.120476][T19007] loop2: detected capacity change from 0 to 764