last executing test programs: 7m21.684707218s ago: executing program 2 (id=879): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x7, 0x2000277}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x301000, 0x88) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x104, 0x80000002, 0xfffff7f9, 0xf9, 0x8c, "13ff775cff03000040000000ff004000", 0x200008, 0xc}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m21.576583201s ago: executing program 2 (id=880): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="73650800726974790000000000000000000000000000000000000000000000000600"], &(0x7f0000000080)=0x2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00009500000000000000c5abd740a1d494aa6ccf80774bf3470600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m21.461679323s ago: executing program 2 (id=881): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff00000000000024f0d1c50000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007"], 0x0, 0xb, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 14) 7m21.245530318s ago: executing program 2 (id=884): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000600)={[{@utf8}, {@uid}, {@nojoliet}, {@nocompress}, {@showassoc}, {@check_strict}, {@mode={'mode', 0x3d, 0x8}}, {@overriderock}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa45, &(0x7f00000007c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x6, 0x0, 0x0, 0x0, 0x400008, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 7m21.175752839s ago: executing program 2 (id=885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) (async) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0100"]) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000002380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002340)={&(0x7f0000001180)={0x1198, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdc, 0xa8, @random="282dcee681f229167d946add9a6a49205a556ee430e69c7c293260ceba109eb05fb4f0e1878e192ca19fee307876c4f54bde34494c16b03ea94adc618f1b8bb0aa5ceb08544ab2d0c06632bf263c3eb28fce4cb18ef6b6d31fe5d78b4badcf671516609668b72596294546cef8f197e850858585abf2a07569282cdadae5cf32bd807b979c233442bbf4a359f513cef033bd60db3767a59f4531427a4b8bceea3a03b5c110061a9cf3ec9d823e88d6f308800fd6fe861cbb7dd8170e960f52f8a9d26e52378f17586d41951cf13172ec6b1a4366514548bc"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x9c, 0xa8, @random="a001640d2cb2906a78bf623fc60a7f8deb757b30fdc4fe5934955a3f358626bba12ecd074c5d9ffe5d37e145eaba2961f834876e6fc64ed15ac7708006344ee0937aeec6333eb195dbc8b8659d5e7012543dce0e215616445ee9ec9ec7bbd2c0afcd01f0b415e4232457ec54ac71aa79c35db50c79abee34ccb070cdb6b889a62bc0da0dfbb997f4be481510be83e145393165e1500104eb"}]}, 0x1198}, 0x1, 0x0, 0x0, 0x14}, 0x200000c4) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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") (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000226000/0x1000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f000005a000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000004c000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xfff1}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00') (async) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') (async) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newchain={0x24, 0x1e, 0x1, 0x70bd2a, 0x7ffe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24041090}, 0x4040004) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m20.778878177s ago: executing program 2 (id=890): r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[], 0x0, 0x305, &(0x7f00000000c0)="$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") bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040890) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x8001, 0x2, 0x9, 0x1, 0x1}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0xed249000) r6 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r7 = gettid() sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0085000000000000140012800900010076657468000000000100028008001300", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 7m20.753047709s ago: executing program 32 (id=890): r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[], 0x0, 0x305, &(0x7f00000000c0)="$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") bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040890) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x8001, 0x2, 0x9, 0x1, 0x1}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0xed249000) r6 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r7 = gettid() sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0085000000000000140012800900010076657468000000000100028008001300", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 5m42.706159183s ago: executing program 3 (id=1364): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x2, 0x10ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20005}, 0x0, 0xdf7fffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a091, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r3 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000007c94ef56491ee54be34042074ed27c1c60477cef3e2", 0x1d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010024bd7400fcdbdf4703000000040001800500030000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r7, @ANYBLOB="f327000000000000000007000000c40002"], 0xd8}, 0x1, 0x0, 0x0, 0x6}, 0x4020) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000140), 0xff, 0x23f, &(0x7f0000000540)="$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") 5m35.583138917s ago: executing program 3 (id=1398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/28], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f00000001c0)='i\xcc\xb1\x01\x00'/14, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000137, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'wg1\x00', 0x3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0, 0x43, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0xa246}], 0x1, 0x0, 0x0, 0x0) rseq(&(0x7f0000000000), 0x6c, 0x2000000000000000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a9880, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffe}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000400000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xffffff6e, 0x4000000000001, 0x0) 5m35.130265087s ago: executing program 3 (id=1400): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x14, 0x0, 0x12, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x5}, 0x16d64, 0x5, 0x43a1bd56, 0x7, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget(0x0, 0x3000, 0x10, &(0x7f0000083000/0x3000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x40000}, 0x44040) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000f80)={&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/178, 0xbe, 0x0, &(0x7f0000000ec0)=""/140, 0x8c}, &(0x7f0000000fc0)=0x60) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff52, 0x2}) syz_emit_ethernet(0x58d, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x600, 0x18e) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000009520a24c7c815dd7649d182c79ed8a11bf9a6e47978190f26fbc9281d09e44339f3b1ded3c3aa3bd30a2510f6087ddea772b830d71994b5ffe26c30eb46c85d099199382c9e9899903780fefc00a972a1e8f937f0cfa5e19fa332ac531b62a24d92768"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 5m34.961310021s ago: executing program 3 (id=1403): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc8000}], 0x1c, 0x0, 0x0, 0x22) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@jqfmt_vfsold}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1900) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'rr\x00', 0x4, 0x8, 0x2061}, {@loopback, 0x4e60, 0x2, 0xfffffffe, 0x101, 0x9}}, 0x88) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x4d, 0x1, 0x24, 0x3}}, @timestamping={{0x0, 0x1, 0x25, 0xffffad48}}], 0x18}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x38) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140010001000010000000000000000000000000a48000005000000020000000000000000020000060900010073797a300000000038000300fd02321edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed9140000001100010000000000000000000000000a"], 0x80}}, 0x0) 5m33.029637263s ago: executing program 3 (id=1417): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) 5m31.950824846s ago: executing program 3 (id=1421): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x8002) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="26000001000000000000e87f0700ffffffff00a2"], 0x18}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) io_uring_enter(r2, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 5m30.983293097s ago: executing program 33 (id=1421): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x8002) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="26000001000000000000e87f0700ffffffff00a2"], 0x18}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) io_uring_enter(r2, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) 4m38.271202339s ago: executing program 0 (id=1771): r0 = getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x206f, 0x0, @perf_config_ext={0x8, 0x1}, 0x108a83, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000500), 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3091808, &(0x7f0000000600), 0x4, 0x521, &(0x7f0000000640)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/239, 0xef}], 0x3, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/187, 0xbb}, {&(0x7f0000000cc0)=""/25, 0x19}, {&(0x7f0000000d00)}], 0x3, &(0x7f0000000d80)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x40000000, &(0x7f0000000e40)) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) fstat(r3, &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) getresuid(&(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000580)) getresgid(&(0x7f0000000240), 0x0, &(0x7f0000000300)) getgroups(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f080100000007c94ef56491ee54be34042074ed27c1c60477cef3e2", 0x1d) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) getsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000007c0), &(0x7f0000000800)=0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) 4m38.206639791s ago: executing program 0 (id=1772): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4008804) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) r1 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x6e, 0x7, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x102, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x7}, 0x108003, 0x40000000000, 0x8, 0x3, 0x8, 0x6, 0x9, 0x0, 0x3ff, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x32}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="318329bd7040d9b3bccd6278fb75fcdbdf060000000021ccc61d2efff030cbe5fe2ee1805d7630acfe6e21e5e6e6391ca7ee38850075a02776f41c2bc7bdd053129008bc4078524279ee39db00fe08b4edb83fc76c74d5760a7b3d1f541a9778f8032a332434db17b7fdb7f290ec719cb56b467e4149030c165a2c64f8b7a5e9fd90659c7ddb6736d5d9b0afb6e31bb74446cff1592c885d5c676db8b0eba9c384368667fd7209ce85ddf2af27", @ANYRES32=r7, @ANYBLOB="0800030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) sendto$inet6(r2, 0x0, 0xfffffffffffffd81, 0x20004804, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0xfffffffc}, 0x1c) r8 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x6, 0x6, 0x8, 0xe, 0x0, 0x0, 0x10080, 0x1d, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xb5, 0x8}, 0x800, 0x5, 0x10001, 0x2, 0x200, 0x3e82, 0x9, 0x0, 0x8, 0x0, 0x1}, r0, 0x8, r1, 0x2) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r9, &(0x7f0000000600)="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", 0x4b2) write$UHID_INPUT(r9, &(0x7f00000014c0)={0x8, {"1774d10ed679a3761698425e02229859f202c5d54bb9aaa84c470671ed39e31fcd1987c3fab368535c1d72f471356277d68201ce587582e0b61c74107f26d9b357fed4393b6676c62cb12bb5104bc87b40120258613657f462d98097b32565f3c6a065c0ecf81581c270d0adccfdd40199844781374e1cee0129091296af79ff67a1f52be0c73043a7bb6860312b9b2d3514d05233defb9e2e9ae218a0731aa015e7f042114d434f4209218e37f80b240526d575cb63f1ca89512cd50e27c21a827328cbae0874b155506fd933a2e59978eaad1c78dbed757e9e0047f5ebd5e9faefad831e5c55100f289794dc5b2116838edc1caef786cead375259a7768ddfd6cf5ed870b7abdcef90350a64c1eb5d6e54de748d6349f7e5bcb0377df4744678e7700911426a8b8540996d54716ecd8cd3a9f8175f23d45f9a1497654d5f2e4dad96b4b34cce3a39eb084bb829e05c82249951f91b432999c302bbe8ae5f79bb8954ed23ad98f87b5c30d079b1b2186db53a3849f9dce0e4d49c04f3025d4b25bc0728ab25ea5d050dc2586bad7ac437d7a5881c06e8b9f3eae66dc2aa48d0edf763daa7c6aa90df3c61fd69cf301090790b608324f4cfcc23acdcbbf9bd7e224c5c33d817cddcd10e86cbbda0de36f52d2389fa84dad6ed1819ee056b9a80d0b81f2a6b4ac50192f87cabf46f5fc88abcfbeb4301632d353aaf091b7828d941cb1c0e1477e5761032a63dadc3c7f51de8429c63b4ad65e975e38f244c6fe40e8fc6c33c4a16deffbe1b0423e584f45023e196d92b5bbc7d1854c3f33e8b0b7c5d3d87f0119380e2d14d6630219dc0e31469c2af0db2d624cab5c276c396f7d1543370ca9d925ac2dc2204de8008517c815e9fa7cd56e53f82ce1d095cd08032f57835ecb14c39fd57c90e39557934cd278a609e2e05a07a791d417f4460d2c30c10e1ef92cc146b1f9ff6b98b2688e2f050c510feba0d6960d31522cec3f6b0f539f85898a6b6409dd179d990fb57026acd9382f505ce06db211d7a369f46d8ea5804502bc7829155794b19a098d095a00b520966e9f49c74111d1f0f0f75b07aff0d388650a63656c9e601269d2eff1740e87206416ec73c08b56570dd496846b4f1a5d76602b6594e173209e5e7cebbab3f9f29bf957d000510eff9ce7ee3fea7fff32f3b6ae414ac311e14550e9a597aec7e76df40b7352bf4ddbd00739041edda795aeaa2665ad51a836120054bb0c8c1d3149477167214a0f952c78039ec8a70e21158db26d8f0238f782a5d54dced90951085abd412ef2e5b9984c7e263dc3eac6c683e8b82c5d56b5fa1e2f65d5d0afd32bc66d76ddb87a41805e11137de7373a9f6366a9a314cc6d5e731abeb2e83f135798a8bdda1c47b36db21140a9278b86c520bdbc8338ccaf5fbd61d7e73750b38e4bb6c77c33bf5617086c8f97ab219b4f6c930fd717aed4f1fa0eebcda82322c561dcae23284e0bfa4bf7a5b4b19ff3fe3137c4e07c55543a7d3778ccfaf757fae541bcf475382cc8ab6a0ede61789652b528efaacfa804fc1583bdfeaea00565c70a5941dc7a947ed97d9b6688f6363edf0735e72d9b8a4b21e5cd2de518e27bfd41749eafa66f3452e941273050ceaf39435327737857d4718a31b83649b3dced6f37a9ce3621a83a7ba9163dea12990677d21781f4ff95a68dc4b268b4c5e428c0941443c98025773362acd28a88f8d7e42fa72b908ac6a816270d78541c98e36b838b83ba99656192624211a343e6e76e154ebdb1af56aa8489f6a30a6be0dcd84f80ab2d02ac7bee22e5f6207d74c4fda0c6d7cc71bea537718bf8bb1d3c2602903139449b046d09528b4331bd8e396bb9b5c0b15db16a72947eecd0f050de9ee9e6b82fcf48a7fbecf911fda3d013fa9941a60f41b9d1f56ac40f07e7259c7c79f17cb0a90c472d33aed227151fc93c76e7a1fee4675edae1a9fda95a5d2b42c7b13d84995ee1b6411c48329f529752d65601c034cdb13ea4051132ecb7f71953b43663053fc2a174b1a7694d6a8b3eb9facbaf8b7281e00357ee255816a489ca91656dc506deaa9c925a0e53600a9e7df5bc89db907a323ffeba03d3c06a4f0569a6c0cd02ca46eede0b9979aa5b40fa85b47b3d4f4aaf614b5b72ab9ea4289d08346759fbc4c0c25dd179d0efc994f4ace7612720dbd1b40395c95c43e24bdb5941295ccfdfb8b558b3234a80a2cfb5a50d96a31e2f1bcc4aba66994626f735d5fd742f0fc2ab2bcc0a73a6210e9b2222a3577f7cba7fd31459c58bef86eb76dd00fc165a16519d05f5aa5753b89c5391a051b2930b22eadbd1f4fc76fc675faf35bde9306ef48fa349f1978b84e033340681bf06966a833c03902d749444574b9e3e88e027b01d057db785a1e0d6b4135c3b6f2ac370a01351bcdf0474d4708675502e64e02d468c4e1454271dda60f82cefb8f6ec9bd871bb4c7a50a17f3d1d9c1bce2e79cb59704f78a31d13cd6678e20ea53e8d0bff1527bf76670982fab8cbe62377baf3c59f256e0bb21686402efd240cf07989832b02975e09b06da9486667869e543e7e868e1eb2242811f306f9cbeff4e606c62dbccfcc3dec265b396fa70c04b0816dddedfe5d70b44c35e387accad9945c91ced6665482f95e1bcd4fb603eb5add65c934d74a40dd37a24ea972babb9197dd85b102e67d5658dd8cd64b661fac6dae2e1d8f7325e2a62d1060836f53a2f3737c843a42662a7ed6eb63c5ca670273539529a760417f3d95fd4adfe86ae582742c1d54dd121e5ac820d3f547a647f72f723a66dc9830fbcc228559c77d3fd1d7443598717f69d58b9e7cc64e9aad2da810b45aaf01b377d54eddc0e97f6d1dc07aa33c30aa2667719cebf73e67d001bd967e6529f195b38dc6684758b557ce4ba3b47d84a03be117b58cc22adbab162bed3965f768982e5355d241f7f0c0943d389a61ef2c633d8b99c7b6deba3bc4e4c1b7366a178ed6bc1fb49ce646b411ccb940998d01a941546a5ad1988faa66ba6338a7562e17ee0af33e76d6dfcd0ed0fb92911b2c9cb880f367f6429a7446f090b90b83893d1c0ddb138959853b68a85894a6d5aa1d287c2a949f9331fedecf7de02a5b51014c917a42e33274e6d597bd6ab586f73ce61a96f9512a0ebc729869c664a895be61ec7882869852c922d3016726edc90f909af1d07e8a3671bf751135cd24066fad1992103bdcd5052059abb0e1df33560ab3637d66b1013f8a234e3238de1170da7addd84b21f1e870151f534d799ed6164a031686bc48d2ae5a89c81894a28a9cd944a535b907777397e739a3b6a8e7d54bef71907071bc2a047ca14d7ef2e9d9b66da86ce56bc62ada0c813d9d63aa899f77f5d804a13a79b0e2275c4ba387e970519e67d212193d91bd0a96a1068bc136616ab5153b1e4b956f1a44b5334e8fbf8abf57fb28a13a64ad6085497faf88556d721f8e0a0699469646f22789e6530c03c75f69279e809d95d444bd44af1d19d12046de9d524caedc84a506642edf34b409b41ccb9689f8597cacd20eee8beec2b3e89644c06750e080da5cc06f3cb10b854fc23d39e52bf95b88335e7536888d67ea92df5868c5835321234e70ebf80e4365c19693a3a640a30f5aec7c490b4ed32ff169e907e25f862fe5aa8a9238cf5cee03ec2ab9e2801239980e78162b560ae3d066351f944c31d8b57a20cd2419b05b0fdd9f8ca4b7a8e1e7955a6b66a264d6d4c56d83c15871ab3f3327284ff7cf5e8d6c7f762d755fac0c7784af9efd13c9337d38451acb23020f4934ef1708b362b5d5cf4b743fc0f9712860ca2977319e1226ed860c2be3caacc8465ba80a0a6856322bc352972fd3f3c0db3acd66d56fef139e48f3d63d3a62c532aa10485807269bac3348316d9fd1931cbfd2acaa5c4e9102872ab16500260f2aec57025c0d6dc1bd68bff597667469e8eb57459b1881c10bf9531c23a6d9349b06b0db60aa6f89a4e0162038ea1850348b72e16f7d647e092c1d7ca55ba5095e58b18dd56b72ba9cbc09598663e8f54b2594194de72475abafdb285d464007ab91a83b91e7c8d5968ecb452e011c0b74e4309180615c3f67c2cad6e086f3686fd5394efd86d8bd45829314a5eb4a0549613b668e7b97600ac9ffe59df44e87046de44432dcd0aaf0c02c446ee9aaf72e80ce989923d4720fd3b8257d3fec5af22737c1e426f9d851c7929d69713e4751d5d39de20f0990bbdcb579f36b778bba4b8c5bdeb78208412005fe7cee40fe86691b8b0d6d3234e74192528622c31022cc3a81f4a574efdb67348b36ae7fd5977059d911da17746b040f06e7bef06accf4ef1ea4f4402041a98f3760d0fb8851b4e7d1124f37b1c653cc9ac53f4e373f694f8c957c390b0801859a19776a83854d2b65766bb03321fdac9a23d3345821fc21195910245e5ad79926a08094b54e242f002634b7213e5c122e76514f9ce76ce2740741f7ffe30e036de63b737fb16b240c6eeef0c1c537d219449b95d497723088548267c229fd5a122f25f2c6ad2fc3ff28133305ca850c5e2d1453dbb4429a8ee3a8f173feb49b611764c536c668c9aca8b8ec575c2310044898a4657fa1dda2ec6f7b8906d9521525ffd30c2b5948a0250224ba4d6beb39008c3785ddad71ceedb34301706b71634bf74b33ea4c436c2006cc5275d7931855d376c6314f8a5431781c3347bd9b3edadb8fcb959a6bb48e9407de69458fcc61c3a62e32720d3fd838dad3f50e852a2aa6d26af70205f9d8e40d3b9232c2ea9a4f86857fec4f7772e43d6dabd1e34400a84d1d338941bc31ead12047bde3ccdd89c53fcbfeff9fba85be6c11447c4b088eb184186a5e41e17bc0011c008aa8b98b44c1c862f8f977d1998d8dce81688d3d80d0fa2b9b7e7f78f80361f525a7586f3d9e68456b55d6f0e8c99495da3a5f392fc8bfe4e42af04fe85936c99b7be80acd351bffa7b723717621d9ff37b5ef829dfdc6ab085c2e83df864306cee0096486e77a1f9d7b7cf5bd157a69a05a12bb735606ac360af2c23542e52880fe9328524d5b121e378319ef2e1a0874fc99842ac8ac04dd6c634b08d81ffd379e9a52573a1721f63a6c009c590e7f43fcbaa2c23c975dfd1a9d1a6dc21587511b4cfdb6f53721940a9f4dd3d8a2c6bdf9890a152e05c9b561518a58a861aae8cb02f1031a121297f6b0820b22d9d6e544adc91216f4a3c011dee24774bfddef418a56c5f0ed57e6f3ce2a76d812a19a9420141eca0ef3d86f552814cb8b2a68b53bb195b2dd2b44f49e93c742db0b2bd637fd247bc28755819a9e122725a6b4409baec607359268eb6cf83fcb674a3771b75b8a7ea0300c16a624333b69bc188c417557356ff7336cde8645f973ad18ee15fc3b34074e1ec58eb00b779a86c7dd7e76872798a12b29b3f446240770999853686f18a624beb6f07f614b413a0cbd954de99a6a79b7c9dbdec41fa172025d9e7d6e82935fc21b4c90bae9b4e9a84478e2289fda091ceacdd02bee2d96fa9d02982191418a9db4115ba049b045ef03dcffc0566d802df6d97dcd90660cd9c3a682bca8a48dd7168ab86074685993571843f74498f1d3a85ab9c63c83450809e86cb1bcf2f341cfd7db56090ad58c34e3a6a98ea65e7b5b439295b0ad6e6e695d88dec93c2ed776df7fc41ef0cec809500d2ce06ac217001748fa337b91f1bccf4d22ee7183e44a573cf95bdbe1e2e10d0c2d52e1992983f84fa1b109eb1495c9d25651510b75a2d5c689b7fe9", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r8, 0x1) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) 4m36.753707832s ago: executing program 0 (id=1781): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x4}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000001c00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001c40)='~', 0x1}], 0x1}}], 0x1, 0x4000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000017c0)='./bus\x00', 0x8, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nomblk_io_submit}]}, 0x4, 0x511, &(0x7f0000000640)="$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") write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000840)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x28, 0xc, 0x31}, 0x2c) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4m36.077590757s ago: executing program 0 (id=1786): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@i_version}, {@norecovery}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socket$inet6(0xa, 0x80001, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x7, 0x8168a, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe65, 0x0, @perf_bp={0x0, 0x4}, 0x18, 0xa2, 0xfffffffe, 0x7, 0x7f, 0x9b9b, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x8, 0x5, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5a, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x7ff, 0x4, 0x9, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sigaltstack(0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) lsm_list_modules(&(0x7f0000002600), &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2000000000000006) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 4m35.315075003s ago: executing program 0 (id=1789): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x1) socket$kcm(0x2c, 0x0, 0x0) r1 = syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, 0x0) kcmp(r1, r1, 0x7080c6a24c5b3385, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100037040000800000000f0000000000", @ANYRES32=r7, @ANYBLOB="c3040500000000004800128008000100677470003c00028005", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 4m34.326531155s ago: executing program 0 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000005bc000"/90], 0x68) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0x9, 0xd, 0x6, 0x23b0, 0x8, 0x0, 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xe, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8, 0x9, 0x6, 0x6, 0x200000}, {0x8, 0x2, 0x3, 0x7fffffff, 0x1, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_add_watch(r4, 0x0, 0x220) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0xc60, 0x30, 0x12f, 0x0, 0x0, {}, [{0xc4c, 0x1, [@m_police={0xc48, 0x1, 0x0, 0x0, {{0xb}, {0xc1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3a, 0x2, 0xc, 0xd, 0x3b, 0x9, 0x2, 0x4, 0x401, 0x5, 0x26, 0x6c, 0x5, 0x800, 0x100, 0xac, 0x9, 0x5, 0x0, 0x9, 0x0, 0xffffffff, 0x5, 0x9, 0xfffffff9, 0x8001, 0x80000001, 0x9f, 0x1, 0xb9f, 0x86f, 0xfff, 0xd645, 0x2b9, 0xc, 0x10000, 0x3, 0x4, 0x6, 0x1bd4000, 0x0, 0x8, 0x81, 0x9e91, 0xfffffe27, 0x7fff, 0x5, 0x7fff, 0xfffffffd, 0x80, 0x5, 0x0, 0xe, 0x5, 0x4, 0xffffffff, 0x3ff, 0x9717, 0x3, 0xf, 0x4, 0x3, 0x0, 0x6, 0x5, 0x10001, 0x4, 0x6a, 0xd, 0x180, 0x1, 0x200, 0x0, 0x10000, 0x7f, 0x8, 0x10, 0x0, 0x8, 0x3, 0x5, 0xfffff9a1, 0x7, 0x3ff, 0xffffffff, 0x3, 0x6, 0x7, 0x6, 0x9, 0x9fd, 0x690c, 0x9, 0x7f, 0x4, 0x7, 0x1, 0x7ff, 0x2e, 0x6, 0xff, 0x5, 0x8e, 0x1, 0xff, 0xd0, 0x0, 0xd, 0x3, 0x0, 0x7, 0x0, 0x8, 0x6, 0x10, 0x200, 0x8, 0x8, 0x0, 0x7, 0xf, 0x1, 0x101, 0x0, 0x9, 0x2, 0x9, 0x20200, 0x2, 0x3, 0x4, 0x6, 0x6, 0x5c8, 0x9, 0x4, 0x8, 0x81, 0x5d4, 0x8, 0x3, 0x101, 0x6, 0x7, 0xffffff08, 0xff, 0x6, 0x4ff, 0x5, 0xa, 0x0, 0x100, 0x7, 0xffff, 0xa6, 0xf, 0x2cb3, 0x5, 0x1, 0x1, 0x7, 0x0, 0xfff, 0x6, 0x1, 0x9, 0x3, 0x4, 0x808, 0x6, 0x3, 0x23d, 0xb0, 0x8001, 0xb7d1, 0x3, 0x7fff, 0x3, 0x0, 0x6, 0x9, 0x8, 0x4, 0x1b58, 0x6, 0x0, 0x5, 0x7, 0x5, 0x9, 0x55, 0x2, 0x2c0000, 0x7fff, 0xffff, 0x3469, 0x9, 0x9, 0xd05b, 0x4, 0x0, 0x0, 0x5, 0x800, 0xc, 0x1, 0x6, 0xef, 0x2, 0x20a, 0x80000001, 0xffffffff, 0x10001, 0xa3, 0x0, 0x8, 0x30000000, 0x7f, 0x1, 0x5, 0x8795, 0x4, 0xfffffff7, 0x8, 0x400, 0x9, 0x0, 0x0, 0x1, 0x6, 0x39ad, 0x5, 0x7f, 0x7, 0x1, 0x7ff, 0x3, 0x0, 0x5, 0x3, 0x5, 0x0, 0x3, 0x4068, 0x7, 0x5, 0x8, 0x9, 0x3, 0xe130, 0x4, 0x7d25, 0x2, 0x6, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x3, 0x400, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x8000, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x4, 0x9, 0x61d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40000000, 0x7fff, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0xffffffff, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x8000, 0xfffffffe, 0xe, 0x10000000, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x8, 0x0, 0xfffffff1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x4, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x3d6451f3, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0xc, 0xd, 0x8000003, 0xa, 0x3, 0x1, 0xd, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x44, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0xa, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x7fff, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0xa, 0xbe, 0x47, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x7, 0x6430, 0xd, 0xb, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0xfff, 0xfffffeff, 0x3ff, 0xff, 0xa, 0x3, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x835, 0x1, 0x723, 0x0, 0x9, 0xc, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x1, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0xc, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0xffffffff, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3fa, 0x4, 0x4008, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0xc60}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x641, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xa2002) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) 4m30.727158963s ago: executing program 6 (id=1818): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], &(0x7f00000020c0)=""/4105, 0x66, 0x1009, 0x5, 0x10}, 0x28) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x22) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000440, &(0x7f0000000340), 0x1, 0x593, &(0x7f0000002a40)="$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") setgroups(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) syz_emit_ethernet(0x2c9, &(0x7f0000000c40)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x16, 0x4, 0x0, 0x3f, 0x2bb, 0x65, 0x0, 0xbd, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}, {[@cipso={0x86, 0x43, 0x2, [{0x6, 0xc, "68ed3e5a36bfbb70863e"}, {0x0, 0xe, "0a0a4bf48ae7677b0b2a6d85"}, {0x6, 0x11, "32758e4c749d31e66e33f94986934b"}, {0x2, 0xf, "d8805448897b23b3f08fe66431"}, {0x1, 0x3, "ef"}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x75, 0x0, [], "f51f58c3ae4762acbb15a6623f3699bd39dee948f6310569517213626b2d88d36d93b350ff0568edec89140526906af3ae1b910b8964fd55e466201aeb1304771e691950ad14de7bb001483aa23bc43e23dec947988d5cfb42967eb7e0fba8c8df882acd839ed0fa2a18b857fab53f1a794d46436f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x40], "32e73a76df9fe84afed7274e49f52db94a7882a6704185abf80393657c277dcdb0af6584d4b0a5e5e76de960f10724af3b39c4067c1f888e24f920be6d6c315c58010055d551dcba8326306340a7f466710e07fe278ef192f37d7beb9a1c297a44862db3bcbd21640c20e478bcbf5a31fbab5679d4599f4cd5bc73e54d215988de23f4ffab346a132d0f9d303b512142804b412d42faabe2c3a81c18c5f841ea09279299daf9dbd344d309cbd459017b6f654db0a50dbab9f1"}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1}, 0x1, {0x26}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x8}, 0x2, {0x9, 0x0, 0x2, 0x3, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "5be922064dedfe9a52d9fb45585d4dac027abc6f10462512854fd2223ea4259d6f378e6a04c3fd8ebfbd4c88ef63a514e906a3e118476bdf1b29ad1b4661da33240590f278c4cc44f570db2791747fa461e90df64a3dbfd261f8f6672a9ebc3b31cecc2d1a7e3705d9f1913b21d5a31fb8102639e16936bbc53bf30e91a694d88fbfd4f26ba98d59f519a4e38c9408c5c77c18aaf57767da26992d523ed69cf58008b91717f1b2dc13efa0ab326c0b13c90bc9a96403988bb9fff8eb2cc7891f5cbefa66ea31461fb9e653c421ef511ea5ca702821819a323d16dc15671c280431632f75e3519ee90cccd734b3482f"}}}}}}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x168) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22000, 0xc6b5897ef189faf9) vmsplice(r4, &(0x7f0000000200)=[{&(0x7f0000000300)='%', 0x1}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000200)={r5}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap$usbfs(&(0x7f00004e3000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r7, 0xfffffffffffff000) sendmsg$kcm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000002040)}, 0x8040) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) 4m30.039304178s ago: executing program 6 (id=1824): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10480, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000000000020001fe8000000000000000000000000000bbff020000000000000000000000000001000078565c944e7e8ddacc4e22ff3b3fb3e187872cc01da17b22b6bac005a5d999fa5956b3c5221d92039279c0d59f1d0527813227fea9caf4b526a822ca8579b17a9335bf7d2e75", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5018000090780000"], 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="e38b65178ce83df5a0215de80dcde87974d744f01c0000008e5a5f832d73cfbcfc92ab371a626b2e303e90b1c5dd4a6e34b64b0d6cfa41f8f6b38d269b3b5ea0e8f95105cb5e0e2b6daaefdc53ef2f0a0550a1b472590e5f434aa5052c3e6a823e701d", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf250600000006000b0018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000050) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) r6 = io_uring_setup(0x5756, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x266}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, 0x0, 0x0) lseek(r4, 0x7fffdfff, 0x2) getdents64(r4, &(0x7f0000000300)=""/175, 0xaf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4m29.701990155s ago: executing program 6 (id=1829): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket(0x40000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x700000, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x5, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80), 0x0, 0x20048cc0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x2b1e}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback}}}}) r3 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="89328c70edfad232f0610261b0f1a3291603b8504d9bd421075cb2d2c20930bd0f9f3c"], 0x8) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) write$binfmt_misc(r5, &(0x7f0000000040), 0xfe46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="7e0000000000000000000000000000009500000023000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r3, 0x0, 0x101542, &(0x7f00000000c0)={@align=0x8, {0x1, 0x9, 0x0, 0xdef}}, 0xf, 0x0, &(0x7f0000000240)=0x100}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) pread64(r8, &(0x7f0000001540)=""/4102, 0x1006, 0x4) 4m29.597230747s ago: executing program 6 (id=1830): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='kfr\xb6j\xbdX\xc8\xef\xe1{\x03\xfe]k\x9e\xb8ee\x000\x8eK6\xb8\r\xf8\x13\x9b:\xb40\xb4\xde\x83\x976g\x90j\xb8P1\xd43\x98\xdb4\x96\x8e\xde\x1by\xf9l\xd7\tx\xf6\x8e(\x8b\xe6\xc7p\xdf7Gx\xf6\x99K,J\xe8\x95_T\xd8;\xc1\x05\xae(N\vM$\xbd\nN\x8d\xd5\f\xd4\x9a\xb3`\xf0\x1a\xa0\xa6\xa9\xe4L\xa8\xb1\xd1\xeb&\xd2dm\x8bD~L\xc0\xb6]\xbf\xfe\x10\x16\xbf\xa0)\x8b\xa3\xec\x90\x8e`&?0\'\x00\xa3\x85\xab!\xdaGIZ\x80`\xdb\x99\x15kg\xc8>\x15\x1aQ\x13g\xec{\xe2\xe1p4K\xfc\xf1\xea\n\xc7g\x14\xa2[\xbcn\xfe\xaf\xdc\x10\x83\x915;`\xad\xd8p$F') syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000540)={[{@noblock_validity}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x174f31dc744795f7}, 0x10000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0xfb, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x711, 0xa}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x23}]}}]}, 0x44}}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 4m28.54546269s ago: executing program 6 (id=1838): lstat(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000309361aaa8e55f253139f3f8aa6b7367b9987bc7faae8b4b3c13bf7d2794c13b5e0f8b467258ab11a15d91c06bf701c251b69bc552ce785ab757f5613773c88fadff28d19bb464c17d195fcf5e135dca171a8f441645158362bfb416c3e48d649669731a0313e47e526611a182e278631b54893f5882539a66d0fdd3aeed288339c8dbd52ad81570f58bef85c476e9f8d206de96e3c5e38c05ede965e2e50f5830515367bebb4dace6f09e1e899db8c6f856a95925249a4ac641037d738e08a719bc11117ea7e8c1c5f42a1fbe0398df773e105032551877c126", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x3c420, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRES16, @ANYRESHEX=r2, @ANYBLOB="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"]) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000b00)={0x7, &(0x7f0000000280)=[{0x101, 0x9, 0x1, 0x4}, {0x0, 0x2, 0xb, 0x5}, {0xffc, 0x0, 0x7, 0x3}, {0x9b, 0x9, 0x8, 0x10}, {0x4, 0x5, 0xf5, 0x63}, {0x7ff, 0x1, 0x8, 0x3}, {0x4a, 0x2, 0x0, 0x69769915}]}, 0x10) chown(&(0x7f0000000000)='./file1\x00', r0, 0x0) 4m28.331530095s ago: executing program 6 (id=1840): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)=""/218, 0x14e, 0xda, 0x1, 0xff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000081000007000000000000000080800000", @ANYRES32=0x1, @ANYBLOB="0500000083200000000000000000000000000000b54b8fe4402c19f738fb2a2b687b5ee3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000050000000d00000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x36, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r6 = io_uring_setup(0x3b5f, &(0x7f0000000700)={0x0, 0x30a5, 0x0, 0xffffffff, 0x102}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000990000/0x4000)=nil, 0x4000, &(0x7f0000000540)='+\x00') getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000902, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB="19f987f949eb2f36488723dcafe9dabbda6b3ce61da2fe2629137fc584db3730d9269b479a07d3eecff1fa4987b044ae767b0ad8afbfd7aafa3579262195b0230b78203fccfb3338f69d69879f3aa17d59f82b4973a65727d36073b53841d46c5c5c29d91a308a2b373e0ba678b0dc01ad9621395b59591192a0772d0d0952bf6e3f6b37cac7f3b3be7a699fd129dee2c5c123cad390effd900f1f43a94918d97cabb0ebf1f6043b"], 0x3c}}, 0x8000) 4m28.331151145s ago: executing program 34 (id=1840): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)=""/218, 0x14e, 0xda, 0x1, 0xff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000081000007000000000000000080800000", @ANYRES32=0x1, @ANYBLOB="0500000083200000000000000000000000000000b54b8fe4402c19f738fb2a2b687b5ee3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000050000000d00000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x36, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r6 = io_uring_setup(0x3b5f, &(0x7f0000000700)={0x0, 0x30a5, 0x0, 0xffffffff, 0x102}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000990000/0x4000)=nil, 0x4000, &(0x7f0000000540)='+\x00') getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000902, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB="19f987f949eb2f36488723dcafe9dabbda6b3ce61da2fe2629137fc584db3730d9269b479a07d3eecff1fa4987b044ae767b0ad8afbfd7aafa3579262195b0230b78203fccfb3338f69d69879f3aa17d59f82b4973a65727d36073b53841d46c5c5c29d91a308a2b373e0ba678b0dc01ad9621395b59591192a0772d0d0952bf6e3f6b37cac7f3b3be7a699fd129dee2c5c123cad390effd900f1f43a94918d97cabb0ebf1f6043b"], 0x3c}}, 0x8000) 4m19.151411734s ago: executing program 35 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000005bc000"/90], 0x68) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0x9, 0xd, 0x6, 0x23b0, 0x8, 0x0, 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xe, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8, 0x9, 0x6, 0x6, 0x200000}, {0x8, 0x2, 0x3, 0x7fffffff, 0x1, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_add_watch(r4, 0x0, 0x220) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0xc60, 0x30, 0x12f, 0x0, 0x0, {}, [{0xc4c, 0x1, [@m_police={0xc48, 0x1, 0x0, 0x0, {{0xb}, {0xc1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3a, 0x2, 0xc, 0xd, 0x3b, 0x9, 0x2, 0x4, 0x401, 0x5, 0x26, 0x6c, 0x5, 0x800, 0x100, 0xac, 0x9, 0x5, 0x0, 0x9, 0x0, 0xffffffff, 0x5, 0x9, 0xfffffff9, 0x8001, 0x80000001, 0x9f, 0x1, 0xb9f, 0x86f, 0xfff, 0xd645, 0x2b9, 0xc, 0x10000, 0x3, 0x4, 0x6, 0x1bd4000, 0x0, 0x8, 0x81, 0x9e91, 0xfffffe27, 0x7fff, 0x5, 0x7fff, 0xfffffffd, 0x80, 0x5, 0x0, 0xe, 0x5, 0x4, 0xffffffff, 0x3ff, 0x9717, 0x3, 0xf, 0x4, 0x3, 0x0, 0x6, 0x5, 0x10001, 0x4, 0x6a, 0xd, 0x180, 0x1, 0x200, 0x0, 0x10000, 0x7f, 0x8, 0x10, 0x0, 0x8, 0x3, 0x5, 0xfffff9a1, 0x7, 0x3ff, 0xffffffff, 0x3, 0x6, 0x7, 0x6, 0x9, 0x9fd, 0x690c, 0x9, 0x7f, 0x4, 0x7, 0x1, 0x7ff, 0x2e, 0x6, 0xff, 0x5, 0x8e, 0x1, 0xff, 0xd0, 0x0, 0xd, 0x3, 0x0, 0x7, 0x0, 0x8, 0x6, 0x10, 0x200, 0x8, 0x8, 0x0, 0x7, 0xf, 0x1, 0x101, 0x0, 0x9, 0x2, 0x9, 0x20200, 0x2, 0x3, 0x4, 0x6, 0x6, 0x5c8, 0x9, 0x4, 0x8, 0x81, 0x5d4, 0x8, 0x3, 0x101, 0x6, 0x7, 0xffffff08, 0xff, 0x6, 0x4ff, 0x5, 0xa, 0x0, 0x100, 0x7, 0xffff, 0xa6, 0xf, 0x2cb3, 0x5, 0x1, 0x1, 0x7, 0x0, 0xfff, 0x6, 0x1, 0x9, 0x3, 0x4, 0x808, 0x6, 0x3, 0x23d, 0xb0, 0x8001, 0xb7d1, 0x3, 0x7fff, 0x3, 0x0, 0x6, 0x9, 0x8, 0x4, 0x1b58, 0x6, 0x0, 0x5, 0x7, 0x5, 0x9, 0x55, 0x2, 0x2c0000, 0x7fff, 0xffff, 0x3469, 0x9, 0x9, 0xd05b, 0x4, 0x0, 0x0, 0x5, 0x800, 0xc, 0x1, 0x6, 0xef, 0x2, 0x20a, 0x80000001, 0xffffffff, 0x10001, 0xa3, 0x0, 0x8, 0x30000000, 0x7f, 0x1, 0x5, 0x8795, 0x4, 0xfffffff7, 0x8, 0x400, 0x9, 0x0, 0x0, 0x1, 0x6, 0x39ad, 0x5, 0x7f, 0x7, 0x1, 0x7ff, 0x3, 0x0, 0x5, 0x3, 0x5, 0x0, 0x3, 0x4068, 0x7, 0x5, 0x8, 0x9, 0x3, 0xe130, 0x4, 0x7d25, 0x2, 0x6, 0x9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x3, 0x400, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x8000, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x4, 0x9, 0x61d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40000000, 0x7fff, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0xffffffff, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x8000, 0xfffffffe, 0xe, 0x10000000, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x8, 0x0, 0xfffffff1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x4, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x3d6451f3, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0xc, 0xd, 0x8000003, 0xa, 0x3, 0x1, 0xd, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x44, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0xa, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x7fff, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0xa, 0xbe, 0x47, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0x80000e01, 0x7, 0x6430, 0xd, 0xb, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0xfff, 0xfffffeff, 0x3ff, 0xff, 0xa, 0x3, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x835, 0x1, 0x723, 0x0, 0x9, 0xc, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x1, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0xc, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0xffffffff, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3fa, 0x4, 0x4008, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0xc60}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x641, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xa2002) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) 2m26.320938009s ago: executing program 7 (id=2583): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600000094c9bcc750e5169900", @ANYRES32=r1, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2m25.516435707s ago: executing program 7 (id=2585): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc00) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1981}, 0x0, 0x0) 2m24.649412915s ago: executing program 7 (id=2594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x68) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0x9, 0xd, 0x6, 0x23b0, 0x8, 0x0, 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xe, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8, 0x9, 0x6, 0x6, 0x200000}, {0x8, 0x2, 0x3, 0x7fffffff, 0x1, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) pipe2(&(0x7f00000000c0), 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x641, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xa2002) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) 2m23.817628293s ago: executing program 7 (id=2601): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07010000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01010100ffffffff00000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x1e, 0x4, 0x9, 0x8, 0x4000, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex_waitv(&(0x7f0000000400)=[{0x2eb, &(0x7f0000000200)=0x1, 0x86}], 0x1, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x6, 0x6e1, 0x0, 0x0) syz_read_part_table(0x5c6, &(0x7f0000003880)="$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") r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x600) 2m21.19400777s ago: executing program 7 (id=2617): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0xc0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be"], 0x0) tee(r1, 0xffffffffffffffff, 0x9, 0xa) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r5, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000006000802ff00000108e40000", @ANYRES32=r6], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000300)={r5, 0x9, 0x2ee2, 0x1}, &(0x7f00000003c0)=0x10) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r7, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="23890c", 0x3}], 0x1}}], 0x1, 0x4040040) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0xffffff96) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) 2m20.806703438s ago: executing program 7 (id=2619): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2224, 0x0, 0x43a1bd76, 0x7, 0x9, 0xd095, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = getpid() syz_pidfd_open(r8, 0x0) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000140)={'\x00', 0x39f, 0x6, 0x6, 0x0, 0x716e, r8}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 2m5.737761745s ago: executing program 36 (id=2619): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2224, 0x0, 0x43a1bd76, 0x7, 0x9, 0xd095, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = getpid() syz_pidfd_open(r8, 0x0) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000140)={'\x00', 0x39f, 0x6, 0x6, 0x0, 0x716e, r8}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 7.048378017s ago: executing program 4 (id=3576): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='\\[', 0x2, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 6.684829625s ago: executing program 4 (id=3582): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='\\[', 0x2, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 4.429267504s ago: executing program 4 (id=3587): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc9ab67b, 0x4}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x200005, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f6962000000", @ANYRESOCT], 0x3c}, 0x1, 0xba01}, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={r4, r6, r7}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x7, r5, 0x36}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000045) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="b0010000100001002bbd700000f70000000000000000000000fbb26cc1cab6dbb88bb351206be400ffff64010100ff0100000006000000000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x4050) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c3b7400", @ANYRES16, @ANYBLOB="01002cbd701004000000050000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") 3.051416514s ago: executing program 4 (id=3592): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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") r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) (fail_nth: 5) 2.471235836s ago: executing program 4 (id=3597): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x814) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x6, 0x6e1, 0x0, 0x0) syz_read_part_table(0x5c6, &(0x7f0000003880)="$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") r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x600) 1.923345188s ago: executing program 5 (id=3601): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001714"], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200001d, 0x20010, r3, 0xd837b000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1.811141611s ago: executing program 9 (id=3603): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800002, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x1f, 0x10000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x84, 0x4a, 0x200, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x78, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x84}}, 0x280240c0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02ce01000f"], 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="553900000000000000000100000008000100030000020003000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000510d10895af42492d12e813196dbacc5", @ANYRES16=r11, @ANYBLOB="110227bd7000fbdbdf250700000008000300", @ANYRES32=r12, @ANYBLOB="0a0004007770616e340000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) 1.624555984s ago: executing program 9 (id=3604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x7, 0x0, 0x4) 1.623927504s ago: executing program 5 (id=3605): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c00008000000000000000000053b752900"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.606529095s ago: executing program 9 (id=3606): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xff2e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) r1 = syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x48a, &(0x7f00000007c0)={[{@dioread_lock}, {@nombcache, 0x22}, {@nombcache}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@norecovery}, {@errors_remount}, {@noquota}]}, 0x1, 0x476, &(0x7f00000019c0)="$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") dup3(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x25dfdbff, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x404}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) setresgid(0xee00, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)=""/256, 0x100}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x22, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004f0040009500000000000000cc8cbd5dff13c922c92eb60e043f897683747c9365676f78e4e7841b6a6930f383e62fafde081349e5147759e0e75ce4f12f33fee707f45f3b9c0a1b2646fb11118e74d68fb66ac2ae3ab99ddec62e99521738afd31a1ca9543d1a937075ab3d57a9fd318ab6f8623137d0"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="a605025fe0a513bff3ff3f3b996a5bfb7128770db3a30af2fa48af40ba8fb10491542c1e99abc803dee6a79df077266f0b88b2b358dadf9e549b3c7775a385fb5d846fa4e29c7a92", @ANYRES64=0x0], 0x20) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x63) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000001c0)=0x5) 1.413773819s ago: executing program 5 (id=3608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f0000002600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0xc}, {0xa, 0x5}, {0x10, 0x2}]}, @struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x4, 0x3, 0x2}]}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f00000026c0)=""/250, 0x61, 0xfa, 0x1}, 0x28) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24004010) 1.413435439s ago: executing program 1 (id=3609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa20000000000000702", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getresuid(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1008}, 0x44004) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) preadv(r2, &(0x7f0000002d00)=[{&(0x7f00000005c0)=""/160, 0xa0}], 0x1, 0x101, 0x1) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0xfffffffffffffee8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 1.071120106s ago: executing program 1 (id=3610): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x41000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x50, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xb, 0xffffffffffffffff, 0xa) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) getpgid(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000800000"], 0x0, 0x1a, 0x0, 0x0, 0x2000}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffa, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.036664487s ago: executing program 1 (id=3611): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002480)={0x420, 0x3f3, 0x300, 0x70bd2b, 0x25dfdbff, {0x2, 0x2, 0x33, [0x2, 0x4, 0x9, 0xe, 0x47, 0x1, 0x6, 0x1, 0xe091, 0x8001, 0x2, 0x2, 0xffffffff, 0x4e, 0x8, 0x7fffffff, 0x8ff, 0x4, 0x8000, 0x3e58, 0xb, 0x7fffffff, 0x400, 0x0, 0x5, 0x5, 0x58a, 0xb5b, 0x9, 0x1, 0x5, 0x8, 0x1, 0x5, 0xa, 0xfff, 0x8, 0x6, 0x0, 0x800, 0x3, 0x10, 0x8, 0x3, 0xaa3aaaf, 0x400, 0x0, 0x400, 0xd, 0x8, 0xe3, 0x4, 0x3, 0x1, 0xc4a, 0x9, 0x7fffffff, 0x7, 0x2, 0x60, 0x6, 0x1, 0x9, 0x5], [0x2, 0x1, 0x80, 0x100, 0x0, 0x3, 0x6, 0x7fffffff, 0x3, 0x2, 0x9, 0x0, 0x10000, 0xd, 0x7484, 0x2, 0x19, 0x10000, 0x8, 0x3d5, 0xfff, 0xe825, 0x4, 0x5, 0x0, 0x1, 0x7, 0x8, 0x87, 0xfff, 0x7, 0x2, 0x6, 0x4fc, 0x7ff, 0x4, 0x9, 0x1738e570, 0x3, 0x80000000, 0x31b, 0x2, 0x8a, 0x0, 0x28cf, 0x9, 0xb2, 0x200, 0x7, 0x712, 0xa0a, 0x1, 0x0, 0x7, 0x0, 0x7, 0xffff8000, 0x9, 0x5, 0xfffffffe, 0x6f, 0x1ff, 0xc, 0x3], [0x6, 0x3, 0x6, 0x3ff, 0x40, 0x6, 0xffff, 0x2499, 0x2000000, 0x0, 0x3, 0x1, 0x1, 0x7, 0x0, 0x7, 0x7, 0x3, 0x80, 0x2e72, 0x3, 0x4, 0x0, 0x4a8, 0xb6, 0x9, 0x6, 0x5, 0x1000, 0xffff, 0xc, 0x10000, 0x12000000, 0xcf7, 0x4c, 0x6, 0x2, 0xffff0000, 0x1, 0x0, 0x7, 0x0, 0x101, 0x41, 0x9, 0x6, 0xfffffffb, 0x9, 0x0, 0xffff, 0x6, 0x3, 0x36a, 0x1, 0x0, 0xfffffff9, 0x9, 0x2, 0xfffffc01, 0x1, 0x0, 0x100, 0xaa9, 0xac73], [0x2, 0x8, 0x2, 0x857, 0x9, 0xe, 0x7fff, 0xaf, 0x211e, 0x7, 0x8, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0xfffffffe, 0x8, 0x8, 0x1, 0x3, 0x6, 0xb, 0x8000, 0xfff, 0x1000, 0x5c5e32a8, 0xc55, 0x33, 0xfffffffd, 0xa917, 0x30e, 0x1, 0x3, 0xfffffffc, 0x1, 0x3, 0x0, 0x7, 0x8, 0x3, 0x1, 0x8, 0x39b, 0xbae, 0x5, 0x400, 0x2, 0x1, 0x4, 0x8, 0x7, 0xff, 0x396f, 0x4000, 0x39247b6a, 0x2, 0x400, 0x10001, 0x6, 0x9, 0x100, 0x2, 0x5]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x3, 0x3, 0x5, 0x1, 0x0, 0xfd, 0x40000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xd7d, 0x9}, 0x110000, 0x8a, 0x4481, 0x1, 0xffffffffffffffc0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000400)={0x3, 0x80, 0x5, 0x4, 0x6b, 0x74, 0x0, 0x1, 0x20802, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000003c0), 0xe}, 0x12000, 0x25, 0x4, 0x4, 0x7, 0x1, 0x7ff, 0x0, 0x1000, 0x0, 0x10000}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000600b00638a9c5e86f65000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = getpgid(0x0) tkill(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r6 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000380)='\x00', 0x0) request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='[^+{\x00', r6) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r5, 0x0, 0x37e9, 0x2f92) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0xd0}, 0x40015) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000850) 1.019295048s ago: executing program 1 (id=3612): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='\\[', 0x2, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 862.588671ms ago: executing program 8 (id=3614): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) socket$unix(0x1, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nfc(0x0, r4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x807ff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 819.366262ms ago: executing program 8 (id=3615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 783.600923ms ago: executing program 8 (id=3616): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) 782.969363ms ago: executing program 8 (id=3617): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc9ab67b, 0x4}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x200005, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f6962000000", @ANYRESOCT], 0x3c}, 0x1, 0xba01}, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={r4, r6, r7}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x7, r5, 0x36}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000045) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="b0010000100001002bbd700000f70000000000000000000000fbb26cc1cab6dbb88bb351206be400ffff64010100ff0100000006000000000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x4050) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c3b7400", @ANYRES16=r11, @ANYBLOB="01002cbd701004000000050000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") 764.230483ms ago: executing program 1 (id=3618): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x0, 0x52c, &(0x7f0000000640)="$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") ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 644.761336ms ago: executing program 9 (id=3619): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x11, r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18, 0x4000}, 0x80) connect$unix(r6, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r6, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18, 0x40001}}], 0x47f, 0xa4ff) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty=0x18, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 602.597676ms ago: executing program 4 (id=3620): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffe72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000230a1d41747fb88c24e50ae3905d7c3bef066dc710ce12702e9a845c6a6e00c95bb5da94462005dec0585a99b84f45fa4df2b2da88b3996870b4a5a6cbb4225c2365c90bdc437fcb11fcb5970fa776a1c575a434229b8a75593bd773cfd5a362d6a341fbcf555f3784122ff55837ccfe3c03f9e8f0d4a1ef4772e5f13569e1749178feaf7f34c9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x400c000, &(0x7f000005ffe4)={0xa, 0x0, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) select(0x40, &(0x7f00000002c0)={0xf, 0x2, 0xe, 0x7, 0x4, 0x9, 0x10000, 0x7}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) shutdown(r1, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffff00240066000000119078000000000000000044048d0000014e20000c90780100000000000000000000000000005f4a287c48743d3ad05ebc7b3839056431cc4704f7ec0cc7b7e8d0b5a94023d8e03b36f91dbb1fde99b42e210eb905a9f9da682e974779124d3f6b825c4aa36bceae9de6c18bca76cc9b74b0c1d4f4328c6944ec59aadae3a9cad8578c93ba1a72c59fe11bd5057acdb2ebcc35edd692f68107aeb4b34b4581d2d949e91e8ba65515ecc4864a22d0"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x3, 0x1, 0x401}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @broadcast}, 0xc) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/226, 0xe2}, 0x718}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/13, 0xd}, 0x2}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 528.140778ms ago: executing program 5 (id=3621): r0 = socket$netlink(0x10, 0x3, 0x14) kexec_load(0x5, 0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000041401002dbd7000fedbdf25080001000100000008"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x48800) 527.756158ms ago: executing program 9 (id=3622): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x41000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x50, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xb, 0xffffffffffffffff, 0xa) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) getpgid(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000800000"], 0x0, 0x1a, 0x0, 0x0, 0x2000}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffa, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001b00), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 525.348928ms ago: executing program 1 (id=3623): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x9, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 458.04948ms ago: executing program 5 (id=3624): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000041401002dbd7000fedbdf25080001000100000008"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x48800) (fail_nth: 1) 457.52284ms ago: executing program 8 (id=3625): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) socket$unix(0x1, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nfc(0x0, r4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x807ff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 248.809994ms ago: executing program 5 (id=3626): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x7fff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800), 0x0, &(0x7f0000000200)}, 0x4c890) accept(r0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xd, 0x80) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000040)=0x1) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) getdents(r3, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mkdirat(r2, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xc3, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x1, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8ee, 0x35}, [@selector_unit={0x8, 0x24, 0x5, 0x4, 0x4, "13b453"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x6, "361b2a"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0xdf3, 0x5, 0x46, 0x1000, 0x5, 0xff}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x6, 0xa, 0x3, 0x7], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x87, 0x2, 0x2, 0x2, "9e", '\a4'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x1, 0x3, 0x1}, @as_header={0x7, 0x24, 0x1, 0x3a, 0x96, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf2, 0x3, 0xf7, {0x7, 0x25, 0x1, 0x4, 0x5, 0xff80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x3, 0x10, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0x81, 0x7f, {0x7, 0x25, 0x1, 0x4, 0x7f, 0xaf2}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x9, 0x3, 0x9, 0x40}, 0x2c, &(0x7f0000000480)={0x5, 0xf, 0x2c, 0x4, [@wireless={0xb, 0x10, 0x1, 0xa, 0x8e, 0x7, 0xb1, 0x7fff, 0xe7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xd, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xf, 0x91, 0xfffc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe1, 0x8, 0xbe, 0x4, 0x40}]}, 0x5, [{0x53, &(0x7f0000000500)=@string={0x53, 0x3, "2053a0a4353ef3fa36c64390c2121aac2a21c59322318424f0318826080828cd18da8c7a61bb9ee299d1dab25059e8ea52b1b3e2b9ff7e6300003d5bfc89d9849253fa5809c4535b0a8110ae7ec095dc1e"}}, {0x63, &(0x7f0000000600)=@string={0x63, 0x3, "14760377a1d3a9f8f751dc4f3a2c1ab6f0279c49dd3338cbd9f9607fd1557707a2ec6c8eb9070333f85d4d6c6c98f9b4c8f494a77040f8edbaf619cb3f8f668a1f6e90bb80481820d557de08f47ffef5b27423f4aea721b31e5eec788cde7c3793"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44a}}, {0xce, &(0x7f00000006c0)=@string={0xce, 0x3, "b320f33860641edd32de19579c6d7f675cb35eee887e25290869c6dec56b478cc52f651859c3bef5ecfacbac9839a774aec2fe71bd1e9ba9983005ee77f8843138e49027e894e7f95a20b4513896d97363561464fd1570f0a1ffb25458450ab50e1cf98ba750891417a28d758490cea5bf51f516ce0f0ea0b01698d255a176dbcbc91cddc29c455c2f1cd3b0468ab1f9c4dd95af1201c3c3b0cdace4ffa361bf8d1bcbe6c289d2ab997c3245a0b9b58be606a3ee8bb494eb1f31364b03dbf87c39641f01881e7f5fc1d0ed45"}}, {0x7a, &(0x7f00000007c0)=@string={0x7a, 0x3, "a12da960daf92128931fc0030961cbb58dd91513e577ebf4dc7468d8d0284fec9044b0b29b7d7284806cabc1ada60e8aa3899541b75f57172191e057ec1260c6784c9b0fd252345fae0ced598d5c21b16971e0c98ffceeb64cbca9dc711f99013f4f2d96d09738ac2ecbf301989148de210700ef13d7ae08"}}]}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/14, 0xe, 0xfff7fffc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040090) 55.251088ms ago: executing program 9 (id=3627): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='./cgroup\x00') 0s ago: executing program 8 (id=3628): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd0000006811068061"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004c80), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x60, r3, 0x1, 0x70bd26, 0x25dfd3fe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:sshd_key_t:s0\x00'}]}, 0x60}}, 0x4080) kernel console output (not intermixed with test programs): netlink: 'syz.5.3127': attribute type 1 has an invalid length. [ 568.903813][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.943286][T15840] 9p: Bad value for 'wfdno' [ 568.964083][T15838] loop9: detected capacity change from 0 to 512 [ 569.004360][T15838] vfat filesystem being mounted at /84/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 569.034351][T15845] can: request_module (can-proto-0) failed. [ 569.055932][T15845] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 569.074118][T15845] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 569.128387][T15852] loop4: detected capacity change from 0 to 256 [ 569.135049][T15852] vfat: Unknown parameter './file2' [ 569.447374][T15866] random: crng reseeded on system resumption [ 569.507444][T15868] netlink: 'syz.5.3140': attribute type 1 has an invalid length. [ 569.796414][T15870] loop8: detected capacity change from 0 to 4096 [ 569.798912][T15870] EXT4-fs: Ignoring removed bh option [ 569.807452][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.827036][T15876] can: request_module (can-proto-0) failed. [ 569.869843][T15870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.880086][T15876] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 569.880110][T15876] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 570.053588][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.152085][T15897] loop1: detected capacity change from 0 to 512 [ 570.211520][T15897] EXT4-fs: Ignoring removed orlov option [ 570.242380][T15897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 570.260836][T15897] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.3149: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 570.279084][T15897] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 570.279312][T15897] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3149: couldn't read orphan inode 16 (err -117) [ 570.288653][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 570.288701][ C0] EXT4-fs (loop1): initial error at time 3932130308: ext4_ext_check_inode:521: inode 16 [ 570.288735][ C0] EXT4-fs (loop1): last error at time 3932130308: ext4_ext_check_inode:521: inode 16 [ 570.347455][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.384654][T15897] loop1: lost filesystem error report for type 5 error -117 [ 570.536793][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.903825][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 570.903845][ T28] audit: type=1400 audit(3932130309.034:3687): avc: denied { read } for pid=15908 comm="syz.4.3153" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 570.959517][ T28] audit: type=1400 audit(3932130309.044:3688): avc: denied { mount } for pid=15908 comm="syz.4.3153" name="/" dev="ramfs" ino=45227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 571.232042][T15906] loop9: detected capacity change from 0 to 512 [ 571.238949][T15906] EXT4-fs: Ignoring removed nobh option [ 571.244645][T15906] EXT4-fs: Ignoring removed oldalloc option [ 571.264802][T15897] EXT4-fs (loop1): 1 orphan inode deleted [ 571.271390][T15897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.284645][T15906] EXT4-fs: old and new quota format mixing [ 571.385233][T15916] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 571.409642][T15916] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 571.426954][ T28] audit: type=1326 audit(3932130309.604:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.457182][T15914] can: request_module (can-proto-0) failed. [ 571.468902][ T28] audit: type=1326 audit(3932130309.604:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d2063e6ce code=0x7ffc0000 [ 571.485492][T15921] loop4: detected capacity change from 0 to 256 [ 571.494561][ T28] audit: type=1326 audit(3932130309.604:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.526422][ T28] audit: type=1326 audit(3932130309.604:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.526776][T15921] vfat: Unknown parameter './file2' [ 571.552376][ T28] audit: type=1326 audit(3932130309.604:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.594084][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.609545][ T28] audit: type=1326 audit(3932130309.604:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.635758][ T28] audit: type=1326 audit(3932130309.604:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.703209][ T28] audit: type=1326 audit(3932130309.604:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15917 comm="syz.5.3155" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d2067de99 code=0x7ffc0000 [ 571.743110][T15929] FAULT_INJECTION: forcing a failure. [ 571.743110][T15929] name failslab, interval 1, probability 0, space 0, times 0 [ 571.760803][T15929] CPU: 1 UID: 0 PID: 15929 Comm: syz.1.3157 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 571.760845][T15929] Tainted: [W]=WARN [ 571.760854][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.760869][T15929] Call Trace: [ 571.760884][T15929] [ 571.760892][T15929] __dump_stack+0x1d/0x30 [ 571.760919][T15929] dump_stack_lvl+0x95/0xd0 [ 571.760978][T15929] dump_stack+0x15/0x1b [ 571.761003][T15929] should_fail_ex+0x25e/0x270 [ 571.761033][T15929] should_failslab+0x8c/0xb0 [ 571.761060][T15929] __kvmalloc_node_noprof+0x15b/0x590 [ 571.761103][T15929] ? io_alloc_cache_init+0x36/0xb0 [ 571.761139][T15929] ? io_alloc_cache_init+0x36/0xb0 [ 571.761176][T15929] io_alloc_cache_init+0x36/0xb0 [ 571.761224][T15929] io_ring_ctx_alloc+0x303/0x630 [ 571.761259][T15929] io_uring_create+0x4d/0x4f0 [ 571.761316][T15929] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 571.761361][T15929] __x64_sys_io_uring_setup+0x31/0x40 [ 571.761387][T15929] x64_sys_call+0x2962/0x3020 [ 571.761480][T15929] do_syscall_64+0x136/0x3c0 [ 571.761564][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.761587][T15929] RIP: 0033:0x7fefc63ade99 [ 571.761605][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.761625][T15929] RSP: 002b:00007fefc4e07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 571.761731][T15929] RAX: ffffffffffffffda RBX: 00007fefc6635fa0 RCX: 00007fefc63ade99 [ 571.761749][T15929] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b78 [ 571.761765][T15929] RBP: 00007fefc4e07090 R08: 0000000000000000 R09: 0000000000000000 [ 571.761832][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.761854][T15929] R13: 00007fefc6636038 R14: 00007fefc6635fa0 R15: 00007ffd64c181f8 [ 571.761950][T15929] [ 572.144515][T15933] random: crng reseeded on system resumption [ 572.278367][T10760] bridge_slave_1: left allmulticast mode [ 572.284846][T10760] bridge_slave_1: left promiscuous mode [ 572.537663][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.565882][T15942] loop8: detected capacity change from 0 to 1024 [ 572.630195][T10760] bridge_slave_0: left allmulticast mode [ 572.651490][T10760] bridge_slave_0: left promiscuous mode [ 572.670518][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.702796][T15942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.906073][T10760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.927086][T10760] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 572.936389][T10760] bond0 (unregistering): Released all slaves [ 573.013825][T10760] bond1 (unregistering): (slave veth5): Releasing active interface [ 573.118201][T10760] bond1 (unregistering): Released all slaves [ 573.139927][T10760] bond2 (unregistering): (slave veth7): Releasing active interface [ 573.149838][T10760] bond2 (unregistering): Released all slaves [ 573.160784][T10760] bond3 (unregistering): (slave veth9): Releasing active interface [ 573.170205][T10760] bond3 (unregistering): Released all slaves [ 573.179288][T10760] bond4 (unregistering): Released all slaves [ 573.197076][T10760] bond5 (unregistering): Released all slaves [ 573.217066][T10760] bond6 (unregistering): Released all slaves [ 573.237673][T10760] bond7 (unregistering): Released all slaves [ 573.255555][T10760] bond8 (unregistering): Released all slaves [ 573.277100][T10760] bond9 (unregistering): Released all slaves [ 573.301684][T10760] bond10 (unregistering): (slave veth17): Releasing backup interface [ 573.311850][T10760] bond10 (unregistering): Released all slaves [ 573.363939][T10760] bond11 (unregistering): (slave veth19): Releasing backup interface [ 573.378223][T10760] bond11 (unregistering): Released all slaves [ 573.399744][T10760] bond12 (unregistering): Released all slaves [ 573.423234][T10760] bond13 (unregistering): Released all slaves [ 573.433006][T10760] bond14 (unregistering): Released all slaves [ 573.442200][T10760] bond15 (unregistering): Released all slaves [ 573.470359][T10760] bond16 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 573.495863][T10760] bond16 (unregistering): Released all slaves [ 573.515324][T15966] can: request_module (can-proto-0) failed. [ 573.525189][T15966] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 573.533099][T15966] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 573.668326][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.700257][T10760] tipc: Left network mode [ 573.708027][T10760] hsr_slave_0: left promiscuous mode [ 573.714490][T10760] hsr_slave_1: left promiscuous mode [ 573.720307][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.728115][T10760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.736770][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.744474][T10760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.786732][T10760] veth1_macvtap: left promiscuous mode [ 573.805180][T10760] veth0_macvtap: left promiscuous mode [ 573.824507][T15979] loop8: detected capacity change from 0 to 4096 [ 573.838253][T10760] veth1_vlan: left promiscuous mode [ 573.852776][T10760] veth0_vlan: left promiscuous mode [ 573.869570][T15979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.100590][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.422214][T10760] team0 (unregistering): Port device team_slave_0 removed [ 574.646605][T15993] loop1: detected capacity change from 0 to 256 [ 574.706364][T15993] vfat: Unknown parameter './file2' [ 575.023935][T16000] loop9: detected capacity change from 0 to 256 [ 575.059086][T15998] random: crng reseeded on system resumption [ 575.249907][T16000] vfat: Unknown parameter './file2' [ 575.317143][T16006] netlink: 'syz.8.3180': attribute type 3 has an invalid length. [ 575.607022][T16006] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.3180'. [ 575.651407][T16010] random: crng reseeded on system resumption [ 576.000222][T10760] IPVS: stop unused estimator thread 0... [ 576.173588][T16024] syzkaller0: entered promiscuous mode [ 576.191694][T16024] syzkaller0: entered allmulticast mode [ 576.224559][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 576.224577][ T28] audit: type=1400 audit(3932130314.404:3727): avc: denied { map } for pid=16019 comm="syz.9.3185" path="socket:[45333]" dev="sockfs" ino=45333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 576.260455][T16027] loop4: detected capacity change from 0 to 512 [ 576.276383][T16027] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3187: corrupted in-inode xattr: e_value size too large [ 576.311485][T16027] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 576.312973][T16027] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3187: couldn't read orphan inode 15 (err -117) [ 576.334077][T16027] loop4: lost filesystem error report for type 5 error -117 [ 576.346782][T16027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.464194][ T28] audit: type=1400 audit(3932130314.544:3728): avc: denied { ioctl } for pid=16031 comm="syz.5.3188" path="socket:[45341]" dev="sockfs" ino=45341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.490859][ T28] audit: type=1400 audit(3932130314.624:3729): avc: denied { setopt } for pid=16037 comm="syz.5.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 577.282541][ T28] audit: type=1400 audit(3932130315.454:3730): avc: denied { bind } for pid=16042 comm="syz.9.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 577.343747][T16048] netlink: 'syz.8.3192': attribute type 3 has an invalid length. [ 577.388088][T16048] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.3192'. [ 577.426265][T16053] bridge0: port 3(veth3) entered blocking state [ 577.432635][T16053] bridge0: port 3(veth3) entered forwarding state [ 577.439234][T16053] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.446467][T16053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.453751][T16053] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.460922][T16053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.533068][ T28] audit: type=1400 audit(3932130315.694:3731): avc: denied { write } for pid=16055 comm="syz.8.3195" path="socket:[46498]" dev="sockfs" ino=46498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 577.709133][T16053] A link change request failed with some changes committed already. Interface gcan0 may have been left with an inconsistent configuration, please check. [ 577.813405][T16052] A link change request failed with some changes committed already. Interface gcan0 may have been left with an inconsistent configuration, please check. [ 577.855576][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3195'. [ 577.865402][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3195'. [ 577.931549][T16062] loop1: detected capacity change from 0 to 256 [ 577.973392][T16064] loop8: detected capacity change from 0 to 512 [ 577.986402][T16062] vfat: Unknown parameter './file2' [ 578.009167][T16064] EXT4-fs: Ignoring removed orlov option [ 578.033844][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3199'. [ 578.185200][T16064] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 578.200132][T16064] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #16: comm syz.8.3198: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 578.369977][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.379556][T16073] random: crng reseeded on system resumption [ 578.505524][T16064] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 578.507669][T16064] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3198: couldn't read orphan inode 16 (err -117) [ 578.516968][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 578.516986][ C0] EXT4-fs (loop8): initial error at time 3932130316: ext4_ext_check_inode:521: inode 16 [ 578.517012][ C0] EXT4-fs (loop8): last error at time 3932130316: ext4_ext_check_inode:521: inode 16 [ 578.786962][T16064] loop8: lost filesystem error report for type 5 error -117 [ 578.788692][T16064] EXT4-fs (loop8): 1 orphan inode deleted [ 578.879576][T16064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.978648][T16087] syzkaller1: entered promiscuous mode [ 578.984409][T16087] syzkaller1: entered allmulticast mode [ 579.152954][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.320760][ T28] audit: type=1400 audit(3932130317.484:3732): avc: denied { setopt } for pid=16096 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 579.524126][T16099] loop1: detected capacity change from 0 to 512 [ 579.535696][T16099] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 579.577444][T16099] netlink: 'syz.1.3204': attribute type 10 has an invalid length. [ 579.783952][T16099] team0: Port device dummy0 added [ 579.962628][T16108] netlink: 'syz.9.3205': attribute type 3 has an invalid length. [ 579.971162][T16108] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.3205'. [ 579.988080][T16109] loop8: detected capacity change from 0 to 512 [ 580.058303][T16109] EXT4-fs (loop8): 1 orphan inode deleted [ 580.064621][T16109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.084724][T16109] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.097048][ T37] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 580.102718][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3208'. [ 580.107082][ T37] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 580.184084][T16117] 9p: Bad value for 'rfdno' [ 580.189308][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3209'. [ 580.200366][T16117] netlink: 16215 bytes leftover after parsing attributes in process `syz.9.3209'. [ 580.276701][T16124] loop9: detected capacity change from 0 to 256 [ 580.302258][T16124] vfat: Unknown parameter './file2' [ 580.588305][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 580.652587][T16128] random: crng reseeded on system resumption [ 580.824978][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.077529][T16139] loop1: detected capacity change from 0 to 4096 [ 581.086804][T16139] EXT4-fs: Ignoring removed bh option [ 581.108538][T16139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.133358][ T28] audit: type=1400 audit(3932130319.304:3733): avc: denied { write } for pid=16138 comm="syz.1.3217" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 581.170705][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 581.221765][T16148] netlink: 'syz.5.3218': attribute type 3 has an invalid length. [ 581.230150][T16148] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.3218'. [ 581.352058][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3219'. [ 581.408019][ T28] audit: type=1400 audit(3932130319.564:3734): avc: denied { sqpoll } for pid=16155 comm="syz.9.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 581.485726][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.529373][T16161] syzkaller0: entered promiscuous mode [ 581.534976][T16161] syzkaller0: entered allmulticast mode [ 581.541586][T16161] tipc: Started in network mode [ 581.551091][T16161] tipc: Node identity 728ee7d9696c, cluster identity 4711 [ 581.567133][ T28] audit: type=1400 audit(3932130319.744:3735): avc: denied { bind } for pid=16163 comm="syz.5.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.588829][T16161] tipc: Enabled bearer , priority 0 [ 581.605087][T16166] FAULT_INJECTION: forcing a failure. [ 581.605087][T16166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.608131][ T28] audit: type=1400 audit(3932130319.744:3736): avc: denied { listen } for pid=16163 comm="syz.5.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.638248][ T28] audit: type=1400 audit(3932130319.744:3737): avc: denied { connect } for pid=16163 comm="syz.5.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.638280][ T28] audit: type=1400 audit(3932130319.744:3738): avc: denied { write } for pid=16163 comm="syz.5.3225" path="socket:[45476]" dev="sockfs" ino=45476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.638438][ T28] audit: type=1400 audit(3932130319.744:3739): avc: denied { accept } for pid=16163 comm="syz.5.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.638520][ T28] audit: type=1400 audit(3932130319.744:3740): avc: denied { read } for pid=16163 comm="syz.5.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.638631][T16166] CPU: 0 UID: 0 PID: 16166 Comm: syz.9.3224 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 581.638701][T16166] Tainted: [W]=WARN [ 581.638708][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.638740][T16166] Call Trace: [ 581.638749][T16166] [ 581.638759][T16166] __dump_stack+0x1d/0x30 [ 581.638787][T16166] dump_stack_lvl+0x95/0xd0 [ 581.638853][T16166] dump_stack+0x15/0x1b [ 581.638876][T16166] should_fail_ex+0x25e/0x270 [ 581.638910][T16166] should_fail+0xb/0x20 [ 581.639013][T16166] should_fail_usercopy+0x1a/0x20 [ 581.639047][T16166] _copy_from_user+0x1c/0xb0 [ 581.639149][T16166] sock_do_ioctl+0xe5/0x230 [ 581.639176][T16166] sock_ioctl+0x439/0x610 [ 581.639202][T16166] ? __pfx_sock_ioctl+0x10/0x10 [ 581.639227][T16166] __se_sys_ioctl+0xce/0x140 [ 581.639258][T16166] __x64_sys_ioctl+0x43/0x50 [ 581.639331][T16166] x64_sys_call+0x1563/0x3020 [ 581.639361][T16166] do_syscall_64+0x136/0x3c0 [ 581.639462][T16166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.639488][T16166] RIP: 0033:0x7fbfd020de99 [ 581.639506][T16166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.639543][T16166] RSP: 002b:00007fbfcec46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.639572][T16166] RAX: ffffffffffffffda RBX: 00007fbfd0496090 RCX: 00007fbfd020de99 [ 581.639589][T16166] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 000000000000000b [ 581.639604][T16166] RBP: 00007fbfcec46090 R08: 0000000000000000 R09: 0000000000000000 [ 581.639619][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.639634][T16166] R13: 00007fbfd0496128 R14: 00007fbfd0496090 R15: 00007ffd30ab5e88 [ 581.639654][T16166] [ 581.686558][T16167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3225'. [ 581.728913][T16160] tipc: Resetting bearer [ 581.734656][T16160] tipc: Disabling bearer [ 581.846839][T16169] loop8: detected capacity change from 0 to 512 [ 582.018809][T16164] loop1: detected capacity change from 0 to 1024 [ 582.288030][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3228'. [ 582.301902][T16178] loop4: detected capacity change from 0 to 256 [ 582.311239][T16164] EXT4-fs: Mount option(s) incompatible with ext3 [ 582.329240][T16169] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 582.337030][T16169] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.3226: corrupted in-inode xattr: e_value size too large [ 582.359656][T16178] vfat: Unknown parameter './file2' [ 582.407755][T16169] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 582.413575][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 582.429274][ C0] EXT4-fs (loop8): initial error at time 3932130320: ext4_iget_extra_inode:5180: inode 15 [ 582.439256][ C0] EXT4-fs (loop8): last error at time 3932130320: ext4_iget_extra_inode:5180: inode 15 [ 582.452038][T16169] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3226: couldn't read orphan inode 15 (err -117) [ 582.467951][T16169] loop8: lost filesystem error report for type 5 error -117 [ 582.514591][T16169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.527790][T16184] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3230'. [ 582.584799][ T28] audit: type=1400 audit(3932130320.724:3741): avc: denied { connect } for pid=16162 comm="syz.1.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.728940][T16190] random: crng reseeded on system resumption [ 582.910335][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.938509][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3232'. [ 583.012546][T16195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.056183][T16185] loop1: detected capacity change from 0 to 8192 [ 583.087247][ T28] audit: type=1400 audit(3932130320.944:3742): avc: denied { write } for pid=16168 comm="syz.8.3226" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 583.094186][T16195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.109542][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.118738][T16185] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 583.163424][T16185] vfat filesystem being mounted at /44/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 583.238687][T16202] netlink: 'syz.9.3235': attribute type 3 has an invalid length. [ 583.259343][T16202] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.3235'. [ 583.340455][T16210] loop9: detected capacity change from 0 to 128 [ 583.403582][T16210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 583.411701][T16204] loop4: detected capacity change from 0 to 2048 [ 583.413453][T16210] System zones: [ 583.421472][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3241'. [ 583.422899][T16210] 1-3 [ 583.434660][T16208] loop1: detected capacity change from 0 to 512 [ 583.434675][T16210] , 19-19, 35-36 [ 583.435245][T16210] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 583.465108][T16210] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 583.476025][T16208] EXT4-fs: Ignoring removed nobh option [ 583.510577][T16210] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 583.544624][T16208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 583.551686][T16208] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3237: EA inode hash validation failed [ 583.553061][T14196] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 583.564229][T16208] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 583.564394][T16208] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3237: corrupted inode contents [ 583.597924][T16208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.598252][T16208] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.3237: mark_inode_dirty error [ 583.618854][T16208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.619130][T16208] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3237: corrupted inode contents [ 583.641230][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 583.641279][ C0] EXT4-fs (loop1): initial error at time 3932130321: ext4_do_update_inode:5742: inode 15 [ 583.641379][ C0] EXT4-fs (loop1): last error at time 3932130321: ext4_dirty_inode:6639: inode 15 [ 583.702344][T16208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.756196][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3245'. [ 583.794708][T16208] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.3237: mark_inode_dirty error [ 583.821865][T16208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.828588][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.838348][T16204] Alternate GPT is invalid, using primary GPT. [ 583.854298][T16230] loop9: detected capacity change from 0 to 256 [ 583.860943][T16230] vfat: Unknown parameter './file2' [ 583.866309][T16208] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.3237: mark inode dirty (error -117) [ 583.878957][T16208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.905077][T16208] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 583.923449][T16208] EXT4-fs (loop1): 1 orphan inode deleted [ 583.947361][T16204] loop4: p1 p2 p3 [ 584.032997][T16208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 584.053629][ T2980] Alternate GPT is invalid, using primary GPT. [ 584.059937][ T2980] loop4: p1 p2 p3 [ 584.156438][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.235200][T16240] random: crng reseeded on system resumption [ 584.800578][T16263] netlink: 'syz.9.3255': attribute type 11 has an invalid length. [ 584.816721][T16263] xt_time: unknown flags 0xc [ 584.820574][ T28] audit: type=1400 audit(3932130322.974:3743): avc: denied { read } for pid=16260 comm="syz.4.3254" path="socket:[45657]" dev="sockfs" ino=45657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.846243][T16263] loop9: detected capacity change from 0 to 512 [ 584.861552][T16265] can: request_module (can-proto-0) failed. [ 584.869234][T16263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 584.877339][T16265] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 584.885731][T16263] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.892888][T16265] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 584.903750][T16263] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 584.988182][T16263] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 585.008151][T16263] EXT4-fs (loop9): 1 truncate cleaned up [ 585.017495][T16263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.086351][T16263] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 585.295257][T14196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.479410][T16298] loop1: detected capacity change from 0 to 256 [ 585.488272][T16298] vfat: Unknown parameter './file2' [ 586.649417][T16302] random: crng reseeded on system resumption [ 586.702613][T16300] dummy0: left promiscuous mode [ 586.723286][T16300] netlink: 'syz.5.3264': attribute type 10 has an invalid length. [ 586.731994][T16300] __nla_validate_parse: 1 callbacks suppressed [ 586.732013][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3264'. [ 586.747498][T16300] dummy0: entered promiscuous mode [ 586.789289][T16313] EXT4-fs: Ignoring removed nobh option [ 586.807742][T16313] EXT4-fs (loop8): orphan cleanup on readonly fs [ 586.828783][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 586.828800][ T28] audit: type=1400 audit(3932130324.964:3746): avc: denied { read } for pid=16315 comm="syz.1.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.853670][T16313] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.3269: EA inode hash validation failed [ 586.855563][T16316] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 586.867823][T16313] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.3269: corrupted inode contents [ 586.898372][T16313] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.913572][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 586.929698][ C1] EXT4-fs (loop8): initial error at time 3932130325: ext4_do_update_inode:5742: inode 15 [ 586.939605][ C1] EXT4-fs (loop8): last error at time 3932130325: ext4_do_update_inode:5742: inode 15 [ 586.941992][T16313] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.3269: mark_inode_dirty error [ 586.950677][T16316] bond2: option mode: invalid value (9) [ 586.979730][T16316] bond2 (unregistering): Released all slaves [ 587.056781][T16313] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 587.060477][T16318] team0: Port device dummy0 removed [ 587.060995][T16313] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.3269: corrupted inode contents [ 587.094228][T16313] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 587.094401][T16313] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.3269: mark_inode_dirty error [ 587.095431][T16322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3273'. [ 587.103545][T16313] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 587.103733][T16313] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.3269: mark inode dirty (error -117) [ 587.146448][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3271'. [ 587.155586][T16313] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 587.164739][T16313] EXT4-fs (loop8): 1 orphan inode deleted [ 587.170856][T16313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 587.244273][T16322] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3273'. [ 587.337629][T16322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16322 comm=syz.5.3273 [ 587.351233][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.435380][T16345] set_capacity_and_notify: 1 callbacks suppressed [ 587.435400][T16345] loop4: detected capacity change from 0 to 256 [ 587.481031][T16345] vfat: Unknown parameter './file2' [ 587.492400][T16353] netlink: 'syz.9.3282': attribute type 13 has an invalid length. [ 587.500853][T16353] netlink: 'syz.9.3282': attribute type 12 has an invalid length. [ 587.578095][T16341] loop8: detected capacity change from 0 to 512 [ 587.609305][T16341] ext4: Bad value for 'init_itable' [ 587.623109][T16355] FAULT_INJECTION: forcing a failure. [ 587.623109][T16355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.636871][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.9.3283 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 587.637010][T16355] Tainted: [W]=WARN [ 587.637027][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.637040][T16355] Call Trace: [ 587.637049][T16355] [ 587.637130][T16355] __dump_stack+0x1d/0x30 [ 587.637160][T16355] dump_stack_lvl+0x95/0xd0 [ 587.637186][T16355] dump_stack+0x15/0x1b [ 587.637206][T16355] should_fail_ex+0x25e/0x270 [ 587.637241][T16355] should_fail+0xb/0x20 [ 587.637323][T16355] should_fail_usercopy+0x1a/0x20 [ 587.637358][T16355] _copy_from_iter+0xcc/0xe70 [ 587.637397][T16355] ? rep_movs_alternative+0x4a/0xa0 [ 587.637430][T16355] ? _copy_from_iter+0x13b/0xe70 [ 587.637499][T16355] copy_page_from_iter+0x15d/0x1f0 [ 587.637569][T16355] skb_copy_datagram_from_iter+0x22d/0x480 [ 587.637612][T16355] tun_get_user+0xc1d/0x2820 [ 587.637646][T16355] ? _parse_integer_limit+0x177/0x1a0 [ 587.637740][T16355] ? _parse_integer+0x27/0x40 [ 587.637869][T16355] ? ref_tracker_alloc+0x1eb/0x2f0 [ 587.637945][T16355] tun_chr_write_iter+0x15a/0x210 [ 587.637977][T16355] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 587.638077][T16355] vfs_write+0x57d/0x990 [ 587.638111][T16355] ksys_write+0xdc/0x1a0 [ 587.638135][T16355] __x64_sys_write+0x40/0x50 [ 587.638158][T16355] x64_sys_call+0x27e1/0x3020 [ 587.638186][T16355] do_syscall_64+0x136/0x3c0 [ 587.638213][T16355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.638321][T16355] RIP: 0033:0x7fbfd01ce6ce [ 587.638342][T16355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.638409][T16355] RSP: 002b:00007fbfcec66fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.638433][T16355] RAX: ffffffffffffffda RBX: 00007fbfcec676c0 RCX: 00007fbfd01ce6ce [ 587.638449][T16355] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 587.638466][T16355] RBP: 00007fbfcec67090 R08: 0000000000000000 R09: 0000000000000000 [ 587.638481][T16355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.638495][T16355] R13: 00007fbfd0496038 R14: 00007fbfd0495fa0 R15: 00007ffd30ab5e88 [ 587.638594][T16355] [ 588.030441][T16359] random: crng reseeded on system resumption [ 588.227739][T16366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'. [ 588.242905][T16363] program syz.9.3284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.254651][T16364] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3285'. [ 588.322599][ T28] audit: type=1400 audit(3932130326.414:3747): avc: denied { setattr } for pid=16361 comm="syz.9.3284" path="socket:[45829]" dev="sockfs" ino=45829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 588.466356][ T28] audit: type=1400 audit(3932130326.584:3748): avc: denied { append } for pid=16361 comm="syz.9.3284" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 588.495327][ T23] IPVS: starting estimator thread 0... [ 588.500246][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3291'. [ 588.502867][T16380] loop4: detected capacity change from 0 to 512 [ 588.541569][T16380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.579957][T16379] loop1: detected capacity change from 0 to 8192 [ 588.587304][T16380] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 588.604295][T16386] IPVS: using max 2640 ests per chain, 132000 per kthread [ 588.614835][T16380] EXT4-fs (loop4): 1 truncate cleaned up [ 588.624130][T16380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.645596][T16379] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.657664][T16380] EXT4-fs warning (device loop4): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 588.681011][T16379] vfat filesystem being mounted at /54/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 588.707262][ T28] audit: type=1400 audit(3932130326.884:3749): avc: denied { remount } for pid=16365 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 588.729840][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.747289][T16395] can: request_module (can-proto-0) failed. [ 588.889843][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3301'. [ 588.899849][T16412] loop1: detected capacity change from 0 to 512 [ 588.944973][T16412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.967262][T16412] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.003014][ T28] audit: type=1400 audit(3932130327.174:3750): avc: denied { write } for pid=16411 comm="syz.1.3300" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.024487][T16422] loop9: detected capacity change from 0 to 1024 [ 589.035523][T16422] EXT4-fs: Mount option(s) incompatible with ext3 [ 589.063422][ T28] audit: type=1400 audit(3932130327.184:3751): avc: denied { write } for pid=16411 comm="syz.1.3300" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.082340][T16400] netlink: 'syz.4.3293': attribute type 12 has an invalid length. [ 589.135231][ T28] audit: type=1400 audit(3932130327.184:3752): avc: denied { append } for pid=16411 comm="syz.1.3300" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 589.135341][ T28] audit: type=1400 audit(3932130327.184:3753): avc: denied { ioctl } for pid=16411 comm="syz.1.3300" path="/57/file2/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 589.135513][T16424] loop9: detected capacity change from 0 to 4096 [ 589.194221][T16424] EXT4-fs: Ignoring removed bh option [ 589.201212][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.211872][T16424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.237602][ T28] audit: type=1400 audit(3932130327.414:3754): avc: denied { write } for pid=16423 comm="syz.9.3306" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.277989][T16424] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 1: comm syz.9.3306: lblock 1 mapped to illegal pblock 1 (length 15) [ 589.297414][ T28] audit: type=1400 audit(3932130327.454:3755): avc: denied { write } for pid=16423 comm="syz.9.3306" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.312236][T16424] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.3306: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 589.382608][T16436] loop1: detected capacity change from 0 to 512 [ 589.415571][T16436] EXT4-fs: Ignoring removed nobh option [ 589.425589][T16436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 589.427185][T16443] netlink: 'syz.4.3311': attribute type 2 has an invalid length. [ 589.432668][T16436] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3305: EA inode hash validation failed [ 589.453248][T16436] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3305: corrupted inode contents [ 589.454039][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3312'. [ 589.465090][T16436] fserror_report: 1 callbacks suppressed [ 589.465109][T16436] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.473580][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 589.479302][T14196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.480254][ C0] EXT4-fs (loop1): initial error at time 3932130327: ext4_do_update_inode:5742 [ 589.490092][T16436] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.3305: mark_inode_dirty error [ 589.496125][ C0] : inode 15 [ 589.496145][ C0] EXT4-fs (loop1): last error at time 3932130327: ext4_do_update_inode:5742: inode 15 [ 589.530483][T16451] loop9: detected capacity change from 0 to 256 [ 589.580316][T16451] vfat filesystem being mounted at /128/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 589.596198][T16436] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.600736][T16436] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3305: corrupted inode contents [ 589.626140][T16436] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.626615][T16436] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.3305: mark_inode_dirty error [ 589.642000][T16451] syz.9.3313: attempt to access beyond end of device [ 589.642000][T16451] loop9: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 589.647934][T16436] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.670721][T16436] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.3305: mark inode dirty (error -117) [ 589.692602][T16436] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.739967][T16436] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 589.772408][T16436] EXT4-fs (loop1): 1 orphan inode deleted [ 589.779313][T16436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 589.861695][T16466] loop4: detected capacity change from 0 to 512 [ 589.872772][T16466] EXT4-fs: Ignoring removed nobh option [ 589.886012][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.917719][T16466] EXT4-fs (loop4): orphan cleanup on readonly fs [ 589.924917][T16466] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3321: EA inode hash validation failed [ 589.937610][T16466] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.3321: corrupted inode contents [ 589.949438][T16466] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.953828][T16466] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.3321: mark_inode_dirty error [ 589.974282][T16466] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 590.010133][T16466] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.3321: corrupted inode contents [ 590.014424][T16471] netlink: 'syz.9.3322': attribute type 1 has an invalid length. [ 590.019428][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 590.046706][ C0] EXT4-fs (loop4): initial error at time 3932130328: ext4_do_update_inode:5742: inode 15 [ 590.057856][ C0] EXT4-fs (loop4): last error at time 3932130328: ext4_dirty_inode:6639: inode 15 [ 590.076022][T16466] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 590.076283][T16466] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.3321: mark_inode_dirty error [ 590.097428][T16466] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 590.097620][T16466] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.3321: mark inode dirty (error -117) [ 590.119427][T16466] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 590.119743][T16466] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 590.137981][T16466] EXT4-fs (loop4): 1 orphan inode deleted [ 590.144183][T16466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 590.164324][T16471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.202963][T16464] netlink: 'syz.8.3319': attribute type 12 has an invalid length. [ 590.387311][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.422864][T16468] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 590.432574][T16468] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3320: corrupted in-inode xattr: e_value size too large [ 590.475941][T16478] bond3: (slave geneve2): making interface the new active one [ 590.484918][T16478] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 590.494027][ T311] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.503429][ T311] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.515528][ T311] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.524345][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 590.524366][ C0] EXT4-fs (loop1): initial error at time 3932130328: ext4_iget_extra_inode:5180: inode 15 [ 590.524396][ C0] EXT4-fs (loop1): last error at time 3932130328: ext4_iget_extra_inode:5180: inode 15 [ 590.661423][T16468] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3320: couldn't read orphan inode 15 (err -117) [ 590.673339][T16468] loop1: lost filesystem error report for type 5 error -117 [ 590.674307][T16468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.694745][ T311] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.729456][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.738065][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.848049][T16490] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.3327'. [ 590.857465][T16490] netlink: zone id is out of range [ 590.862803][T16490] netlink: zone id is out of range [ 590.868109][T16490] netlink: zone id is out of range [ 590.873266][T16490] netlink: zone id is out of range [ 590.878396][T16490] netlink: zone id is out of range [ 590.883679][T16490] netlink: zone id is out of range [ 590.888864][T16490] netlink: zone id is out of range [ 590.895478][T16490] netlink: del zone limit has 4 unknown bytes [ 591.130744][T16504] SELinux: failed to load policy [ 591.284931][T16510] netlink: 'syz.9.3329': attribute type 10 has an invalid length. [ 591.293100][T16510] dummy0: entered promiscuous mode [ 591.379898][T16504] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 591.416266][T16504] EXT4-fs (loop8): 1 truncate cleaned up [ 591.454080][T16504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.668433][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.682901][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.688503][T16491] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 591.787915][T16491] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3325: corrupted in-inode xattr: e_value size too large [ 591.873722][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 591.882822][ C0] EXT4-fs (loop4): initial error at time 3932130330: ext4_iget_extra_inode:5180: inode 15 [ 591.896732][ C0] EXT4-fs (loop4): last error at time 3932130330: ext4_iget_extra_inode:5180: inode 15 [ 591.927044][T16491] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3325: couldn't read orphan inode 15 (err -117) [ 592.017281][T16491] loop4: lost filesystem error report for type 5 error -117 [ 592.041567][T16515] FAULT_INJECTION: forcing a failure. [ 592.041567][T16515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.080716][T16491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.093477][T16515] CPU: 0 UID: 0 PID: 16515 Comm: syz.1.3332 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 592.093568][T16515] Tainted: [W]=WARN [ 592.093577][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.093593][T16515] Call Trace: [ 592.093602][T16515] [ 592.093612][T16515] __dump_stack+0x1d/0x30 [ 592.093641][T16515] dump_stack_lvl+0x95/0xd0 [ 592.093666][T16515] dump_stack+0x15/0x1b [ 592.093698][T16515] should_fail_ex+0x25e/0x270 [ 592.093732][T16515] should_fail+0xb/0x20 [ 592.093787][T16515] should_fail_usercopy+0x1a/0x20 [ 592.093877][T16515] _copy_to_user+0x20/0xa0 [ 592.093901][T16515] simple_read_from_buffer+0xb5/0x130 [ 592.093932][T16515] proc_fail_nth_read+0x10e/0x150 [ 592.093960][T16515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.094061][T16515] vfs_read+0x18e/0x7c0 [ 592.094082][T16515] ? __rcu_read_unlock+0x4e/0x70 [ 592.094130][T16515] ? __fget_files+0x184/0x1c0 [ 592.094183][T16515] ? mutex_lock+0x57/0x90 [ 592.094219][T16515] ksys_read+0xdc/0x1a0 [ 592.094241][T16515] __x64_sys_read+0x40/0x50 [ 592.094264][T16515] x64_sys_call+0x2886/0x3020 [ 592.094322][T16515] do_syscall_64+0x136/0x3c0 [ 592.094350][T16515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.094410][T16515] RIP: 0033:0x7fefc636e6ce [ 592.094430][T16515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 592.094453][T16515] RSP: 002b:00007fefc4e06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.094487][T16515] RAX: ffffffffffffffda RBX: 00007fefc4e076c0 RCX: 00007fefc636e6ce [ 592.094505][T16515] RDX: 000000000000000f RSI: 00007fefc4e070a0 RDI: 0000000000000008 [ 592.094520][T16515] RBP: 00007fefc4e07090 R08: 0000000000000000 R09: 0000000000000000 [ 592.094615][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.094631][T16515] R13: 00007fefc6636038 R14: 00007fefc6635fa0 R15: 00007ffd64c181f8 [ 592.094653][T16515] [ 592.277589][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 592.277606][ T28] audit: type=1400 audit(3932130330.414:3801): avc: denied { write } for pid=16488 comm="syz.4.3325" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.401830][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.457968][T16529] netlink: 'syz.1.3337': attribute type 3 has an invalid length. [ 592.469614][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.553735][T16529] __nla_validate_parse: 3 callbacks suppressed [ 592.553753][T16529] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.3337'. [ 592.632153][ T28] audit: type=1400 audit(3932130330.784:3802): avc: denied { mounton } for pid=16523 comm="syz.9.3336" path="/" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 592.730440][ T28] audit: type=1400 audit(3932130330.874:3803): avc: denied { setopt } for pid=16532 comm="syz.1.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 592.893666][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'. [ 592.913343][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 592.960096][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'. [ 592.960079][T16546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3343'. [ 593.000649][T16549] set_capacity_and_notify: 3 callbacks suppressed [ 593.000669][T16549] loop8: detected capacity change from 0 to 2048 [ 593.022030][T16551] loop1: detected capacity change from 0 to 1024 [ 593.038500][T16551] EXT4-fs: Ignoring removed bh option [ 593.086593][ T28] audit: type=1400 audit(3932130331.264:3804): avc: denied { unmount } for pid=14196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 593.094320][T16551] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 593.231535][T16549] Alternate GPT is invalid, using primary GPT. [ 593.237918][T16549] loop8: p1 p2 p3 [ 593.285632][T16558] loop9: detected capacity change from 0 to 512 [ 593.459164][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.486312][T16551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.561132][T16566] xt_hashlimit: size too large, truncated to 1048576 [ 593.614866][T16558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.680149][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.705082][T16558] ext4 filesystem being mounted at /134/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.184254][T16576] netlink: 'syz.1.3348': attribute type 10 has an invalid length. [ 594.192153][T16576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3348'. [ 594.201306][T16576] dummy0: entered promiscuous mode [ 594.270037][ T28] audit: type=1400 audit(3932130332.404:3805): avc: denied { write } for pid=16557 comm="syz.9.3345" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.433518][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3349'. [ 594.527297][ T28] audit: type=1400 audit(3932130332.434:3806): avc: denied { write } for pid=16557 comm="syz.9.3345" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.667974][T14196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.755343][T16585] netlink: 'syz.9.3350': attribute type 3 has an invalid length. [ 594.785828][T16585] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.3350'. [ 594.835189][T16587] loop1: detected capacity change from 0 to 512 [ 594.874738][T16587] EXT4-fs: Ignoring removed orlov option [ 594.886581][T16587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 594.897960][T16587] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.3352: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 594.915295][T16587] fserror_report: 2 callbacks suppressed [ 594.915310][T16587] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 594.921256][T16587] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3352: couldn't read orphan inode 16 (err -117) [ 594.942812][T16587] loop1: lost filesystem error report for type 5 error -117 [ 594.942957][T16587] EXT4-fs (loop1): 1 orphan inode deleted [ 594.950703][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 594.950726][ C1] EXT4-fs (loop1): initial error at time 3932130333: ext4_ext_check_inode:521: inode 16 [ 594.950756][ C1] EXT4-fs (loop1): last error at time 3932130333: ext4_orphan_get:1404 [ 594.985123][T16587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.003509][T16589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3353'. [ 595.071901][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.120741][T16602] loop1: detected capacity change from 0 to 1024 [ 595.145981][T16602] EXT4-fs: Mount option(s) incompatible with ext3 [ 595.190216][T16606] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 595.202006][T16607] loop8: detected capacity change from 0 to 256 [ 595.207707][T16606] syzkaller1: Linktype set failed because interface is up [ 595.209143][T16607] vfat: Unknown parameter '00000000000000000003' [ 595.216289][ T3375] syzkaller1: tun_net_xmit 90 [ 595.270420][ T28] audit: type=1326 audit(3932130333.404:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.8.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 595.300157][ T28] audit: type=1326 audit(3932130333.404:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.8.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 595.300107][T16602] loop1: detected capacity change from 0 to 8192 [ 595.332868][ T28] audit: type=1326 audit(3932130333.404:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.8.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 595.336124][T16602] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 595.359063][ T28] audit: type=1326 audit(3932130333.404:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.8.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 595.395614][T16602] vfat filesystem being mounted at /67/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 595.597915][T10767] syzkaller1: tun_net_xmit 86 [ 596.117680][T16618] loop9: detected capacity change from 0 to 512 [ 596.136762][T16618] msdos filesystem being mounted at /138/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 596.370193][T16623] netlink: 'syz.5.3365': attribute type 3 has an invalid length. [ 596.378203][T16623] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.3365'. [ 596.454155][T16625] loop9: detected capacity change from 0 to 512 [ 596.477214][T16625] EXT4-fs: Ignoring removed orlov option [ 596.509488][T16625] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 596.511459][T16629] can: request_module (can-proto-0) failed. [ 596.535436][T16625] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #16: comm syz.9.3367: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 596.552350][T16625] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.556676][T16629] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 596.573652][T16629] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 596.608123][T16625] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3367: couldn't read orphan inode 16 (err -117) [ 596.620069][T16625] loop9: lost filesystem error report for type 5 error -117 [ 596.620258][T16625] EXT4-fs (loop9): 1 orphan inode deleted [ 596.633336][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 596.633375][ C0] EXT4-fs (loop9): initial error at time 3932130334: ext4_ext_check_inode:521: inode 16 [ 596.633413][ C0] EXT4-fs (loop9): last error at time 3932130334: ext4_orphan_get:1404 [ 596.684410][T16625] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.733447][T14196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.768705][T16644] loop9: detected capacity change from 0 to 256 [ 596.781418][T16644] vfat filesystem being mounted at /140/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 596.795495][T16645] EXT4-fs: Mount option(s) incompatible with ext3 [ 597.005220][T16645] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 597.034150][T16645] vfat filesystem being mounted at /44/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 597.239989][T16660] netlink: 'syz.4.3379': attribute type 3 has an invalid length. [ 597.542576][T16650] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 597.550795][T16650] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.3376: corrupted in-inode xattr: e_value size too large [ 597.564807][T16650] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 597.583870][T16650] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3376: couldn't read orphan inode 15 (err -117) [ 597.642090][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 597.655131][ C0] EXT4-fs (loop8): initial error at time 3932130335: ext4_iget_extra_inode:5180: inode 15 [ 597.665100][ C0] EXT4-fs (loop8): last error at time 3932130335: ext4_iget_extra_inode:5180: inode 15 [ 597.728688][T16650] loop8: lost filesystem error report for type 5 error -117 [ 597.844010][T16650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.967623][T16662] Alternate GPT is invalid, using primary GPT. [ 597.973977][T16662] loop9: p1 p2 p3 [ 598.012260][T16673] bridge0: port 3(veth1_macvtap) entered blocking state [ 598.019270][T16673] bridge0: port 3(veth1_macvtap) entered disabled state [ 598.021903][ T28] kauditd_printk_skb: 295 callbacks suppressed [ 598.021925][ T28] audit: type=1400 audit(3932130336.194:4106): avc: denied { write } for pid=16649 comm="syz.8.3376" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.026413][T16673] veth1_macvtap: entered allmulticast mode [ 598.064798][T16673] veth1_macvtap: left allmulticast mode [ 598.191011][T16650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.199621][T16650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.208784][T16669] netlink: 'syz.5.3382': attribute type 12 has an invalid length. [ 598.270512][T16680] FAULT_INJECTION: forcing a failure. [ 598.270512][T16680] name failslab, interval 1, probability 0, space 0, times 0 [ 598.283737][T16680] CPU: 1 UID: 0 PID: 16680 Comm: syz.1.3385 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 598.283800][T16680] Tainted: [W]=WARN [ 598.283809][T16680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.283823][T16680] Call Trace: [ 598.283832][T16680] [ 598.283841][T16680] __dump_stack+0x1d/0x30 [ 598.283870][T16680] dump_stack_lvl+0x95/0xd0 [ 598.283896][T16680] dump_stack+0x15/0x1b [ 598.283919][T16680] should_fail_ex+0x25e/0x270 [ 598.283992][T16680] should_failslab+0x8c/0xb0 [ 598.284018][T16680] __kmalloc_noprof+0xd4/0x4a0 [ 598.284045][T16680] ? alloc_pipe_info+0x1c8/0x340 [ 598.284069][T16680] ? alloc_pipe_info+0x1c8/0x340 [ 598.284133][T16680] alloc_pipe_info+0x1c8/0x340 [ 598.284158][T16680] splice_direct_to_actor+0x593/0x680 [ 598.284189][T16680] ? kstrtouint_from_user+0xa8/0xf0 [ 598.284281][T16680] ? __pfx_direct_splice_actor+0x10/0x10 [ 598.284310][T16680] ? __rcu_read_unlock+0x4e/0x70 [ 598.284341][T16680] ? get_pid_task+0x92/0xc0 [ 598.284362][T16680] ? avc_policy_seqno+0x15/0x30 [ 598.284423][T16680] do_splice_direct+0x119/0x1a0 [ 598.284487][T16680] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 598.284520][T16680] do_sendfile+0x37d/0x640 [ 598.284554][T16680] __x64_sys_sendfile64+0x105/0x150 [ 598.284645][T16680] x64_sys_call+0x2dc4/0x3020 [ 598.284716][T16680] do_syscall_64+0x136/0x3c0 [ 598.284744][T16680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.284771][T16680] RIP: 0033:0x7fefc63ade99 [ 598.284790][T16680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.284853][T16680] RSP: 002b:00007fefc4e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 598.284900][T16680] RAX: ffffffffffffffda RBX: 00007fefc6635fa0 RCX: 00007fefc63ade99 [ 598.284918][T16680] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 598.284933][T16680] RBP: 00007fefc4e07090 R08: 0000000000000000 R09: 0000000000000000 [ 598.284950][T16680] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 598.284966][T16680] R13: 00007fefc6636038 R14: 00007fefc6635fa0 R15: 00007ffd64c181f8 [ 598.284988][T16680] [ 598.549174][T16686] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 598.568306][T16686] bond1: (slave veth0_to_bond): making interface the new active one [ 598.576972][T16686] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 599.849621][T16701] set_capacity_and_notify: 4 callbacks suppressed [ 599.849641][T16701] loop9: detected capacity change from 0 to 256 [ 599.883605][T16699] loop4: detected capacity change from 0 to 512 [ 599.895435][T16699] EXT4-fs: Ignoring removed nobh option [ 599.910423][T16701] vfat: Unknown parameter './file2' [ 600.067262][T16696] dummy0: left promiscuous mode [ 600.073644][T16694] netlink: 'syz.1.3390': attribute type 10 has an invalid length. [ 600.081595][T16694] __nla_validate_parse: 3 callbacks suppressed [ 600.081609][T16694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3390'. [ 600.098858][T16694] dummy0: entered promiscuous mode [ 600.844180][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.870189][T16699] EXT4-fs (loop4): orphan cleanup on readonly fs [ 600.952172][T16699] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3393: EA inode hash validation failed [ 600.964857][T16699] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.3393: corrupted inode contents [ 600.976763][T16699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.051794][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 601.067601][ C0] EXT4-fs (loop4): initial error at time 3932130339: ext4_do_update_inode:5742: inode 15 [ 601.077465][ C0] EXT4-fs (loop4): last error at time 3932130339: ext4_do_update_inode:5742: inode 15 [ 601.212225][T16706] random: crng reseeded on system resumption [ 601.410816][T16699] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.3393: mark_inode_dirty error [ 601.437730][T16699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.443205][ T28] audit: type=1400 audit(3932130339.614:4107): avc: denied { setattr } for pid=16713 comm="syz.1.3396" name="PACKET" dev="sockfs" ino=48424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 601.445054][T16699] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.3393: corrupted inode contents [ 601.530597][T16699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.552853][T16699] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.3393: mark_inode_dirty error [ 601.619466][T16699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.619886][T16699] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.3393: mark inode dirty (error -117) [ 601.695195][T16699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.703853][T16699] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 601.765885][T16699] EXT4-fs (loop4): 1 orphan inode deleted [ 601.783255][T16699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 602.027863][T16717] loop9: detected capacity change from 0 to 512 [ 602.078183][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.438959][T16741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16741 comm=syz.4.3404 [ 602.477011][T16738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16738 comm=syz.5.3405 [ 602.682626][T16717] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 602.709096][T16717] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.3397: corrupted in-inode xattr: e_value size too large [ 602.889920][T16717] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 602.890305][T16717] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3397: couldn't read orphan inode 15 (err -117) [ 602.911496][T16717] loop9: lost filesystem error report for type 5 error -117 [ 602.912823][T16717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.940800][ T28] audit: type=1400 audit(3932130341.014:4108): avc: denied { write } for pid=16745 comm="syz.5.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.209523][ T28] audit: type=1400 audit(3932130341.014:4109): avc: denied { read } for pid=16745 comm="syz.5.3406" lport=27433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 603.250577][ T28] audit: type=1400 audit(3932130341.364:4110): avc: denied { write } for pid=16716 comm="syz.9.3397" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.298241][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'. [ 603.307751][T16757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16757 comm=syz.8.3408 [ 603.346834][T16762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3410'. [ 603.484111][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.492649][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.524172][T16774] loop8: detected capacity change from 0 to 256 [ 603.530819][T16774] vfat: Unknown parameter './file2' [ 603.614270][T16776] loop1: detected capacity change from 0 to 256 [ 603.622488][T16776] vfat: Unknown parameter './file2' [ 604.645534][T14196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.844033][T16781] random: crng reseeded on system resumption [ 604.872472][ T28] audit: type=1400 audit(3932130343.034:4111): avc: denied { watch_reads } for pid=16792 comm="syz.4.3417" path="/54" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 604.950419][ T28] audit: type=1400 audit(3932130343.094:4112): avc: denied { read } for pid=16779 comm="syz.5.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 605.170088][T16793] loop4: detected capacity change from 0 to 1764 [ 605.215312][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.243806][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.279395][T16802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3422'. [ 605.295728][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3422'. [ 605.534394][T16812] dummy0: left promiscuous mode [ 605.549315][T16812] netlink: 'syz.8.3420': attribute type 10 has an invalid length. [ 605.557360][T16812] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3420'. [ 605.567047][T16812] dummy0: entered promiscuous mode [ 605.955406][ T28] audit: type=1400 audit(3932130344.124:4113): avc: denied { bind } for pid=16819 comm="syz.5.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 606.179741][T16826] loop8: detected capacity change from 0 to 256 [ 606.191020][T16826] vfat: Unknown parameter './file2' [ 606.270557][T16829] loop1: detected capacity change from 0 to 512 [ 606.292035][T16829] EXT4-fs: Ignoring removed orlov option [ 606.366036][T16829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 606.516684][T16837] random: crng reseeded on system resumption [ 606.655233][T16829] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.3429: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 606.693291][T16829] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 606.693566][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 606.709213][ C0] EXT4-fs (loop1): initial error at time 3932130344: ext4_ext_check_inode:521: inode 16 [ 606.718993][ C0] EXT4-fs (loop1): last error at time 3932130344: ext4_ext_check_inode:521: inode 16 [ 606.861657][T16829] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3429: couldn't read orphan inode 16 (err -117) [ 606.885742][T16829] loop1: lost filesystem error report for type 5 error -117 [ 606.886505][T16829] EXT4-fs (loop1): 1 orphan inode deleted [ 606.925632][T16829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.993251][ T28] audit: type=1400 audit(3932130345.164:4114): avc: denied { ioctl } for pid=16843 comm="syz.4.3430" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 607.160154][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.222071][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3433'. [ 607.324862][T16851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.341449][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3433'. [ 607.369362][T16851] batadv_slave_1: entered promiscuous mode [ 607.381933][T16851] batadv_slave_1: entered allmulticast mode [ 607.406495][T16851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.425881][T16851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.441950][T16851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.469932][T16851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 607.478503][T16851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 607.487155][T16851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 608.356883][T16854] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 608.357749][T10760] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.423018][T10760] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 608.506107][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3441'. [ 608.920850][T16885] loop4: detected capacity change from 0 to 256 [ 608.934832][T16887] loop1: detected capacity change from 0 to 256 [ 608.941339][T16887] vfat: Unknown parameter './file2' [ 608.980246][T16885] vfat filesystem being mounted at /58/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 609.164965][T16889] netlink: 236 bytes leftover after parsing attributes in process `syz.8.3446'. [ 609.174113][T16889] netlink: 236 bytes leftover after parsing attributes in process `syz.8.3446'. [ 609.391145][T16895] random: crng reseeded on system resumption [ 609.483484][ T28] audit: type=1400 audit(3932130347.604:4115): avc: denied { create } for pid=16888 comm="syz.8.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 609.528158][T16893] loop4: detected capacity change from 0 to 2048 [ 609.810511][T16893] Alternate GPT is invalid, using primary GPT. [ 609.895791][T16893] loop4: p1 p2 p3 [ 610.037695][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 610.120449][T16911] macsec0: entered promiscuous mode [ 610.126469][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3450'. [ 611.109481][T16911] veth1_macvtap: left promiscuous mode [ 611.130369][T16911] macsec0 (unregistering): left promiscuous mode [ 611.209928][T16925] netlink: 'syz.9.3453': attribute type 1 has an invalid length. [ 611.220919][T16922] loop4: detected capacity change from 0 to 512 [ 611.358820][T16922] vfat: Unknown parameter '01777777777777777777777' [ 611.568620][ T28] audit: type=1400 audit(3932130349.744:4116): avc: denied { shutdown } for pid=16921 comm="syz.4.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 611.603330][T16924] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 611.671258][T16937] sctp: [Deprecated]: syz.4.3452 (pid 16937) Use of int in max_burst socket option. [ 611.671258][T16937] Use struct sctp_assoc_value instead [ 611.847738][T16939] loop9: detected capacity change from 0 to 8192 [ 611.918024][T16939] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.952320][T16942] loop4: detected capacity change from 0 to 1764 [ 611.958987][T16939] vfat filesystem being mounted at /150/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 612.303613][T16955] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 612.464558][T16961] bond4: (slave veth0_to_bond): making interface the new active one [ 612.473629][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.497172][T16961] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 612.557533][T16967] __nla_validate_parse: 1 callbacks suppressed [ 612.557552][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3466'. [ 612.582711][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3466'. [ 612.713657][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 612.756051][T16983] loop1: detected capacity change from 0 to 8192 [ 612.772018][T16983] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 612.782599][T16983] vfat filesystem being mounted at /92/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 612.939934][T16999] loop4: detected capacity change from 0 to 256 [ 612.963908][T16999] vfat filesystem being mounted at /63/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 612.992561][T17005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3474'. [ 613.011422][T17004] loop9: detected capacity change from 0 to 256 [ 613.024783][T17004] vfat filesystem being mounted at /155/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 613.041016][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3477'. [ 613.154334][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3480'. [ 613.211629][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 613.249189][T17023] loop9: detected capacity change from 0 to 256 [ 613.274562][T17025] loop4: detected capacity change from 0 to 2048 [ 613.285568][T17023] vfat: Unknown parameter './file2' [ 613.436887][T17025] Alternate GPT is invalid, using primary GPT. [ 613.443296][T17025] loop4: p1 p2 p3 [ 613.573652][T17030] dummy0: left promiscuous mode [ 613.582773][T17030] netlink: 'syz.5.3479': attribute type 10 has an invalid length. [ 613.590848][T17030] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3479'. [ 613.600325][T17030] dummy0: entered promiscuous mode [ 613.717516][T17031] random: crng reseeded on system resumption [ 614.132368][T17034] loop1: detected capacity change from 0 to 8192 [ 614.207121][T17034] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 614.233305][T17034] vfat filesystem being mounted at /94/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 614.327288][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'. [ 614.360363][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 614.427077][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3489'. [ 614.762398][T17050] loop1: detected capacity change from 0 to 512 [ 614.788386][T17050] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 614.806346][T17050] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 614.814963][T17050] EXT4-fs (loop1): orphan cleanup on readonly fs [ 614.824717][T17050] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3491: Block bitmap for bg 0 marked uninitialized [ 615.044024][T17050] loop1: lost filesystem error report for type 5 error -117 [ 615.045994][T17050] EXT4-fs (loop1): Remounting filesystem read-only [ 615.061213][T17050] EXT4-fs (loop1): 1 orphan inode deleted [ 615.073385][T17050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 615.963712][T17063] vfat filesystem being mounted at /71/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 616.048726][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.143753][T17068] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 616.196984][T17068] bond4: (slave veth0_to_bond): Releasing active interface [ 616.307891][T17068] bond5: (slave veth0_to_bond): making interface the new active one [ 616.335605][T17068] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 616.361244][T17083] set_capacity_and_notify: 1 callbacks suppressed [ 616.361267][T17083] loop4: detected capacity change from 0 to 512 [ 616.390875][T17083] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 616.399337][T17083] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3500: corrupted in-inode xattr: e_value size too large [ 616.413435][T17083] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 616.413571][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 616.429190][ C1] EXT4-fs (loop4): initial error at time 3932130354: ext4_iget_extra_inode:5180: inode 15 [ 616.439143][ C1] EXT4-fs (loop4): last error at time 3932130354: ext4_iget_extra_inode:5180: inode 15 [ 616.449472][T17083] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3500: couldn't read orphan inode 15 (err -117) [ 616.461889][T17083] loop4: lost filesystem error report for type 5 error -117 [ 616.462868][T17083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.509952][ T28] audit: type=1400 audit(3932130354.684:4117): avc: denied { write } for pid=17073 comm="syz.4.3500" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.558473][T17086] netlink: 'syz.9.3504': attribute type 12 has an invalid length. [ 616.571741][T17075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.571897][T17075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.692429][T17101] loop8: detected capacity change from 0 to 2048 [ 616.860881][T17101] loop8: p3 < > p4 < > [ 616.866947][T17101] loop8: partition table partially beyond EOD, truncated [ 616.875179][T17101] loop8: p3 start 4284289 is beyond EOD, truncated [ 617.050050][T17108] netlink: 'syz.8.3510': attribute type 3 has an invalid length. [ 617.182242][ T28] audit: type=1326 audit(3932130355.354:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.229496][ T28] audit: type=1326 audit(3932130355.354:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.260529][ T28] audit: type=1326 audit(3932130355.354:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.288480][T17120] dummy0: left promiscuous mode [ 617.292840][ T28] audit: type=1326 audit(3932130355.354:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.320600][T17120] netlink: 'syz.9.3508': attribute type 10 has an invalid length. [ 617.329194][T17120] dummy0: entered promiscuous mode [ 617.373868][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.399945][ T28] audit: type=1326 audit(3932130355.354:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.468873][ T28] audit: type=1326 audit(3932130355.354:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.494514][ T28] audit: type=1326 audit(3932130355.354:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.520184][ T28] audit: type=1326 audit(3932130355.354:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.545591][ T28] audit: type=1326 audit(3932130355.354:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.8.3513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa35de99 code=0x7ffc0000 [ 617.694704][T17137] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 617.698950][T17131] can: request_module (can-proto-0) failed. [ 617.705645][T17134] bridge0: port 3(veth1_macvtap) entered blocking state [ 617.708380][T17137] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 617.738973][T17134] bridge0: port 3(veth1_macvtap) entered disabled state [ 617.748965][T17134] veth1_macvtap: entered allmulticast mode [ 617.756483][T17134] veth1_macvtap: left allmulticast mode [ 617.878559][T17126] netlink: 'syz.5.3518': attribute type 12 has an invalid length. [ 617.891065][T17148] FAULT_INJECTION: forcing a failure. [ 617.891065][T17148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.928123][T17148] CPU: 1 UID: 0 PID: 17148 Comm: syz.1.3524 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 617.928162][T17148] Tainted: [W]=WARN [ 617.928171][T17148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.928185][T17148] Call Trace: [ 617.928193][T17148] [ 617.928202][T17148] __dump_stack+0x1d/0x30 [ 617.928292][T17148] dump_stack_lvl+0x95/0xd0 [ 617.928428][T17148] dump_stack+0x15/0x1b [ 617.928448][T17148] should_fail_ex+0x25e/0x270 [ 617.928495][T17148] should_fail+0xb/0x20 [ 617.928527][T17148] should_fail_usercopy+0x1a/0x20 [ 617.928564][T17148] _copy_from_user+0x1c/0xb0 [ 617.928593][T17148] do_sock_getsockopt+0x122/0x570 [ 617.928624][T17148] ? vfs_write+0x848/0x990 [ 617.928650][T17148] __x64_sys_getsockopt+0x11d/0x1a0 [ 617.928683][T17148] x64_sys_call+0x2dcf/0x3020 [ 617.928758][T17148] do_syscall_64+0x136/0x3c0 [ 617.928785][T17148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.928867][T17148] RIP: 0033:0x7fefc63ade99 [ 617.928961][T17148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.928981][T17148] RSP: 002b:00007fefc4e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 617.929007][T17148] RAX: ffffffffffffffda RBX: 00007fefc6635fa0 RCX: 00007fefc63ade99 [ 617.929025][T17148] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000006 [ 617.929041][T17148] RBP: 00007fefc4e07090 R08: 0000200000000080 R09: 0000000000000000 [ 617.929122][T17148] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 617.929138][T17148] R13: 00007fefc6636038 R14: 00007fefc6635fa0 R15: 00007ffd64c181f8 [ 617.929180][T17148] [ 617.954887][T17152] loop4: detected capacity change from 0 to 512 [ 618.202025][T17156] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 618.202025][T17156] program syz.1.3528 not setting count and/or reply_len properly [ 618.232709][T17152] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 618.238092][T17156] FAULT_INJECTION: forcing a failure. [ 618.238092][T17156] name failslab, interval 1, probability 0, space 0, times 0 [ 618.241201][T17152] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.3526: corrupted in-inode xattr: e_value size too large [ 618.263289][T17156] CPU: 1 UID: 0 PID: 17156 Comm: syz.1.3528 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 618.263327][T17156] Tainted: [W]=WARN [ 618.263336][T17156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 618.263350][T17156] Call Trace: [ 618.263358][T17156] [ 618.263387][T17156] __dump_stack+0x1d/0x30 [ 618.263414][T17156] dump_stack_lvl+0x95/0xd0 [ 618.263438][T17156] dump_stack+0x15/0x1b [ 618.263476][T17156] should_fail_ex+0x25e/0x270 [ 618.263507][T17156] should_failslab+0x8c/0xb0 [ 618.263568][T17156] __kmalloc_noprof+0xd4/0x4a0 [ 618.263594][T17156] ? blk_rq_map_user_iov+0x2cb/0xfa0 [ 618.263623][T17156] ? blk_rq_map_user_iov+0x2cb/0xfa0 [ 618.263681][T17156] blk_rq_map_user_iov+0x2cb/0xfa0 [ 618.263716][T17156] blk_rq_map_user_io+0x1a4/0x280 [ 618.263744][T17156] ? alloc_pages_mpol+0xd9/0x1d0 [ 618.263777][T17156] ? alloc_pages_noprof+0xa8/0x140 [ 618.263835][T17156] ? sg_build_indirect+0x39a/0x450 [ 618.263873][T17156] sg_common_write+0xaef/0xc10 [ 618.263919][T17156] sg_write+0x6ff/0x7a0 [ 618.263959][T17156] ? __pfx_sg_write+0x10/0x10 [ 618.263990][T17156] vfs_write+0x252/0x990 [ 618.264049][T17156] ? __fget_files+0x184/0x1c0 [ 618.264093][T17156] ksys_write+0xdc/0x1a0 [ 618.264116][T17156] __x64_sys_write+0x40/0x50 [ 618.264140][T17156] x64_sys_call+0x27e1/0x3020 [ 618.264167][T17156] do_syscall_64+0x136/0x3c0 [ 618.264241][T17156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.264265][T17156] RIP: 0033:0x7fefc63ade99 [ 618.264362][T17156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.264383][T17156] RSP: 002b:00007fefc4e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.264484][T17156] RAX: ffffffffffffffda RBX: 00007fefc6635fa0 RCX: 00007fefc63ade99 [ 618.264500][T17156] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000005 [ 618.264574][T17156] RBP: 00007fefc4e07090 R08: 0000000000000000 R09: 0000000000000000 [ 618.264589][T17156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.264659][T17156] R13: 00007fefc6636038 R14: 00007fefc6635fa0 R15: 00007ffd64c181f8 [ 618.264680][T17156] [ 618.566028][T17152] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 618.574727][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 618.595524][ C1] EXT4-fs (loop4): initial error at time 3932130356: ext4_iget_extra_inode:5180: inode 15 [ 618.608562][ C1] EXT4-fs (loop4): last error at time 3932130356: ext4_iget_extra_inode:5180: inode 15 [ 618.674703][T17183] loop8: detected capacity change from 0 to 1024 [ 618.703376][T17152] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3526: couldn't read orphan inode 15 (err -117) [ 618.713192][T17183] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 618.744394][T17152] loop4: lost filesystem error report for type 5 error -117 [ 618.745183][T17152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.813825][T17183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 618.813955][T17183] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 618.814529][T17183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.818000][T17183] 9p: Bad value for 'rfdno' [ 618.873710][ T311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.887271][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.002094][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.014225][T17195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.023000][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.035651][T17157] bridge_slave_0: entered allmulticast mode [ 619.042341][T17195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.051278][T17157] bridge_slave_0: entered promiscuous mode [ 619.074281][ T311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.100674][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.157575][T17198] loop1: detected capacity change from 0 to 256 [ 619.166055][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.187166][T17198] msdos: Bad value for 'time_offset' [ 619.198086][T17157] bridge_slave_1: entered allmulticast mode [ 619.212198][T17157] bridge_slave_1: entered promiscuous mode [ 619.236141][ T311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.256793][T17202] loop8: detected capacity change from 0 to 256 [ 619.267763][T17197] ÿÿÿÿ: renamed from bridge_slave_1 (while UP) [ 619.290790][T17202] vfat filesystem being mounted at /335/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 619.303200][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.331308][ T311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.464875][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.934259][T17157] team0: Port device team_slave_0 added [ 620.677952][T17211] loop1: detected capacity change from 0 to 1024 [ 620.873680][T17211] EXT4-fs: Ignoring removed mblk_io_submit option [ 620.928233][T17157] team0: Port device team_slave_1 added [ 621.039068][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.096736][T17211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.157456][T17211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.257221][T17209] __nla_validate_parse: 6 callbacks suppressed [ 621.257440][T17209] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3539'. [ 621.311710][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 621.404060][T17215] bridge0: port 3(veth1_macvtap) entered blocking state [ 621.475065][T17215] bridge0: port 3(veth1_macvtap) entered disabled state [ 621.550567][T17215] veth1_macvtap: entered allmulticast mode [ 621.578998][T17215] veth1_macvtap: left allmulticast mode [ 621.610465][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.633755][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.716948][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.761662][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.807848][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.894000][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 621.894018][ T28] audit: type=1400 audit(3932130360.074:4220): avc: denied { bind } for pid=17232 comm="syz.9.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 621.919966][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 622.047506][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.128279][T17157] hsr_slave_0: entered promiscuous mode [ 622.150137][T17157] hsr_slave_1: entered promiscuous mode [ 622.172034][ T311] veth3: left allmulticast mode [ 622.178734][ T311] veth3: left promiscuous mode [ 622.187243][ T311] bridge0: port 3(veth3) entered disabled state [ 622.233912][ T311] bridge_slave_1: left allmulticast mode [ 622.247150][ T311] bridge_slave_1: left promiscuous mode [ 622.271604][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.303468][ T311] bridge_slave_0: left allmulticast mode [ 622.317924][ T311] bridge_slave_0: left promiscuous mode [ 622.338621][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.444155][ T28] audit: type=1400 audit(3932130360.604:4221): avc: denied { bind } for pid=17251 comm="syz.1.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 622.466919][ T28] audit: type=1400 audit(3932130360.604:4222): avc: denied { connect } for pid=17251 comm="syz.1.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 622.510945][ T311] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.542291][ T311] .` (unregistering): (slave 4@0Ù): Releasing backup interface [ 622.588536][ T311] .` (unregistering): (slave team0): Releasing backup interface [ 622.621537][ T311] .` (unregistering): Released all slaves [ 622.645165][ T311] bond0 (unregistering): Released all slaves [ 622.674035][ T311] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 622.684671][ T311] bond1 (unregistering): Released all slaves [ 622.697076][ T311] bond2 (unregistering): Released all slaves [ 622.706302][ T311] bond3 (unregistering): Released all slaves [ 622.715989][ T311] bond4 (unregistering): Released all slaves [ 622.733194][ T311] bond5 (unregistering): Released all slaves [ 622.742580][ T311] bond6 (unregistering): Released all slaves [ 622.752082][ T311] bond7 (unregistering): Released all slaves [ 622.761907][ T311] bond8 (unregistering): Released all slaves [ 622.781947][T17253] pim6reg: entered allmulticast mode [ 622.882142][ T311] veth1_macvtap: left promiscuous mode [ 622.899014][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3551'. [ 622.925158][ T311] veth0_macvtap: left promiscuous mode [ 622.943643][ T311] veth1_vlan: left promiscuous mode [ 622.962566][ T311] veth0_vlan: left promiscuous mode [ 623.009977][ T28] audit: type=1400 audit(3932130361.184:4223): avc: denied { write } for pid=17263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.106066][ T28] audit: type=1400 audit(3932130361.214:4224): avc: denied { write } for pid=17275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.207412][ T311] team0 (unregistering): Port device team_slave_1 removed [ 623.252122][ T311] team0 (unregistering): Port device team_slave_0 removed [ 623.361655][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 623.398415][T17261] syzkaller0: entered promiscuous mode [ 623.429455][T17261] syzkaller0: entered allmulticast mode [ 623.516383][T17258] netlink: 'syz.1.3550': attribute type 12 has an invalid length. [ 623.666527][ T28] audit: type=1400 audit(3932130361.844:4225): avc: denied { unmount } for pid=14196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 623.720480][T17302] loop9: detected capacity change from 0 to 164 [ 623.732471][T17302] iso9660: Bad value for 'sbsector' [ 623.778552][ T311] IPVS: stop unused estimator thread 0... [ 623.809176][ T28] audit: type=1400 audit(3932130361.974:4226): avc: denied { mount } for pid=17301 comm="syz.9.3555" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 623.845844][ T28] audit: type=1400 audit(3932130361.974:4227): avc: denied { write } for pid=17293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.864977][ T28] audit: type=1400 audit(3932130362.034:4228): avc: denied { write } for pid=17312 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.937701][ T28] audit: type=1400 audit(3932130362.084:4229): avc: denied { map } for pid=17301 comm="syz.9.3555" path="socket:[49902]" dev="sockfs" ino=49902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 624.009935][T17323] loop1: detected capacity change from 0 to 512 [ 624.027114][T17323] EXT4-fs: Ignoring removed orlov option [ 624.054783][T17323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 624.082056][T17323] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.3559: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 624.108776][T17323] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 624.110771][T17323] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3559: couldn't read orphan inode 16 (err -117) [ 624.119996][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 624.120018][ C0] EXT4-fs (loop1): initial error at time 3932130362: ext4_ext_check_inode:521: inode 16 [ 624.120067][ C0] EXT4-fs (loop1): last error at time 3932130362: ext4_ext_check_inode:521: inode 16 [ 624.158725][T17323] loop1: lost filesystem error report for type 5 error -117 [ 624.160805][T17323] EXT4-fs (loop1): 1 orphan inode deleted [ 624.174826][T17323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.228196][T17335] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 624.388100][T17356] loop4: detected capacity change from 0 to 512 [ 624.624470][T17375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3562'. [ 626.998715][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.008672][T17157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 627.020953][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 627.051736][T17157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 627.061924][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 627.070695][T17157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 627.080798][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 627.089361][T17157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 627.102074][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 627.218643][T17157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.248139][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.266011][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 627.266030][ T28] audit: type=1400 audit(3932130365.444:4236): avc: denied { read write } for pid=17397 comm="syz.8.3567" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 627.282203][T14725] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.303015][T14725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.326558][T14725] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.333731][T14725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.348441][ T28] audit: type=1400 audit(3932130365.444:4237): avc: denied { ioctl open } for pid=17397 comm="syz.8.3567" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 627.360044][T17384] loop4: detected capacity change from 0 to 1024 [ 627.377847][T17157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 627.377873][T17157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.603832][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.718449][T17384] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 627.857148][T17384] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 627.873798][T17384] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 627.936299][T17384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.107547][T17438] can: request_module (can-proto-0) failed. [ 628.108112][T17157] veth0_vlan: entered promiscuous mode [ 628.125735][T17438] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 628.133305][T17438] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.135806][T17157] veth1_vlan: entered promiscuous mode [ 628.149941][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.177051][T17157] veth0_macvtap: entered promiscuous mode [ 628.184581][ T28] audit: type=1400 audit(3932130366.354:4238): avc: denied { write } for pid=17441 comm="syz.9.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 628.217258][T17157] veth1_macvtap: entered promiscuous mode [ 628.234775][T17444] loop4: detected capacity change from 0 to 512 [ 628.243052][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.264024][T17444] EXT4-fs: Ignoring removed orlov option [ 628.264439][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.291830][T17444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 628.303425][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.312409][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.317078][T17446] loop8: detected capacity change from 0 to 256 [ 628.329105][T17446] vfat: Unknown parameter './file2' [ 628.400442][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.409198][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.420433][T17442] loop9: detected capacity change from 0 to 128 [ 628.469850][T17444] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.3572: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 628.487454][T17442] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 628.488933][T17444] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 628.514716][T17444] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3572: couldn't read orphan inode 16 (err -117) [ 628.524520][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 628.524541][ C1] EXT4-fs (loop4): initial error at time 3932130366: ext4_ext_check_inode:521: inode 16 [ 628.524568][ C1] EXT4-fs (loop4): last error at time 3932130366: ext4_ext_check_inode:521: inode 16 [ 628.597915][T17442] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.621356][T17450] random: crng reseeded on system resumption [ 628.657518][T17444] loop4: lost filesystem error report for type 5 error -117 [ 628.657689][T17444] EXT4-fs (loop4): 1 orphan inode deleted [ 628.692952][T17444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.768110][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.792395][T17442] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 628.801896][T17442] block device autoloading is deprecated and will be removed. [ 628.826259][T14196] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 628.884903][ T28] audit: type=1400 audit(3932130367.064:4239): avc: denied { listen } for pid=17462 comm="syz.5.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 629.017965][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3579'. [ 629.030963][T17470] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 629.068673][T17458] netlink: 'syz.4.3576': attribute type 12 has an invalid length. [ 629.126958][ T28] audit: type=1400 audit(3932130367.284:4240): avc: denied { recv } for pid=3283 comm="syz-executor" saddr=10.128.0.163 src=33112 daddr=10.128.1.128 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 629.345397][T17480] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3581'. [ 629.506649][T17484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17484 comm=syz.9.3581 [ 631.241003][T17475] netlink: 'syz.4.3582': attribute type 12 has an invalid length. [ 631.395544][T17492] loop8: detected capacity change from 0 to 512 [ 631.430474][T17492] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 631.438789][T17492] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.3584: corrupted in-inode xattr: e_value size too large [ 631.452978][T17492] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 631.455355][T17492] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3584: couldn't read orphan inode 15 (err -117) [ 631.494054][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 631.495234][T17492] loop8: lost filesystem error report for type 5 error -117 [ 631.500504][ C0] EXT4-fs (loop8): initial error at time 3932130369: ext4_iget_extra_inode:5180: inode 15 [ 631.500540][ C0] EXT4-fs (loop8): last error at time 3932130369: ext4_iget_extra_inode:5180: inode 15 [ 631.538695][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 631.553052][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 631.558625][T17492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.566687][T17502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3587'. [ 631.609714][T17502] loop4: detected capacity change from 0 to 1024 [ 631.637933][T17502] EXT4-fs: Ignoring removed bh option [ 631.644334][T17502] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 631.660706][ T28] audit: type=1400 audit(3932130369.814:4241): avc: denied { write } for pid=17491 comm="syz.8.3584" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.662079][T17492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.691113][T17492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.748977][T17502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.686380][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.728059][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.833480][T17519] loop4: detected capacity change from 0 to 1764 [ 633.090229][T17523] loop1: detected capacity change from 0 to 2048 [ 633.349457][T17526] random: crng reseeded on system resumption [ 633.455484][T17523] Alternate GPT is invalid, using primary GPT. [ 633.571216][T17523] loop1: p1 p2 p3 [ 633.814809][T17532] loop4: detected capacity change from 0 to 2048 [ 633.824861][T17536] netlink: 'syz.8.3599': attribute type 3 has an invalid length. [ 633.832611][T17536] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3599'. [ 633.954643][T17532] Alternate GPT is invalid, using primary GPT. [ 633.978438][T17532] loop4: p1 p2 p3 [ 634.016347][T17546] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.3603'. [ 634.027103][T17546] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3603'. [ 634.055668][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3603'. [ 634.275952][T17567] loop9: detected capacity change from 0 to 256 [ 634.283669][ T28] audit: type=1400 audit(3932130372.454:4242): avc: denied { mounton } for pid=17566 comm="syz.9.3606" path="/183/file0" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 634.399484][T17572] loop1: detected capacity change from 0 to 512 [ 634.414954][T17572] EXT4-fs: Ignoring removed nobh option [ 634.433464][ T2980] Alternate GPT is invalid, using primary GPT. [ 634.445400][ T2980] loop4: p1 p2 p3 [ 634.453855][ T28] audit: type=1326 audit(3932130372.624:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17570 comm="syz.5.3608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf65ecde99 code=0x0 [ 634.479026][T17567] loop9: detected capacity change from 0 to 512 [ 634.495988][T17567] ext4: Unknown parameter 'nombcache"nombcache' [ 634.513377][T17572] EXT4-fs (loop1): orphan cleanup on readonly fs [ 634.520102][T17572] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3609: EA inode hash validation failed [ 634.532800][T17572] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3609: corrupted inode contents [ 634.544800][T17572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.548972][T17572] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.3609: mark_inode_dirty error [ 634.569674][T17572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.569908][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 634.576877][T17572] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3609: corrupted inode contents [ 634.579077][ C0] EXT4-fs (loop1): initial error at time 3932130372: ext4_do_update_inode:5742: inode 15 [ 634.579123][ C0] EXT4-fs (loop1): last error at time 3932130372: ext4_dirty_inode:6639: inode 15 [ 634.622347][T17572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.633136][T17572] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.3609: mark_inode_dirty error [ 634.657646][T17572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.658178][T17572] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.3609: mark inode dirty (error -117) [ 634.682704][T17572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 634.683263][T17572] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 634.702655][T17572] EXT4-fs (loop1): 1 orphan inode deleted [ 634.711530][T17572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 634.743325][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.987491][T17582] netlink: 'syz.1.3612': attribute type 12 has an invalid length. [ 635.040265][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3617'. [ 635.050517][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3617'. [ 635.063848][T17596] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3617'. [ 635.088196][T17598] loop1: detected capacity change from 0 to 512 [ 635.098106][T17598] EXT4-fs: Ignoring removed bh option [ 635.100327][T17596] loop8: detected capacity change from 0 to 1024 [ 635.110448][T17598] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 635.112881][T17596] EXT4-fs: Ignoring removed bh option [ 635.119565][T17598] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 635.120521][T17598] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 635.143061][T17596] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 635.153004][T17598] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 635.167694][T17598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.196495][T17596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.228817][T17606] EXT4-fs: Ignoring removed bh option [ 635.259316][T17606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.293428][T15073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.317817][T10844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.332665][T17616] FAULT_INJECTION: forcing a failure. [ 635.332665][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.358628][T17616] CPU: 0 UID: 0 PID: 17616 Comm: syz.5.3624 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 635.358738][T17616] Tainted: [W]=WARN [ 635.358746][T17616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.358759][T17616] Call Trace: [ 635.358766][T17616] [ 635.358777][T17616] __dump_stack+0x1d/0x30 [ 635.358856][T17616] dump_stack_lvl+0x95/0xd0 [ 635.358878][T17616] dump_stack+0x15/0x1b [ 635.358899][T17616] should_fail_ex+0x25e/0x270 [ 635.358944][T17616] should_fail+0xb/0x20 [ 635.358975][T17616] should_fail_usercopy+0x1a/0x20 [ 635.359005][T17616] _copy_from_user+0x1c/0xb0 [ 635.359029][T17616] ___sys_sendmsg+0xc1/0x1e0 [ 635.359137][T17616] __x64_sys_sendmsg+0xd4/0x160 [ 635.359293][T17616] x64_sys_call+0x194c/0x3020 [ 635.359324][T17616] do_syscall_64+0x136/0x3c0 [ 635.359353][T17616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.359395][T17616] RIP: 0033:0x7fdf65ecde99 [ 635.359416][T17616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.359439][T17616] RSP: 002b:00007fdf64927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.359476][T17616] RAX: ffffffffffffffda RBX: 00007fdf66155fa0 RCX: 00007fdf65ecde99 [ 635.359495][T17616] RDX: 0000000000048800 RSI: 0000200000000880 RDI: 0000000000000003 [ 635.359511][T17616] RBP: 00007fdf64927090 R08: 0000000000000000 R09: 0000000000000000 [ 635.359542][T17616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.359558][T17616] R13: 00007fdf66156038 R14: 00007fdf66155fa0 R15: 00007ffc782a5868 [ 635.359582][T17616] [ 635.685930][T17622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.694420][T17622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.774120][T17628] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 635.818204][T17628] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #17: comm syz.9.3627: inode has both inline data and extents flags [ 635.851236][T17628] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 635.851523][T17628] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3627: couldn't read orphan inode 17 (err -117) [ 635.860795][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 635.860812][ C0] EXT4-fs (loop9): initial error at time 3932130374: ext4_orphan_get:1399: inode 17 [ 635.860859][ C0] EXT4-fs (loop9): last error at time 3932130374: ext4_orphan_get:1399: inode 17 [ 635.919093][T17628] loop9: lost filesystem error report for type 5 error -117 [ 635.955186][T17617] ================================================================== [ 635.970620][T17617] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 635.977673][T17617] [ 635.980006][T17617] write to 0xffff88811af97908 of 8 bytes by task 17624 on cpu 0: [ 635.987727][T17617] shmem_fallocate+0x26b/0x8f0 [ 635.992515][T17617] vfs_fallocate+0x3ac/0x400 [ 635.997132][T17617] madvise_vma_behavior+0x29c/0x20e0 [ 636.002441][T17617] madvise_do_behavior+0x591/0x990 [ 636.007568][T17617] do_madvise+0x1bd/0x220 [ 636.011914][T17617] __x64_sys_madvise+0x63/0x80 [ 636.016740][T17617] x64_sys_call+0x1eff/0x3020 [ 636.021434][T17617] do_syscall_64+0x136/0x3c0 [ 636.026121][T17617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.032030][T17617] [ 636.034444][T17617] read to 0xffff88811af97908 of 8 bytes by task 17617 on cpu 1: [ 636.042077][T17617] shmem_fault+0x90/0x250 [ 636.046424][T17617] handle_mm_fault+0x167a/0x2da0 [ 636.051382][T17617] __get_user_pages+0x129c/0x1f10 [ 636.056424][T17617] __mm_populate+0x242/0x390 [ 636.061033][T17617] vm_mmap_pgoff+0x23b/0x2d0 [ 636.065649][T17617] ksys_mmap_pgoff+0xc1/0x310 [ 636.070428][T17617] x64_sys_call+0x14df/0x3020 [ 636.075206][T17617] do_syscall_64+0x136/0x3c0 [ 636.079807][T17617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.085709][T17617] [ 636.088045][T17617] value changed: 0x0000000000000000 -> 0xffffc90002177b70 [ 636.095184][T17617] [ 636.097527][T17617] Reported by Kernel Concurrency Sanitizer on: [ 636.103699][T17617] CPU: 1 UID: 0 PID: 17617 Comm: syz.4.3620 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 636.115089][T17617] Tainted: [W]=WARN [ 636.118898][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.128960][T17617] ================================================================== [ 636.143844][T17628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.168528][T17628] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3627: bg 0: block 65: padding at end of block bitmap is not set [ 636.190894][ T28] audit: type=1400 audit(3932130374.344:4244): avc: denied { write } for pid=17627 comm="syz.9.3627" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 636.200316][T17628] Quota error (device loop9): write_blk: dquota write failed [ 636.220312][T17628] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 636.230635][T17628] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3627: Failed to acquire dquot type 0 [ 636.293571][T14196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.377880][T15480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.553869][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 640.473992][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!