last executing test programs: 8m35.865686315s ago: executing program 32 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodotS,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,checn=relaxed,\x00'], 0x1, 0x208, &(0x7f0000000c00)="$eJzs3c1qE18UAPCT/NN8/BHJThCEERe6KuoTVKSCGBAqWehO0JVZtZvUTfsYvoLv5QNIV9nIlelMOmObxBLIROvvt2jP3HNm7seQSTa5SVH4dudL9PutaO/FXsxaMYx2zJ0GAHCTzFKK76lQb+9tb0gAwIYte/+v+dHwkACADXvz9t2rZ6PR/kGW9SPOTqfj6bj4X+RfvBztP87ODfPjVsTtiLPpdPzfRf5JVvvsMMj/5Pmd+L/MPy3Ozy5quhEx7sajB0U+zz1/Pary5+f34kNjqwAAAAAAAAAAAAAAAAAAAAAAAM26F9ncsGqt9vfZ3b2cH5T54qi2P9Cl/Xs6cbdTHlbbA6WTJiYFAAAAAAAAAAAAAAAAAAAAf5mj48+f3k8mHw+roBcR9ZbOgprlQau88LWKtx+0Y73TB+U01+i0VS7RZic4WHxzrxNE50+5O+sGWQN9DX5Z3m5E1GtSyoPFr4L5thhLu8gvtrr3hwfrDn6WUpp8vX94dBxpZXH1jOg1+kQCAAAAAAAAAAAAAAAAAIB/V+1b31f0tzEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiC6vf/8+Bqy8rgJCJuxW+L533tRH+rcwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODm+hkAAP//rqkguQ==") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x21fc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000159, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r7) keyctl$read(0xb, r7, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 8m30.857905001s ago: executing program 33 (id=66): syz_read_part_table(0x5ef, &(0x7f00000002c0)="$eJzs2zFolGcYB/DnYq4HSnFxclKHUIqL4uhRVO5ORUFOsxQpBhQRbzpBOOnRFB30KEpuCOmWJQ3ckqRTLjdkSmggU4cQMqQEMmRpSZZAll65y1fapgR6JSkUfj8OHt73e773/77Hu37B/1pf/NJut1MR0f4x4kSPbw82cvlb5+5dKz6ISMXDiPji20++6zxJJR3tzH69kIzXk/HE+MnWu52b6cba/d2BRwu1vt+XHO7+4tRkc/AIjscxm8ounn79plx4X8k+Wy1UN9+uLN+d3s4Vm3dq9Znb6RuPk74fktqf1BdRiVfxPIaiP76OJ1E+ZP1veswfa2xcSp8tNGafXt3Ltz7MX+529Xqv/7lOfvfCRkQn/+X5kc/r1esXvz8zeqUyt1TcSqJLmYNvDh3bngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PfSsXj69Zty4X0l+2y1UN18u7J8d3o7V2zeqdVnbqdvPO40ffRHf39SX0QlXsXzGIpSlOJJlA9N+PjPg8zBp1PZv+aPNTYu/Xq20Jh9enUv3/owfznpuxdfHdGJD81vd/Jfnh/5rF69fjFzZvRKZW6puHViv6/0t51H998DAAAAAAAAAAAAAAAAAACAo5DL3zo3cK34ICIVDyPi05+/7OvMt5Pv3VNJ34WkrifzE+MnW+92bqYba/d3Bx4t1H5K5ocjFcMRcWqyOfifH4ae/RYAAP//PzGRZw==") 6m5.597891402s ago: executing program 34 (id=571): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x10000, 0x2, 0x2, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x6c0ac5db5f47ae3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x5, 0x50, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) 4m16.10371352s ago: executing program 35 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYRES32=r4, @ANYRESDEC, @ANYRES64], 0x1, 0x2d7, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0\x00') r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) 3m50.725812981s ago: executing program 36 (id=1349): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv4=@empty, [0x0, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0x101000000], 0x80, 0x54, 0x0, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x9000000000000, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3, 0x18}, {0x8000000000000}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) 3m50.089857826s ago: executing program 37 (id=1358): r0 = syz_clone(0x8000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004780), 0x202, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000047c0)={{0x1, 0x1, 0x1018}, '\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x30100, 0x0) 3m26.357528668s ago: executing program 38 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}, 0x1, 0x200000000000000}, 0x0) 3m25.935912157s ago: executing program 39 (id=1537): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000060, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0', 0x1) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000051c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x4800) 3m25.291631212s ago: executing program 40 (id=1547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b0000"], 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @loopback, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x49d2b8f2, @local, 0x4}}, 0x0, 0x0, 0x2e, 0x0, "85a560063c18da85d2c8eb6ae847792028066b9ac1e92625296a2d98a57b031c75323b9e741c9c2fd7d2538cb1403ab04ee80cc599c052735cf86ebcc94804c7b8692e6df7af0d179c45834596dfa1c5"}, 0xd8) sendto$inet6(r0, 0x0, 0x11, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xc}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x80, 0x81, 0xfffff034}, {0x9, 0xb7, 0x2, 0xb}]}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x40107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x2, 0x1, 0x1, 0x7, 0x7f, 0x1000, 0xc, 0xf, 0x3, 0x80000005, 0xfffffffa, 0x2, 0x1, 0x9, 0x4, 0x7, 0x100005, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x20000a, 0x42, 0x8, 0x9, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x41, 0x7f, 0x4, 0xa, 0x7, 0x9, 0x101, 0xa, 0x1fa08607, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x5, 0x1, 0xb, 0x4, 0x7, 0xd, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3fa, 0x8001, 0x6, 0x6, 0x49, 0x80000000, 0xfdffbfff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0x2000b, 0x101, 0x2000a, 0xc50, 0x101, 0x7, 0xf91, 0xd9a, 0xc8, 0x2a4, 0xfffffff9, 0x3, 0x2, 0x5aa, 0x8, 0x0, 0x9, 0x0, 0x1ff, 0x0, 0x8001, 0x4, 0x400, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xfffffffd]}}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@usrquota}, {@noload}]}, 0x4, 0x530, &(0x7f0000000a80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x2, 0xf, 0x7, 0x1, 0x0, 0x5, 0x81006, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1}, 0x1214, 0x168fda5f, 0x0, 0x2, 0xfffffffffffffff1, 0xfffffffe, 0xf001, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r1, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 3m24.161780709s ago: executing program 41 (id=1554): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x2014) 3m22.873544169s ago: executing program 42 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030b000000000000000006"], 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa10, 0x88049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x4, 0x3, 0x0, 0x2, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x1, 0xffffffffffffffff, 0xa) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x100}, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='securityfs\x00', 0x21870d8, 0x0) getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x28040001}, 0x4008040) r6 = socket(0xa, 0x3, 0x3a) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) setsockopt$MRT6_TABLE(r6, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x2c000010) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0xfffffffffffffff0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESDEC], 0xd4}, 0x1, 0x0, 0x0, 0x45}, 0x81) syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x10c10, &(0x7f0000000880)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}]}, 0x8, 0x511, &(0x7f0000000980)="$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") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f00000dd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/111, 0x6f, 0x0, &(0x7f0000000280)=""/33, 0x21}, &(0x7f0000000540)=0x40) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) 3m15.289562205s ago: executing program 43 (id=1576): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) close(0x3) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x23, 0x5, 0x0) close(r1) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x73af1245f84d7000, 0xff, 0x2000014}, 0x2c) 3m13.736774521s ago: executing program 44 (id=1586): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)="a2c099cf632444ec1b1efba421f8beb5157355d21bbf43c4f34e82697a7d04724c7082ceec7876f636c7a58b4e99571a33d45b143623d2c4f54e52c857626f3f15bf83e64acd827e0551fa42c9bdd0ba4f504a41f990c958a700e94ca59f155d188dc575e88e896c8978a57aba01a1d2bbf2f640b588c78373d475f948b430f6ba82aa041238a4862d1769b0b187ae82d332ee113e29d4e64c2b92cf19e105c0ef343bac57251f213477de", 0xab}, {&(0x7f0000000480)="4f3f035e6f43deac84a8a916d4d86ae0e985dc3a5e7a9d41e09669b05b7fd81409536b2442e6e957186367287a2e90e7c35d2a2bb1ffc0e1908c5d66c37a112b0a9950c3bcbbb66995e5e46c6beac67a0aa5851a4b08b1e6cab4608d712786796fed77684b99924c70b1d53705942006988540d4b9f2c038d69a2e270f756a9c7358c0d659af2edcfd5781b89de5fca707e168", 0x93}, {&(0x7f0000000540)="b21fb07e3f044f057729b46a38afd16999fe834f881658ee082ae96103d4344a1a2fd9a0538d44352404ffdf39b4ef0e3a7393c63e2f8c6e1a930fb5370beb202605d35ed609800d75d3d050daec5d9dc375e6f50363eb000a81b51d11ba9f79742509162d981d196fd9b50019672c51d56dc460477095c8b75d3d9f4ad3268207c0ad37cee03c9a229d8e3efeac4b0bb137547cb580d420df30d4c31903c13dd038e4e6b1a994f4b0054dc79a733b4c27535c148f5e", 0xb6}], 0x3) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m45.236826035s ago: executing program 45 (id=1760): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9a1, 0x0) r1 = socket(0x23, 0x3, 0x10000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x5, 0x8e58ab0c8bb3c4b4}}, 0x1c}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r4, 0xd, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x9, 0x1e, 0x0, "060a285aef57fb5dc2505c24298fe5e3616507b5a215b3f0dc900f16eeccaab52ff0df33c68ebc205f9a2824f217a78dc10285593b6ae010958f6455188d1f97", "3787e1496cb94ccc0a23fcc87fc11f9f888b9f8d57065c55d2d71380ae97cdb01e9cb0f6ccc677fcdeecfdd01a4e71b618d4b1469cbbe15e69e568ea54e49029", "cd62bf7629d8ba897263d3d8d90458f4aed481c0cf1f2076d7450044992768d3", [0x101, 0x4]}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) r7 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x3, 0x0) bind$tipc(r7, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xd4000000}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x23}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xac0}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x80000001}]}}]}, 0x78}}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) setns(r13, 0x24020000) r14 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = syz_pidfd_open(r14, 0x0) setns(r15, 0x24020000) capset(&(0x7f0000000280)={0x19980330}, &(0x7f00000002c0)={0x2, 0x6, 0x1, 0xe12, 0x3, 0x3}) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 2m19.801170707s ago: executing program 46 (id=1931): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x54c52000) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r10) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0x40050) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4885) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x2, 0x100, 0x0, 0x86020086, r7}) 2m17.121686169s ago: executing program 47 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x2d7, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) socket$kcm(0xa, 0x2, 0x73) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) 2m14.351626024s ago: executing program 48 (id=1962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) 2m13.492653874s ago: executing program 49 (id=1970): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a80)=""/147, 0x93}], 0x1}, 0x10020) 2m13.492261004s ago: executing program 2 (id=1972): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x100008}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) (async) close(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000200)=""/8, &(0x7f0000000240)=0x8) 2m13.372202947s ago: executing program 2 (id=1973): alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), 0x0}, 0x20) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0\x00') socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000180), 0x1004) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2m12.184173254s ago: executing program 2 (id=1974): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m12.136078415s ago: executing program 2 (id=1975): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m12.033659988s ago: executing program 2 (id=1976): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000aed"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000a8503943b15ae7a70100002020207b1af8ff00000000bfa100000000000007010000f8ffffffa600000008001000b70300000000000085000000760000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0x100000000000ffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000240)={0x7, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002060, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x4, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) getdents64(r6, 0x0, 0x0) 2m11.781389003s ago: executing program 2 (id=1977): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000600)={0x7, 0x7, 0x1, 0xffffff7f, 0x7, 0x0, [{0xa, 0x7, 0x5, '\x00', 0xe}, {0x101, 0x3, 0x1a6, '\x00', 0x1408}, {0x81, 0x6, 0xfffffffffffffffd, '\x00', 0x2}, {0x860, 0xd365, 0x3, '\x00', 0x400}, {0x450, 0x2, 0x1}, {0x100, 0x2, 0x893, '\x00', 0x5}, {0xfffffffffffffffb, 0x8, 0x5, '\x00', 0x800}]}) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x80f) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x54007bede1c2bfbc}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m11.778913403s ago: executing program 50 (id=1977): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000600)={0x7, 0x7, 0x1, 0xffffff7f, 0x7, 0x0, [{0xa, 0x7, 0x5, '\x00', 0xe}, {0x101, 0x3, 0x1a6, '\x00', 0x1408}, {0x81, 0x6, 0xfffffffffffffffd, '\x00', 0x2}, {0x860, 0xd365, 0x3, '\x00', 0x400}, {0x450, 0x2, 0x1}, {0x100, 0x2, 0x893, '\x00', 0x5}, {0xfffffffffffffffb, 0x8, 0x5, '\x00', 0x800}]}) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x80f) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x54007bede1c2bfbc}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m10.849436656s ago: executing program 6 (id=1979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x60b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x168, 0x4, 0x0, 0x1, [{0x164, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x154, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2m10.776976117s ago: executing program 6 (id=1980): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$bind(&(0x7f0000000280)='.\x00', 0x0, 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m10.66227718s ago: executing program 6 (id=1981): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m10.556212192s ago: executing program 6 (id=1982): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m10.440344765s ago: executing program 6 (id=1983): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7225}]}, 0x28}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x6}, 0x8) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0xb72}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.701708195s ago: executing program 6 (id=1984): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1000, 0x9, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r4) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)=""/199, 0xc7}], 0x1, &(0x7f0000000480)=""/59, 0x3b}, 0x2}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/241, 0xf1}], 0x1, &(0x7f0000000c00)=""/208, 0xd0}, 0xd}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/118, 0x76}], 0x2, &(0x7f0000000940)=""/122, 0x7a}, 0x8}], 0x3, 0x2, &(0x7f0000000240)={0x0, 0x989680}) fcntl$getflags(r3, 0x401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet(r5, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) unshare(0x22020400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x2c020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1100190000008379b4990727fddc7c00"/29, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f0000000000), 0x0}, 0x20) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) write$nci(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7105015f020200066e40013738d8936b127de2b4d25de0cc04a970858805c02274973bf01dcd3a8cf6054f88fbe1dff61c5d50c4ceeeb7452fd299ea2c085aee0d9b9607400984b7ef00afd41d1359b277fe94baec3810523d33978ea4433d"], 0x4a) 2m8.696175306s ago: executing program 51 (id=1984): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1000, 0x9, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r4) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)=""/199, 0xc7}], 0x1, &(0x7f0000000480)=""/59, 0x3b}, 0x2}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/241, 0xf1}], 0x1, &(0x7f0000000c00)=""/208, 0xd0}, 0xd}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/118, 0x76}], 0x2, &(0x7f0000000940)=""/122, 0x7a}, 0x8}], 0x3, 0x2, &(0x7f0000000240)={0x0, 0x989680}) fcntl$getflags(r3, 0x401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet(r5, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) unshare(0x22020400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x2c020400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1100190000008379b4990727fddc7c00"/29, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f0000000000), 0x0}, 0x20) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) write$nci(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7105015f020200066e40013738d8936b127de2b4d25de0cc04a970858805c02274973bf01dcd3a8cf6054f88fbe1dff61c5d50c4ceeeb7452fd299ea2c085aee0d9b9607400984b7ef00afd41d1359b277fe94baec3810523d33978ea4433d"], 0x4a) 2m7.890547184s ago: executing program 9 (id=1986): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) (fail_nth: 3) 2m7.569341782s ago: executing program 9 (id=1987): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$bind(&(0x7f0000000280)='.\x00', 0x0, 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m7.480103824s ago: executing program 9 (id=1988): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m7.369894336s ago: executing program 9 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m7.302925528s ago: executing program 9 (id=1990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000f00)={'gretap0\x00', 0x0, 0x700, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x3, 0x1d, 0x14, 0x66, 0x3, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @empty}}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0xa) 2m6.625969744s ago: executing program 9 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$bind(&(0x7f0000000280)='.\x00', 0x0, 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m6.625801324s ago: executing program 52 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$bind(&(0x7f0000000280)='.\x00', 0x0, 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 2m3.038044337s ago: executing program 7 (id=2006): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f00000001c0)="f733419517289f3f43014fa83cc8b708d16ddedf09c6b1402de6bdc5891511e7a97c7d59df36f948cfe3638bb52a307367d3e539e9b01f5776") setrlimit(0x5, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x2000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmmsg(r5, &(0x7f0000007a40), 0x0, 0x40000023, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) clock_adjtime(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m0.891256647s ago: executing program 7 (id=2014): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x10a) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)) 2m0.110797155s ago: executing program 7 (id=2018): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000024000/0x4000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0x7dc, 0x38, 0x0, 0x0, 0x40}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40801) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200500, 0x0) sync_file_range(r4, 0x6, 0xed, 0x1) name_to_handle_at(r4, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@ocfs2={0xc, 0x1, {0x0, 0x6, 0x80}}, &(0x7f0000000240), 0x1400) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4ffa, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x1, 0xee01, r1, 0x0, 0x0, 0x140}, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}) 1m59.937447299s ago: executing program 7 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 1m59.826251332s ago: executing program 7 (id=2023): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000b00)={r1}) 1m58.141890811s ago: executing program 7 (id=2027): ioprio_set$uid(0x3, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r0, r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1m57.993435124s ago: executing program 53 (id=2027): ioprio_set$uid(0x3, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, r0, r1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1m43.894833333s ago: executing program 0 (id=2119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000840)={@random="203deec9a0e2", @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1ff, 'X', "3f3b17", 0x6003}}}}}, 0x0) 1m43.854083544s ago: executing program 0 (id=2120): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = socket(0x1d, 0x2, 0x7) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$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") (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004000b008e9f"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@loopback, @initdev, @broadcast}, &(0x7f0000000040)=0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x20000080}, 0x80) 1m42.625325062s ago: executing program 0 (id=2123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0a00fe14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a604ffffffb000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x9}, 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'macvtap0\x00', &(0x7f0000000300)=@ethtool_eee={0x44, 0x5, 0xf, 0x8, 0x81, 0xaa, 0x0, 0x6, [0x4, 0x5]}}) socket$nl_route(0x10, 0x3, 0x0) ustat(0x11, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x200080c0}, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = getpgid(0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x194, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x61, 0xc, "94b5815a3c9a728e01b81f5cbe66f501929c5a524393dc66de8418f977003f6b7a4faa277cb33e900fce6bc1554bc96a2c427fbfeba3b13d53924f06fcf04a045260d5c632cf7708b38c715249b6df17290af0b88b5ffce8340368107a"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe6d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x928}]}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3bedc33b}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x331}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4b2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x48, 0x6, "c00a1719713822f25642ba7c69d922a6fa1187a3ab25960bdf7926da6ac20f8ae1b2db08b1592fb0551109b53cc537852ee530f65874af82a4d10b3e6a60a4e34ac92c1b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x202, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x13, 0xc, "d71ff632b9826f150c16e5a2eafc03"}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x801, 0x0, 0x0, {0x8f426ba7ae585ebe, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x108, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xdc, 0x8, "c65837641af3b1228756e3cc87af30f5df02ea66687904a2e6906d3b14a6f45196821619335e69ef55d23c25e9316219198d5554b5f46aeefa269e2ed146f092f5a21435d1ea43cbd3a78a9f3478d2aaeb7611e31cfbd5154d23bbd3e24e4922010d86d42bd5d90445a2ffa2fb051468d218112f925471b008e576645589361f3ebe6790b07a1d44c0932e5166e1a26a97d040af1d0717d482b0bad8d37fef68e2a4bc25f374029f6791f574d0351d6867b512cc9615af48260bd9795e38337e79f972a9bcd3c81ff430cd2d007e0139f7e93cc1e10b8fd7"}]}, @NFT_MSG_DELRULE={0x6a4, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x660, 0x4, 0x0, 0x1, [{0x63c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x62c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x10000}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DATA={0x19c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "f8c421d923a56ec6ed175d453de11b98aa69978d062ab8e0f7814faa4cce6409f6885d8c9e521995752b856a5e2c710fa886cf50e63d7d2da0845ca816ad3d0d5ca9f8b39b452ce7ea1106ed4455da01017d85bd615fc8e3a518f74110aa3bffbeb9f65fa6ccec4c8107eaa12d754481b4a8df0cb9c4b357acf672b474a7da17bb312097a45cf2363d5874b79518bcfaf699a3d386c007be11eee754ca1b0857348b80ee782a6fd8363c3cba087b69f2dcf8c436ce77ffe095f93dd48d56ae155dc3237537bbf75a87e0b07c1902cdbca20d407374c3383c0f7e4ed1c417d60baffc946eb7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x24, 0x1, "52d90b2d8c732720f2947327d29631b32770eb9ecbb0deb4d268a46d7089e9e8"}, @NFTA_DATA_VALUE={0x5, 0x1, 'X'}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x384, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "f3f36b73e33461cec90127e332c62ad88803520c0ad007bc56936105f0218739e61d800b042e727e9ff118550ce8f47dab7846c0c000f9ae1b7c7c070abff486e4920e58b8f03803eec5a181ae38abe816a5cd11f29ffc54f90534f057bc8feff3e47780ed95801a"}, @NFTA_DATA_VALUE={0x8d, 0x1, "eb400c47063e03b8cadd69f67b08f46c8eea5804a344fe875c092a830b2d16d91c0d6a65041d2eaf2a160555218e33904ee72b76b7e738af1e480fa80bd18a89217a528b772835761b386c30b9d53c2ff443c0891e5f13a601b43bce1100199a27902b11bb900d8d5953c1f024fe8924d79f7ed4bcd857aedba4b008fb6fc4b5d338c003fb1699d397"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "e08cd76da81a507cfdfcba012a856e58ffcef6c3fee372a352f6c4c65a9ddaff44d2aee2a30d0055f2a31c1657c7c2d7fe972f04b22b2086fe3b674432a4a39fa71ff8a3a5c2782f938adc2391"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9, 0x1, "34016c7635"}, @NFTA_DATA_VALUE={0xbb, 0x1, "dcb32ea5ed123fb07925b769b163bdc825f4eebfcb40bb79e5e5963709413f1ba951c244f3c1a48e6a477a1cb87725bcd94e7ce515fa36ec8f909ded5120e7bc3e8f575f93734dabdf9078f50eb263dc6817d729ed0337dda6cff1b722878471626f0473eea8485f6e520704955fd3e908edba4c2edb3baee5221d2e7cc9a6699ced18844506198c06a323c1e17ec5d9b7964258bd6d77f530246c6fb8e7a86706591c9243eb03dd0795f0914087bce92fe3796d509dd9"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "b3f985d11621323624b571ba06354af9b0879b9da31bec8239308c39f8a00e58708d1626f5fd1f590fc8e7c7410847df773edfea821b03af568ab4cab1e1e81ffdaaa22fa35e9c375747e3d796bde4984a552cfb862decd53ac20c1c859fcccb395f4f8ee66febbf1b3fd32ee65c59a9fcef164356f494ba1c014bfdc294b1e69224c234d65547602dbed0aceb1022a8b47724b22f31471aec98a3bcde9229daaf1e9d8b1ff87066183c618724d7feba65c802cbd9f6dead3b0922fa2b8d11170d6addb90bda5ffc19905a6989"}]}, @NFTA_BITWISE_XOR={0x8c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "098c7e688dc5755c3635e9ccfb2309b90f1b33a84be9467dff11ef6e648f0181c1acc28a3b33e1649660223edfb11f867f89ae963585370f6c47ee93cc04fec4301139ae54af7e97da3c5f0846bd6c687f36ea8e647d0f67573f84d924d970c3ab058dad22dfe3462449ecc18e901c58a1faa7cb2178a4c01d94daa6e1cf7e233693ae"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x54, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xacc}, 0x1, 0x0, 0x0, 0x20000880}, 0x48005) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000c80), 0xc}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000008a0000009500000000004000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70383dd0000000700008500000086000000bf09000000000000550901004100000095000000000200000000000000ffffff5d00f8ff80000000bf91000000000000b702000002000000000000009500"/112], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdfffffffddbdf251d00000008000300", @ANYRES32=r8, @ANYBLOB="44002f80080001000000e6ff0b0002"], 0x60}, 0x1, 0x0, 0x0, 0xd49920d372514742}, 0x4000040) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 1m41.453409129s ago: executing program 0 (id=2136): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 1m41.278356074s ago: executing program 0 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000db27000000850000007b000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0xfffffffffffffd88, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xa28, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc00000003010102000000000000000002000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r3], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x7, 0x2, 0x2, 0x2b}, {0x9, 0x7, 0x4, 0x1000}, {0xfffb, 0x8, 0x6, 0x2}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x66, 0x7, 0x6, 0xffff}, 0x10) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000006c0)) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r6 = syz_ublk_setup_io_uring(0x6a26, &(0x7f00000004c0)={0x0, 0x8422, 0x400, 0x1}, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000680)={0x95d, 0x0, &(0x7f0000000640)=[r5, r4, r4, r4]}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000007a03000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94) 1m40.484341882s ago: executing program 0 (id=2141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000840)={@random="203deec9a0e2", @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1ff, 'X', "3f3b17", 0x6003}}}}}, 0x0) 1m40.402334444s ago: executing program 54 (id=2141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000840)={@random="203deec9a0e2", @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1ff, 'X', "3f3b17", 0x6003}}}}}, 0x0) 7.665721332s ago: executing program 5 (id=2856): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x8000) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044800, 0x0, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000002c0)="75e4082470cfd08e3f76afcb96b02671e5150808d58594dcc7272530e34a", &(0x7f0000000300)=@udp6=r1, 0x2}, 0x20) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xa0, 0xc9, 0x19, 0x20, 0x5ac, 0x223, 0x7055, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x0, 0x20, 0x7, "", [{{0x9, 0x4, 0xdd, 0x3, 0x0, 0x3, 0x6f, 0x2}}]}}]}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000000)={0x1, 0x8, "39e192", 0x1, 0x2}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_create(0x6, &(0x7f0000000400)={0x0, 0x36, 0x0, @thr={0xffffffffffffffff, &(0x7f0000000380)="2722a3cda2dbf92c89311aa42f982f14b0083986f40b0fef3decfe80ffe5cfc50fda8c324ead82e2ea7a6c864ca4f4fa0b6acc73d1322d6a22cac6ecbda19f898363048001dd56e3ee3ad559c5faa0fdd6ff"}}, &(0x7f00000004c0)) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) 7.011841717s ago: executing program 1 (id=2862): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r0, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x6, 0x400008, {"723c38b0aeb941cee44b23c949e03650"}, 0x7, 0x6, 0x1}, @ib={0x1b, 0xc, 0x0, {"00000000009de402e395c51a00000009"}, 0x80000, 0x0, 0x1000003ff}}}, 0x118) 6.90196353s ago: executing program 1 (id=2863): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) 6.879479821s ago: executing program 1 (id=2864): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x8b25714e) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10) 5.909916093s ago: executing program 1 (id=2869): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x8, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)="1307622fb9f5d6c0e21b8e36450ff1df", 0x10}], 0x1}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r9 = socket$phonet_pipe(0x23, 0x5, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r9, r10, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x9f8]}, 0x0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r12) 5.243697388s ago: executing program 1 (id=2877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x37}, 0x28) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x480}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1, 0x1, 0x4}, 0x50) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x1e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) close_range(r3, r4, 0x0) r6 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r6, 0x0, 0x0, 0x0, 0x600) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private, @remote}, &(0x7f0000000140)=0xc) r7 = getuid() setreuid(0x0, r7) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000140)={0x401, 0x4, 0xdad, 0x3, 0x17, "50a16c6ea80a8f35"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r9}, &(0x7f0000000700)=0x8) socket$netlink(0x10, 0x3, 0x10) 5.243080348s ago: executing program 8 (id=2878): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200153800000000000000001700000000060000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="001812dd290000000000000000000000f6ffa666a2be03897f275ae827f80f1a88b6d346c218f58b6cb2ff6f4309a0c04f310000000000002e8e7291e77224625f69e428841dd6d542d70426ca71cc236700c7a00ee479715974f588f35e8b193e2b", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x3, 'veth0\x00', {0x4}, 0x7}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x58) 4.32024688s ago: executing program 1 (id=2881): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mq_open(&(0x7f0000000080)='system.sockprotoname\x00', 0x840, 0x20, 0x0) (async) r1 = mq_open(&(0x7f0000000080)='system.sockprotoname\x00', 0x840, 0x20, 0x0) read(r1, 0x0, 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x49, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x6, 0x1, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') lseek(r6, 0x1000801, 0x0) (async) lseek(r6, 0x1000801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000, 0x2}, 0x8}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r5, 0x0, 0x9) (async) write$cgroup_subtree(r5, 0x0, 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x14) socket(0xa, 0x2400000001, 0x0) (async) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x2, 0x1, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000080)={0x3, {{0xa, 0x4e21, 0xcf, @mcast2, 0x1}}}, 0x88) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000080)={0x3, {{0xa, 0x4e21, 0xcf, @mcast2, 0x1}}}, 0x88) 3.218223466s ago: executing program 5 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x9, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) 3.217592406s ago: executing program 8 (id=2885): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) readv(r0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)=""/250, 0xfa}], 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000001740)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x3e}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010132}, {@local}, {@empty}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000110) 2.890040583s ago: executing program 5 (id=2887): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (fail_nth: 18) 2.798625695s ago: executing program 5 (id=2888): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfe, 0xfe, 0x5, [@volatile={0x10, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8001, 0x0, 0x0, 0x8, 0x3}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0x7, [{0xb, 0x0, 0x3}, {0xc, 0x1, 0x8}, {0xa, 0x10001, 0x6}, {0x9, 0x1e}, {0x8, 0xfff, 0x7fffffff}]}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @struct={0x8, 0x8, 0x0, 0x4, 0x1, 0xffffffff, [{0x3, 0x3, 0x4}, {0x7, 0x4}, {0xf, 0x3, 0x2}, {0x2, 0x2, 0x8001}, {0x10, 0x5, 0x9}, {0x8, 0x2, 0x80}, {0x10, 0x3, 0xfffffffc}, {0x0, 0x0, 0x3}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x80000000, 0x2}], ')('}]}, {0x0, [0x5e, 0x5f, 0x0]}}, &(0x7f0000001b80)=""/112, 0x11d, 0x70, 0x1, 0x1ff}, 0x28) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x4b, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001c40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x0, 0xe, 0x10000, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001d40)=[r2, r3], &(0x7f0000001d80)=[{0x3, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x2, 0x1}, {0x1, 0x4, 0xf, 0x1}, {0x4, 0x1, 0x9, 0x3}], 0x10, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000040)={[{@nodelalloc}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfe, 0xfe, 0x5, [@volatile={0x10, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8001, 0x0, 0x0, 0x8, 0x3}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0x7, [{0xb, 0x0, 0x3}, {0xc, 0x1, 0x8}, {0xa, 0x10001, 0x6}, {0x9, 0x1e}, {0x8, 0xfff, 0x7fffffff}]}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @struct={0x8, 0x8, 0x0, 0x4, 0x1, 0xffffffff, [{0x3, 0x3, 0x4}, {0x7, 0x4}, {0xf, 0x3, 0x2}, {0x2, 0x2, 0x8001}, {0x10, 0x5, 0x9}, {0x8, 0x2, 0x80}, {0x10, 0x3, 0xfffffffc}, {0x0, 0x0, 0x3}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x80000000, 0x2}], ')('}]}, {0x0, [0x5e, 0x5f, 0x0]}}, &(0x7f0000001b80)=""/112, 0x11d, 0x70, 0x1, 0x1ff}, 0x28) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x4b, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001c40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x0, 0xe, 0x10000, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001d40)=[r2, r3], &(0x7f0000001d80)=[{0x3, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x2, 0x1}, {0x1, 0x4, 0xf, 0x1}, {0x4, 0x1, 0x9, 0x3}], 0x10, 0x6}, 0x94) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000040)={[{@nodelalloc}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") (async) 2.687672418s ago: executing program 3 (id=2892): sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0x8b25714e) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10) 2.553192181s ago: executing program 4 (id=2893): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0400"/12, @ANYRES32, @ANYBLOB="e50bc7ee9ad1a8dcef2de393c9741f57e93d2869b9231763f5a90d962bfde58223234ec127c2083452b0db5bf75b6c7b3d36062b79198e14039cf7dd53075df046a59ed073aaa30c36a9f6d6136fe4f2634307b4b4", @ANYRES64=0x0], 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000108}]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) personality(0xfe47fef9f5ff7379) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000440)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006"], 0x5c}}, 0x20084884) io_submit(r1, 0x5, &(0x7f0000000700)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x7ff, r0, &(0x7f00000000c0)="1035a61a629e9aaa12682c2572285c002ec4742e4385a59d10cb327a2cf237592509276f23925361a0b24704813377f0897cdab913375ddeace0966c18c8a1cc1ecdba43828529986cffe0bb05f035e176d6c16f553ecee18d22e0c3620d65a2a1036a2b2a07", 0x66, 0x800, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000003c0)="f22d94fb382322035d9058136bc8cf34ce485ad170ab2b0f5274b8f899d3ced195ed15014eb51ec4d337da4ae3b095f9678c321eee7bfdfa3cab746bc01716f3eb16d2457fe77efe6b4ef44616e358b5fe8f6d8d1bf52fc41b6d06bb09a94ba6450ad914cd20ce12ccddf531d849b5372b2ae0521fb2eaf05c3cb6e7a798179f751bfe4f8c3a3a47d01a17353d79ad709527beb98a36d769964c42c4b21aaf31e191d74297cb457e94686d3cefd8a3148b5b0182c281a1", 0xb7, 0x3140000000000000, 0x0, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f00000004c0)="4005c4485aa579e52d62fa547f0d993a3c", 0x11, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000540)="f92525f6c5001472cd32a056462963a3f2e07cbf97329a15c67bd2b60b1ef4bebf64fa37146bed1e67c51100c17ba5a393b8268c4247c7285d6ef5a91e770dd5343c715060baa3c9defcaa943ab720435cf9e7108b422666e7c4d93af87df62f9f6f6b3ebd1ac5dc01809df30e06b0607535ce2067b51d93b77d7762ef47d6c78dd68c5aae6040d5532f6356e8d8bba5bda01d6c940aefb729db9303961aaba64ad9359d21492bd2773a6d760424491e4c44cae5afb606c13e5c60970ca63e1a8b74895962ff52100e95623478df917225bf773f7d40e6804e4bda5b5b032469a9bedc7bc75eac3dbe62b46062379f287c2d218d1bd473", 0xf7, 0x3, 0x0, 0x3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x17319ae3f7d60ac6, 0x4b, r0, &(0x7f0000000680)="974b1e2678b04430b7955f3f8d388531871ff410dd33d26efe4b88b9f7881d3b72fb46", 0x23, 0x9}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000ade2000000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r6, 0x1, 0x2c, 0x0, &(0x7f0000000100)) 2.541335592s ago: executing program 3 (id=2894): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000010000000000000008000c097eb7b7947f91f43c5300007b8af8ff00000000b708000035f500007b8a57dd91bc2328ced46e6a52bfa100000600000007010000f8ffffffbfa400000000000007040000f0fffffff802000005000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) getpgrp(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) 2.529307291s ago: executing program 3 (id=2895): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x1}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200153800000000000000001700000000060000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="001812dd290000000000000000000000f6ffa666a2be03897f275ae827f80f1a88b6d346c218f58b6cb2ff6f4309a0c04f310000000000002e8e7291e77224625f69e428841dd6d542d70426ca71cc236700c7a00ee479715974f588f35e8b193e2b", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x3, 'veth0\x00', {0x4}, 0x7}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x58) 2.467786403s ago: executing program 4 (id=2896): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000640)="a00028832cb8782c", 0x8}], 0x1}}], 0x1, 0x4) (fail_nth: 1) 2.358277676s ago: executing program 4 (id=2897): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000fffffff3000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797ab0000000000900030073797a320000000014000400000001"], 0x7c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_clone(0x800, &(0x7f0000000400)="c759bc0c42bdfbc89997ca21b648fc858ed399d3aa29a3d3", 0x18, &(0x7f0000000440), &(0x7f0000000a00), &(0x7f0000000a40)="64175060f2fc348b337e13ac5200397c10803936332175c2df6c436ded108a982e08325505742bf1de843c2c3589dcea6c7b191741325a7faacbe0cbdae4e3774cb5374bf2de201d4732674aaf5b4bc7e50692e9bb55e418a7efe9c26333a51079553349c5affcfe9e9b61f279f74a803a421bedf93bfcbb990e76969965182db378c204750105c2b7118c6773") ptrace$peeksig(0x4209, r6, &(0x7f0000000b00)={0xc, 0x0, 0x6}, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}]) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) unshare(0xa000200) r7 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000040)=""/141) unshare(0x6a040000) fsopen(0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x300, 0xffffffff, 0xb0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'sit0\x00', 'veth1_to_hsr\x00', {}, {0xd7fffbe779abf152}, 0x8, 0x1, 0x2}, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYBLOB="000052000600050001ffa100080008"], 0x2c}}, 0x40080) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100000008000300ff0f000008000700"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 2.072182232s ago: executing program 8 (id=2898): socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x79, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000715000300686173683a69702c706f72742c6e6574008689bccb00020073797a30000000000c0007800800130000000020050005"], 0x5c}, 0x1, 0x0, 0x0, 0x283469c4fb420076}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x2000, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x11ecc8, 0x201224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.104094295s ago: executing program 5 (id=2899): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)="ca", 0x1}], 0x2, 0x0) read$char_usb(r0, &(0x7f00000004c0)=""/231, 0xe7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyHb8I1nshWV3czMsZAMhcpz1JrvQQ0oPpdBAoD03MbJiUstWsOQQG0MTSqGXQlt6KLSXnPsjvfXaH9BT+1/0UBLSxglN6aG4jDSyFVtybMe23PrzgfG892bk977zZjRPmkETwIE1nP7JRRyNiLeTiMGsPImInlqqO+Jcfb1HS4t9EVFIYnn5pZ+S2joPlxYL0fSa1OEs88+I+OqNiBO59fVW5hemxkul4myWH6lOXx2pzC+cvDI9PlmcLM6cGR0bO332v2fP7FysP3+3cOTuO8//+9Nzv77+j9tvfZ3EuTiSLWuOY6cMx3C2TXrSTfiY53a6sg5LOt0AtiU9NLvqR3kcjcHoqqXa6N/LlgEAu+W1iFgGAA6YxPkfAA6YxvcAD5cWC42ps99I7K17z0ZEXz3+R9lUX9KdXbPrq10HHXiYPHZlJImIoR2ofzgiPvz8lWNdWT5th2tpwF64cTMiLg0Nr3//T9bds7BVpzZauNxbmw2vKT5o5x/opC/S8c//Wo3/civjn2gx/umtH7t/f9r62x7/K4Or3J2nrWMj6fjvmfq9bWvGfys3rQ11Zbm/1JrVk1y+UiqeyrZBKs2P1lKtR27HH/z2oF392fjv43S6/+6rH6X1p/PVNXJ3unsff83EeLX7m6cJusm9mzGQJdfEn6z0f9Jm/Hthk3W88P83P2i3LI0/jbcxrY9/dy3fijjWsv9X+zLZ8P7EkdruMNLYKVr47Pv3B9rV39z/6ZTWn853PtLW7t2MGLg/GEmyug3qS1biH0qa79esbL2Ob28Nftlu2ZPjb7n/jx9KXq6lD2Vl18er1dnRiEPJi+vLT6++tpFvrJ/Gf/xfrY//erWt9//0M+GlTcbffffHT7Yf/+5K45/YeP9f0/99WfFqyZMStx9NdbWrf3P9P1ZLHc9K0v5/Ulybadf29mYAAAAAAAAAAAAAAAAAAAAAAAAA2LpcRByJJJdfSedy+Xz9Gd5/i4FcqVypnrhcnpuZiNqzsoeiJ9f4qcvBpt9DHc1+srWRP70m/5+I+GtEvNfbX8vnC+XSRKeDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM4TbP/0/90Nvp1gEAu6av0w0AAPac8z8AHDxbO//371o7AIC94/M/ABw8mz7/X9rddgAAe8fnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZhfPn02n5l6XFQpqfuDY/N1W+dnKiWJnKT88V8oXy7NX8ZLk8WSrmC+Xptv/oRn1WKpevjsXM3PWRarFSHanML1ycLs/NVC9emR6fLF4s9uxZZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACweZX5hanxUqk4+6dI3FgNbIf/c39H4xrYH5u3KdEd+6IZ+zrRG/uiGdtMNL9L9HfgnQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgj+H3AAAA//+0Bxg2") acct(&(0x7f0000000280)='./file1\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c2ea, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) syz_emit_ethernet(0x8b, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@generic={0x4, "df9c5d4900b1702732e503d3ed77f4590aaed0cc3703890cff223e98868c08af9ce76368c29d447a5636cbce8cc01d8f37c65270f3e12bff2c9cc41bc8a942396c084d1815c2ed85f5a60a21cbf7739ebf7d0edbe1c7184d1d0660e410b54e2703a566b361348e74a071d305bb4c6648c7eb5e94963b29025797a14bbf"}}}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xf802}}, './file1\x00'}) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x1, @local}}, 0x1e) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r5, 0x0, 0x8000fb00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r8, &(0x7f0000000540)="2c969650640dd62863688f25e974ed63772dfc9805ec8a19080134e4460d6d4ab6714bf5e4685fac7bb543c8f49ea80cd2d1f335c7c4b55a33aeb146", 0x3c, 0x2) r9 = getpid() perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x2, 0x6, 0x81, 0x3, 0x0, 0x2, 0xc2081, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0x4}, 0x10001, 0x9, 0x0, 0x5, 0x8000, 0x9, 0x101, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, r9, 0x1, r8, 0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000000000000070000000800030000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24044080) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x20}}}}, ["", "", ""]}, 0x20}}, 0x40) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r6, 0x40186e8d, &(0x7f0000000780)={&(0x7f00000006c0)=[{0xc, 0x0, 0x0, {0x2, 0x5, 0x3}}, {0x2, 0x0, 0x0, {0x4, 0x1, 0x2}}, {0xff, 0x2, 0x0, {0x1, 0x1000, 0x1}}, {0x6, 0x2, 0x0, {0x36, 0x6, 0x2}}, {0x81, 0x0, 0x0, {0x5dab, 0x2, 0x2}}, {0x8, 0x5, 0x0, {0x5, 0x7fff, 0x1}}], 0x6, 0x20, 0x6, 0xb}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0e00000e24000000020000000000000000000000d1d06322934df5d3"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 1.042817936s ago: executing program 4 (id=2900): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) (fail_nth: 5) 923.301729ms ago: executing program 4 (id=2901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x5, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdff7f8, 0x8, 0x8, "000000000000000000000042d8663000"}) syz_open_pts(r1, 0x155081) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x653a) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x2, 0x200, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r4, &(0x7f00000000c0)="182e", 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) socket$netlink(0x10, 0x3, 0xb) shutdown(r4, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 922.397809ms ago: executing program 8 (id=2902): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x1d, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x74, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x618000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000400)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x10000, 0x3, 0x322, 0x3, 0x8001]}, &(0x7f0000000480)=0x78) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f00000003c0)={&(0x7f00000002c0)=[{0x8000000000000001, 0x0, 0x0, {0x9905, 0x8, 0x2}}, {0xfffffffffffffc00, 0x0, 0x0, {0x4, 0x68, 0x1}}, {0x9, 0x0, 0x0, {0x401, 0x6}}, {0x9, 0x1, 0x0, {0xffff, 0xfffff3da, 0x1}}, {0x1, 0x1, 0x0, {0x4, 0xb}}, {0x8, 0x1, 0x0, {0x10000, 0x4, 0x1}}, {0x4f6, 0x1, 0x0, {0xc9, 0x800, 0x2}}], 0x7, 0x20, 0x3, 0xfffffffffffffff9}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000180)=0x14, 0x8) socket(0x18, 0x80000, 0x48bf671) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x1b, 0x5, 0x5e8, 0x180, 0x0, 0xffffffff, 0x0, 0x0, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, &(0x7f00000004c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0x7c33d02971e448aa, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'wg0\x00', {}, {}, 0x1, 0x4, 0x1}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x3a, 0x0, 0x80, 0x4, 0x8, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x41}, [0xffffff00, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0x2400, 0x8c8}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x27, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @gre_key=0x800, @port=0x4e20}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x8, 0x76, 0xc, 0x8, 0x8, 0x1113, 0xe0}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1d, @ipv6=@mcast1, @ipv4=@broadcast, @gre_key, @gre_key=0x8000}}}, {{@ipv6={@remote, @empty, [0x0, 0xffff00, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'caif0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x11, 0x2, 0x5, 0xe8}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x19, @ipv4=@broadcast, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x64, @port=0x4e24}}}, {{@uncond, 0x0, 0x118, 0x188, 0x0, {}, [@common=@hbh={{0x48}, {0xb, 0x2, 0x0, [0x8, 0x625, 0x5, 0x8, 0x1000, 0x7, 0x8c7, 0x6, 0x0, 0x7, 0x1, 0xd29, 0x0, 0x9, 0x5, 0xffff], 0x8}}, @common=@mh={{0x28}, {"380f"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0xa, 0x44, 0x0, 0x0, "7f85d488e35784169501764cb2d9ba59749629a2b86a9bfdfa50d2b61f00f2e4685b33597733df9d509302236bf8281156dad336cfac036db57d855e55039c46"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) 261.505054ms ago: executing program 8 (id=2903): r0 = socket$pppl2tp(0x18, 0x1, 0x1) kexec_load(0x8000000000000001, 0x0, 0x0, 0x80000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x6, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$inet6(0xa, 0x2, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="65cf00000000010000000800000014000180060001000e0000ec070005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x84) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="250300000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 260.901774ms ago: executing program 3 (id=2904): sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0x8b25714e) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10) 141.775157ms ago: executing program 5 (id=2905): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)="e89ea880c7128c149ac155e49abec1cfe70e64083287a8", 0x17}, 0x1, 0x0, 0x0, 0x20010001}, 0x200000d4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x51733ffc, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) getpeername(r0, &(0x7f0000000100)=@x25={0x9, @remote}, &(0x7f0000000180)=0x80) fremovexattr(0xffffffffffffffff, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') 141.426397ms ago: executing program 3 (id=2906): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 141.126337ms ago: executing program 8 (id=2907): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f61405a5093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae59bddcea722c5135791af1f0ab1d70de8b01"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x29, 0x22, 0x0, 0x2, 0x8, 0x1000a9, 0x5, 0x2, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640), 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 124.713538ms ago: executing program 3 (id=2908): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000200)=0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 0s ago: executing program 4 (id=2909): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = semget$private(0x0, 0x20000000102, 0x0) semop(r5, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x9d]) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74000000100037046a75d98de72fa99300000000", @ANYRES32, @ANYBLOB="0b1b050000000000540012800b00010069703667726500004400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fedc"], 0x74}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000010) kernel console output (not intermixed with test programs): _get:1399: inode #15: comm syz.5.2538: inode has both inline data and extents flags [ 515.612013][T17317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.661989][T17326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 515.662167][T17326] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2538: couldn't read orphan inode 15 (err -117) [ 515.671447][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 515.671470][ C1] EXT4-fs (loop5): initial error at time 1784971873: ext4_orphan_get:1399: inode 15 [ 515.671504][ C1] EXT4-fs (loop5): last error at time 1784971873: ext4_orphan_get:1399: inode 15 [ 515.739639][T17326] loop5: lost filesystem error report for type 5 error -117 [ 515.740274][T17326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.863572][T17334] loop8: detected capacity change from 0 to 128 [ 515.904139][T13380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.964577][T17335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2540'. [ 515.973321][T17334] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 516.065431][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.119703][T17341] loop5: detected capacity change from 0 to 512 [ 516.149703][T17339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17339 comm=syz.4.2541 [ 516.184454][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 516.263497][ T7056] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.285359][ T7056] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.321432][T17351] loop3: detected capacity change from 0 to 128 [ 516.358073][ T7056] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.367106][ T7056] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.400999][T17349] loop1: detected capacity change from 0 to 512 [ 516.410091][T17349] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.451509][T17349] lo speed is unknown, defaulting to 1000 [ 516.460652][T17349] lo speed is unknown, defaulting to 1000 [ 516.467578][T17349] lo speed is unknown, defaulting to 1000 [ 516.526246][T17365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.572077][T17365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.584320][T17349] infiniband sz1: set active [ 516.589039][T17349] infiniband sz1: added lo [ 516.603650][T17349] RDS/IB: sz1: added [ 516.607832][T17349] smc: adding ib device sz1 with port count 1 [ 516.614023][T17349] smc: ib device sz1 port 1 has no pnetid [ 516.620528][T12506] lo speed is unknown, defaulting to 1000 [ 516.626603][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.635499][T17349] lo speed is unknown, defaulting to 1000 [ 516.636226][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.650833][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.661271][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.671556][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 516.671571][ T28] audit: type=1400 audit(1784971874.598:4094): avc: denied { read } for pid=17374 comm="syz.3.2554" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 516.722845][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.732894][ T28] audit: type=1400 audit(1784971874.598:4095): avc: denied { open } for pid=17374 comm="syz.3.2554" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 516.757376][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.767785][ T11] lo speed is unknown, defaulting to 1000 [ 516.773674][T17349] lo speed is unknown, defaulting to 1000 [ 516.784802][T17381] FAULT_INJECTION: forcing a failure. [ 516.784802][T17381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.809258][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.827736][ T28] audit: type=1400 audit(1784971874.638:4096): avc: denied { ioctl } for pid=17374 comm="syz.3.2554" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 516.853606][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 516.863519][T17381] CPU: 1 UID: 0 PID: 17381 Comm: syz.3.2555 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 516.863622][T17381] Tainted: [W]=WARN [ 516.863631][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 516.863646][T17381] Call Trace: [ 516.863655][T17381] [ 516.863665][T17381] __dump_stack+0x1d/0x30 [ 516.863692][T17381] dump_stack_lvl+0x95/0xd0 [ 516.863713][T17381] dump_stack+0x15/0x1b [ 516.863800][T17381] should_fail_ex+0x25e/0x270 [ 516.863835][T17381] should_fail+0xb/0x20 [ 516.863874][T17381] should_fail_usercopy+0x1a/0x20 [ 516.863933][T17381] _copy_from_user+0x1c/0xb0 [ 516.863954][T17381] map_update_elem+0x3fa/0x6d0 [ 516.863988][T17381] __sys_bpf+0x9b5/0xc30 [ 516.864103][T17381] ? vfs_write+0x760/0x990 [ 516.864131][T17381] __x64_sys_bpf+0x69/0x80 [ 516.864183][T17381] x64_sys_call+0x10cb/0x3020 [ 516.864211][T17381] do_syscall_64+0x136/0x3c0 [ 516.864283][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.864309][T17381] RIP: 0033:0x7f5a772bde99 [ 516.864329][T17381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.864383][T17381] RSP: 002b:00007f5a75d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.864408][T17381] RAX: ffffffffffffffda RBX: 00007f5a77545fa0 RCX: 00007f5a772bde99 [ 516.864431][T17381] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000002 [ 516.864448][T17381] RBP: 00007f5a75d17090 R08: 0000000000000000 R09: 0000000000000000 [ 516.864508][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.864542][T17381] R13: 00007f5a77546038 R14: 00007f5a77545fa0 R15: 00007ffddcd63d78 [ 516.864565][T17381] [ 516.905784][T17349] lo speed is unknown, defaulting to 1000 [ 516.914547][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 517.035839][T17349] lo speed is unknown, defaulting to 1000 [ 517.078843][T17386] __nla_validate_parse: 3 callbacks suppressed [ 517.078930][T17386] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2556'. [ 517.142336][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 517.150673][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 517.158919][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 517.167062][T17365] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 517.175879][T17365] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 517.204107][T17349] lo speed is unknown, defaulting to 1000 [ 517.262031][T17393] loop5: detected capacity change from 0 to 512 [ 517.373521][T17399] FAULT_INJECTION: forcing a failure. [ 517.373521][T17399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.380836][T17349] lo speed is unknown, defaulting to 1000 [ 517.388575][T17399] CPU: 1 UID: 0 PID: 17399 Comm: syz.4.2561 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 517.388612][T17399] Tainted: [W]=WARN [ 517.388620][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 517.388633][T17399] Call Trace: [ 517.388641][T17399] [ 517.388650][T17399] __dump_stack+0x1d/0x30 [ 517.388717][T17399] dump_stack_lvl+0x95/0xd0 [ 517.388740][T17399] dump_stack+0x15/0x1b [ 517.388761][T17399] should_fail_ex+0x25e/0x270 [ 517.388834][T17399] should_fail+0xb/0x20 [ 517.388884][T17399] should_fail_usercopy+0x1a/0x20 [ 517.388918][T17399] _copy_from_user+0x1c/0xb0 [ 517.388941][T17399] ___sys_sendmsg+0xc1/0x1e0 [ 517.389058][T17399] __x64_sys_sendmsg+0xd4/0x160 [ 517.389095][T17399] x64_sys_call+0x194c/0x3020 [ 517.389184][T17399] do_syscall_64+0x136/0x3c0 [ 517.389211][T17399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.389235][T17399] RIP: 0033:0x7f0ef698de99 [ 517.389254][T17399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.389275][T17399] RSP: 002b:00007f0ef53e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.389299][T17399] RAX: ffffffffffffffda RBX: 00007f0ef6c15fa0 RCX: 00007f0ef698de99 [ 517.389402][T17399] RDX: 00000000200004c0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 517.389426][T17399] RBP: 00007f0ef53e7090 R08: 0000000000000000 R09: 0000000000000000 [ 517.389442][T17399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.389456][T17399] R13: 00007f0ef6c16038 R14: 00007f0ef6c15fa0 R15: 00007ffe72578af8 [ 517.389477][T17399] [ 517.423711][T17403] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 517.582286][T17395] loop5: detected capacity change from 0 to 128 [ 517.623365][T17395] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 517.706575][ T28] audit: type=1400 audit(1784971875.598:4097): avc: denied { write } for pid=17394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.736308][T17416] loop4: detected capacity change from 0 to 256 [ 517.763927][ T28] audit: type=1400 audit(1784971875.658:4098): avc: denied { write } for pid=17420 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.796835][ T28] audit: type=1400 audit(1784971875.658:4099): avc: denied { mounton } for pid=17415 comm="syz.8.2565" path="/proc/342/task" dev="proc" ino=50741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 517.825098][T17424] FAULT_INJECTION: forcing a failure. [ 517.825098][T17424] name failslab, interval 1, probability 0, space 0, times 0 [ 517.842656][T17424] CPU: 0 UID: 0 PID: 17424 Comm: syz.3.2566 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 517.842778][T17424] Tainted: [W]=WARN [ 517.842787][T17424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 517.842802][T17424] Call Trace: [ 517.842810][T17424] [ 517.842819][T17424] __dump_stack+0x1d/0x30 [ 517.842902][T17424] dump_stack_lvl+0x95/0xd0 [ 517.842928][T17424] dump_stack+0x15/0x1b [ 517.842953][T17424] should_fail_ex+0x25e/0x270 [ 517.843063][T17424] should_failslab+0x8c/0xb0 [ 517.843093][T17424] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 517.843120][T17424] ? skb_clone+0x151/0x1f0 [ 517.843158][T17424] ? skb_clone+0x151/0x1f0 [ 517.843217][T17424] skb_clone+0x151/0x1f0 [ 517.843255][T17424] __netlink_deliver_tap+0x2be/0x510 [ 517.843290][T17424] netlink_unicast+0x654/0x680 [ 517.843387][T17424] netlink_sendmsg+0x5be/0x6f0 [ 517.843462][T17424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.843509][T17424] ____sys_sendmsg+0x532/0x580 [ 517.843549][T17424] ___sys_sendmsg+0x195/0x1e0 [ 517.843598][T17424] __x64_sys_sendmsg+0xd4/0x160 [ 517.843720][T17424] x64_sys_call+0x194c/0x3020 [ 517.843750][T17424] do_syscall_64+0x136/0x3c0 [ 517.843778][T17424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.843855][T17424] RIP: 0033:0x7f5a772bde99 [ 517.843877][T17424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.843901][T17424] RSP: 002b:00007f5a75d17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.843927][T17424] RAX: ffffffffffffffda RBX: 00007f5a77545fa0 RCX: 00007f5a772bde99 [ 517.843948][T17424] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 517.843964][T17424] RBP: 00007f5a75d17090 R08: 0000000000000000 R09: 0000000000000000 [ 517.843986][T17424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.844002][T17424] R13: 00007f5a77546038 R14: 00007f5a77545fa0 R15: 00007ffddcd63d78 [ 517.844021][T17424] [ 518.111130][T17434] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2568'. [ 518.202990][ T28] audit: type=1400 audit(1784971876.088:4100): avc: denied { write } for pid=17427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.232168][T17448] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=67 sclass=netlink_audit_socket pid=17448 comm=syz.4.2572 [ 518.256873][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2573'. [ 518.275070][T17454] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 518.288709][ T28] audit: type=1400 audit(1784971876.178:4101): avc: denied { write } for pid=17451 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.422677][T17458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=67 sclass=netlink_audit_socket pid=17458 comm=syz.5.2575 [ 518.435667][T17458] FAULT_INJECTION: forcing a failure. [ 518.435667][T17458] name failslab, interval 1, probability 0, space 0, times 0 [ 518.443417][T17426] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2567: inode has both inline data and extents flags [ 518.448399][T17458] CPU: 0 UID: 0 PID: 17458 Comm: syz.5.2575 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 518.448444][T17458] Tainted: [W]=WARN [ 518.448453][T17458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 518.448468][T17458] Call Trace: [ 518.448475][T17458] [ 518.448554][T17458] __dump_stack+0x1d/0x30 [ 518.448581][T17458] dump_stack_lvl+0x95/0xd0 [ 518.448672][T17458] dump_stack+0x15/0x1b [ 518.448693][T17458] should_fail_ex+0x25e/0x270 [ 518.448724][T17458] should_failslab+0x8c/0xb0 [ 518.448749][T17458] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 518.448809][T17458] ? __alloc_skb+0x2db/0x6f0 [ 518.448838][T17458] ? __alloc_skb+0x2db/0x6f0 [ 518.448947][T17458] __alloc_skb+0x2db/0x6f0 [ 518.449036][T17458] ? __alloc_skb+0x205/0x6f0 [ 518.449066][T17458] netlink_alloc_large_skb+0xbf/0xf0 [ 518.449091][T17458] netlink_sendmsg+0x40c/0x6f0 [ 518.449163][T17458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.449196][T17458] ____sys_sendmsg+0x532/0x580 [ 518.449241][T17458] ___sys_sendmsg+0x195/0x1e0 [ 518.449338][T17458] __x64_sys_sendmsg+0xd4/0x160 [ 518.449375][T17458] x64_sys_call+0x194c/0x3020 [ 518.449470][T17458] do_syscall_64+0x136/0x3c0 [ 518.449497][T17458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.449571][T17458] RIP: 0033:0x7f94adc1de99 [ 518.449590][T17458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.449692][T17458] RSP: 002b:00007f94ac677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.449715][T17458] RAX: ffffffffffffffda RBX: 00007f94adea5fa0 RCX: 00007f94adc1de99 [ 518.449731][T17458] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 518.449746][T17458] RBP: 00007f94ac677090 R08: 0000000000000000 R09: 0000000000000000 [ 518.449761][T17458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.449776][T17458] R13: 00007f94adea6038 R14: 00007f94adea5fa0 R15: 00007fffe1d18788 [ 518.449858][T17458] [ 518.596994][T17463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=67 sclass=netlink_audit_socket pid=17463 comm=syz.3.2576 [ 518.604491][T17426] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.715316][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 518.730910][ C1] EXT4-fs (loop8): initial error at time 1784971876: ext4_orphan_get:1399: inode 15 [ 518.740335][ C1] EXT4-fs (loop8): last error at time 1784971876: ext4_orphan_get:1399: inode 15 [ 518.764575][T17426] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2567: couldn't read orphan inode 15 (err -117) [ 518.782088][T17426] loop8: lost filesystem error report for type 5 error -117 [ 518.813820][T17426] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.855959][ T28] audit: type=1400 audit(1784971876.748:4102): avc: denied { write } for pid=17425 comm="syz.8.2567" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 518.895258][T17470] FAULT_INJECTION: forcing a failure. [ 518.895258][T17470] name failslab, interval 1, probability 0, space 0, times 0 [ 518.907918][T17470] CPU: 0 UID: 0 PID: 17470 Comm: syz.1.2579 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 518.907957][T17470] Tainted: [W]=WARN [ 518.907966][T17470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 518.908029][T17470] Call Trace: [ 518.908036][T17470] [ 518.908043][T17470] __dump_stack+0x1d/0x30 [ 518.908069][T17470] dump_stack_lvl+0x95/0xd0 [ 518.908138][T17470] dump_stack+0x15/0x1b [ 518.908156][T17470] should_fail_ex+0x25e/0x270 [ 518.908184][T17470] should_failslab+0x8c/0xb0 [ 518.908253][T17470] __kmalloc_noprof+0xd4/0x4a0 [ 518.908275][T17470] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 518.908300][T17470] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 518.908325][T17470] kernfs_fop_write_iter+0xd4/0x2e0 [ 518.908433][T17470] iter_file_splice_write+0x6a0/0xa60 [ 518.908464][T17470] ? __pfx_iter_file_splice_write+0x10/0x10 [ 518.908499][T17470] direct_splice_actor+0x156/0x280 [ 518.908595][T17470] ? __pfx_copy_splice_read+0x10/0x10 [ 518.908672][T17470] splice_direct_to_actor+0x2f9/0x680 [ 518.908695][T17470] ? kstrtouint_from_user+0xa8/0xf0 [ 518.908723][T17470] ? __pfx_direct_splice_actor+0x10/0x10 [ 518.908749][T17470] do_splice_direct+0x119/0x1a0 [ 518.908825][T17470] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 518.908904][T17470] do_sendfile+0x37d/0x640 [ 518.908932][T17470] __x64_sys_sendfile64+0x105/0x150 [ 518.908958][T17470] x64_sys_call+0x2dc4/0x3020 [ 518.908981][T17470] do_syscall_64+0x136/0x3c0 [ 518.909054][T17470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.909076][T17470] RIP: 0033:0x7f4f46b3de99 [ 518.909093][T17470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.909112][T17470] RSP: 002b:00007f4f45597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 518.909208][T17470] RAX: ffffffffffffffda RBX: 00007f4f46dc5fa0 RCX: 00007f4f46b3de99 [ 518.909249][T17470] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 518.909261][T17470] RBP: 00007f4f45597090 R08: 0000000000000000 R09: 0000000000000000 [ 518.909274][T17470] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 518.909287][T17470] R13: 00007f4f46dc6038 R14: 00007f4f46dc5fa0 R15: 00007fff94047288 [ 518.909305][T17470] [ 519.146501][ T28] audit: type=1400 audit(1784971876.848:4103): avc: denied { ioctl } for pid=17425 comm="syz.8.2567" path="socket:[50794]" dev="sockfs" ino=50794 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 519.248481][T17486] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 519.341934][T17488] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.417083][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.348661][T17500] net_ratelimit: 11 callbacks suppressed [ 520.348678][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.362584][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.370840][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.379865][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.395020][T12506] IPVS: starting estimator thread 0... [ 520.414123][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.469139][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.485423][T17501] IPVS: using max 2544 ests per chain, 127200 per kthread [ 520.536114][T17500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.586605][T17510] FAULT_INJECTION: forcing a failure. [ 520.586605][T17510] name failslab, interval 1, probability 0, space 0, times 0 [ 520.639309][T17510] CPU: 1 UID: 0 PID: 17510 Comm: syz.1.2592 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 520.639349][T17510] Tainted: [W]=WARN [ 520.639399][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 520.639414][T17510] Call Trace: [ 520.639423][T17510] [ 520.639433][T17510] __dump_stack+0x1d/0x30 [ 520.639463][T17510] dump_stack_lvl+0x95/0xd0 [ 520.639486][T17510] dump_stack+0x15/0x1b [ 520.639505][T17510] should_fail_ex+0x25e/0x270 [ 520.639567][T17510] should_failslab+0x8c/0xb0 [ 520.639595][T17510] __kvmalloc_node_noprof+0x15b/0x590 [ 520.639630][T17510] ? nf_tables_newset+0xf3b/0x16b0 [ 520.639668][T17510] ? nf_tables_newset+0xf3b/0x16b0 [ 520.639730][T17510] nf_tables_newset+0xf3b/0x16b0 [ 520.639799][T17510] nfnetlink_rcv+0xbf7/0x1740 [ 520.639841][T17510] netlink_unicast+0x5a7/0x680 [ 520.639870][T17510] netlink_sendmsg+0x5be/0x6f0 [ 520.639904][T17510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.639966][T17510] ____sys_sendmsg+0x532/0x580 [ 520.640084][T17510] ___sys_sendmsg+0x195/0x1e0 [ 520.640132][T17510] __x64_sys_sendmsg+0xd4/0x160 [ 520.640292][T17510] x64_sys_call+0x194c/0x3020 [ 520.640317][T17510] do_syscall_64+0x136/0x3c0 [ 520.640341][T17510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.640365][T17510] RIP: 0033:0x7f4f46b3de99 [ 520.640466][T17510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.640489][T17510] RSP: 002b:00007f4f45597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.640515][T17510] RAX: ffffffffffffffda RBX: 00007f4f46dc5fa0 RCX: 00007f4f46b3de99 [ 520.640534][T17510] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 520.640622][T17510] RBP: 00007f4f45597090 R08: 0000000000000000 R09: 0000000000000000 [ 520.640639][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.640655][T17510] R13: 00007f4f46dc6038 R14: 00007f4f46dc5fa0 R15: 00007fff94047288 [ 520.640735][T17510] [ 520.917245][T17503] FAULT_INJECTION: forcing a failure. [ 520.917245][T17503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.930413][T17503] CPU: 1 UID: 0 PID: 17503 Comm: syz.8.2589 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 520.930451][T17503] Tainted: [W]=WARN [ 520.930461][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 520.930476][T17503] Call Trace: [ 520.930485][T17503] [ 520.930495][T17503] __dump_stack+0x1d/0x30 [ 520.930531][T17503] dump_stack_lvl+0x95/0xd0 [ 520.930555][T17503] dump_stack+0x15/0x1b [ 520.930574][T17503] should_fail_ex+0x25e/0x270 [ 520.930603][T17503] should_fail+0xb/0x20 [ 520.930661][T17503] should_fail_usercopy+0x1a/0x20 [ 520.930692][T17503] _copy_from_user+0x1c/0xb0 [ 520.930718][T17503] dev_ethtool+0x55/0x2100 [ 520.930819][T17503] ? full_name_hash+0x92/0xe0 [ 520.930900][T17503] ? strcmp+0x22/0x50 [ 520.930931][T17503] ? __rcu_read_unlock+0x4e/0x70 [ 520.930958][T17503] dev_ioctl+0x2e0/0x960 [ 520.930980][T17503] sock_do_ioctl+0x1aa/0x230 [ 520.931055][T17503] sock_ioctl+0x439/0x610 [ 520.931075][T17503] ? mutex_lock+0x57/0x90 [ 520.931159][T17503] ? __pfx_sock_ioctl+0x10/0x10 [ 520.931181][T17503] __se_sys_ioctl+0xce/0x140 [ 520.931307][T17503] __x64_sys_ioctl+0x43/0x50 [ 520.931331][T17503] x64_sys_call+0x1563/0x3020 [ 520.931360][T17503] do_syscall_64+0x136/0x3c0 [ 520.931384][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.931408][T17503] RIP: 0033:0x7f42b06ade99 [ 520.931506][T17503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.931525][T17503] RSP: 002b:00007f42af107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.931549][T17503] RAX: ffffffffffffffda RBX: 00007f42b0935fa0 RCX: 00007f42b06ade99 [ 520.931568][T17503] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 000000000000000a [ 520.931653][T17503] RBP: 00007f42af107090 R08: 0000000000000000 R09: 0000000000000000 [ 520.931669][T17503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.931685][T17503] R13: 00007f42b0936038 R14: 00007f42b0935fa0 R15: 00007ffc8ba24da8 [ 520.931712][T17503] [ 520.940495][T17518] set_capacity_and_notify: 3 callbacks suppressed [ 520.940513][T17518] loop3: detected capacity change from 0 to 1764 [ 521.283902][T17526] sctp: [Deprecated]: syz.5.2598 (pid 17526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.283902][T17526] Use struct sctp_sack_info instead [ 521.334184][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.355199][T17518] loop3: detected capacity change from 0 to 1764 [ 521.370775][T17518] loop3: detected capacity change from 0 to 1764 [ 521.371516][T17526] loop5: detected capacity change from 0 to 8192 [ 521.395693][T17518] loop3: detected capacity change from 0 to 1764 [ 521.412181][T17526] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.446861][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.464948][T17518] loop3: detected capacity change from 0 to 1764 [ 521.471779][T17530] FAULT_INJECTION: forcing a failure. [ 521.471779][T17530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.482734][T17533] netlink: 'syz.8.2602': attribute type 50 has an invalid length. [ 521.521817][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2602'. [ 521.531122][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2602'. [ 521.546866][T17530] CPU: 1 UID: 0 PID: 17530 Comm: syz.1.2601 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 521.546903][T17530] Tainted: [W]=WARN [ 521.546910][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 521.546970][T17530] Call Trace: [ 521.546979][T17530] [ 521.546989][T17530] __dump_stack+0x1d/0x30 [ 521.547028][T17530] dump_stack_lvl+0x95/0xd0 [ 521.547049][T17530] dump_stack+0x15/0x1b [ 521.547070][T17530] should_fail_ex+0x25e/0x270 [ 521.547172][T17530] should_fail+0xb/0x20 [ 521.547232][T17530] should_fail_usercopy+0x1a/0x20 [ 521.547268][T17530] _copy_from_user+0x1c/0xb0 [ 521.547356][T17530] dev_ethtool+0x55/0x2100 [ 521.547388][T17530] ? full_name_hash+0x92/0xe0 [ 521.547421][T17530] ? strcmp+0x22/0x50 [ 521.547449][T17530] ? __rcu_read_unlock+0x4e/0x70 [ 521.547482][T17530] dev_ioctl+0x2e0/0x960 [ 521.547509][T17530] sock_do_ioctl+0x1aa/0x230 [ 521.547552][T17530] sock_ioctl+0x439/0x610 [ 521.547576][T17530] ? mutex_lock+0x57/0x90 [ 521.547612][T17530] ? __pfx_sock_ioctl+0x10/0x10 [ 521.547635][T17530] __se_sys_ioctl+0xce/0x140 [ 521.547672][T17530] __x64_sys_ioctl+0x43/0x50 [ 521.547692][T17530] x64_sys_call+0x1563/0x3020 [ 521.547717][T17530] do_syscall_64+0x136/0x3c0 [ 521.547756][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.547784][T17530] RIP: 0033:0x7f4f46b3de99 [ 521.547806][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.547829][T17530] RSP: 002b:00007f4f45597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.547857][T17530] RAX: ffffffffffffffda RBX: 00007f4f46dc5fa0 RCX: 00007f4f46b3de99 [ 521.547938][T17530] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 521.547955][T17530] RBP: 00007f4f45597090 R08: 0000000000000000 R09: 0000000000000000 [ 521.547972][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.548056][T17530] R13: 00007f4f46dc6038 R14: 00007f4f46dc5fa0 R15: 00007fff94047288 [ 521.548078][T17530] [ 521.758926][T17518] loop3: detected capacity change from 0 to 1764 [ 521.771435][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2599'. [ 521.788971][T17518] loop3: detected capacity change from 0 to 1764 [ 521.806175][T17518] loop3: detected capacity change from 0 to 1764 [ 521.823452][T17518] loop3: detected capacity change from 0 to 1764 [ 521.915386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.035165][T17544] 9p: Bad value for 'rfdno' [ 522.044626][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2605'. [ 522.089196][T17544] netlink: 'syz.1.2605': attribute type 2 has an invalid length. [ 522.262729][T17544] .d: entered promiscuous mode [ 522.320405][T17556] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 522.527441][T17564] FAULT_INJECTION: forcing a failure. [ 522.527441][T17564] name failslab, interval 1, probability 0, space 0, times 0 [ 522.540221][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 522.540240][ T28] audit: type=1400 audit(1784971880.458:4107): avc: denied { create } for pid=17563 comm="syz.8.2613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 522.574021][T17564] CPU: 1 UID: 0 PID: 17564 Comm: syz.8.2613 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 522.574063][T17564] Tainted: [W]=WARN [ 522.574072][T17564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.574161][T17564] Call Trace: [ 522.574170][T17564] [ 522.574179][T17564] __dump_stack+0x1d/0x30 [ 522.574228][T17564] dump_stack_lvl+0x95/0xd0 [ 522.574249][T17564] dump_stack+0x15/0x1b [ 522.574325][T17564] should_fail_ex+0x25e/0x270 [ 522.574355][T17564] ? __pfx_sock_alloc_inode+0x10/0x10 [ 522.574445][T17564] should_failslab+0x8c/0xb0 [ 522.574473][T17564] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 522.574500][T17564] ? sock_alloc_inode+0x36/0xf0 [ 522.574522][T17564] ? sock_alloc_inode+0x36/0xf0 [ 522.574602][T17564] ? selinux_socket_create+0xfd/0x180 [ 522.574636][T17564] ? __pfx_sock_alloc_inode+0x10/0x10 [ 522.574660][T17564] sock_alloc_inode+0x36/0xf0 [ 522.574760][T17564] alloc_inode+0x40/0x170 [ 522.574784][T17564] __sock_create+0x121/0x580 [ 522.574818][T17564] __sys_socketpair+0x175/0x430 [ 522.574898][T17564] __x64_sys_socketpair+0x52/0x60 [ 522.574947][T17564] x64_sys_call+0x2de5/0x3020 [ 522.574972][T17564] do_syscall_64+0x136/0x3c0 [ 522.575002][T17564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.575031][T17564] RIP: 0033:0x7f42b06ade99 [ 522.575094][T17564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.575114][T17564] RSP: 002b:00007f42af107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 522.575139][T17564] RAX: ffffffffffffffda RBX: 00007f42b0935fa0 RCX: 00007f42b06ade99 [ 522.575223][T17564] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 522.575237][T17564] RBP: 00007f42af107090 R08: 0000000000000000 R09: 0000000000000000 [ 522.575253][T17564] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 522.575270][T17564] R13: 00007f42b0936038 R14: 00007f42b0935fa0 R15: 00007ffc8ba24da8 [ 522.575297][T17564] [ 522.888354][ T28] audit: type=1400 audit(1784971880.818:4108): avc: denied { bind } for pid=17570 comm="syz.8.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 523.324872][ T28] audit: type=1400 audit(1784971881.248:4109): avc: denied { execute } for pid=17580 comm="syz.8.2620" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 523.368867][T17567] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2614: bg 0: block 104: invalid block bitmap [ 523.381361][T17567] loop5: lost filesystem error report for type 5 error -117 [ 523.381554][T17567] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 523.397580][T17567] loop5: lost filesystem error report for type 5 error -117 [ 523.397795][T17567] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2614: invalid indirect mapped block 1 (level 1) [ 523.418278][T17567] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 523.418498][T17567] EXT4-fs (loop5): 1 truncate cleaned up [ 523.433943][T17567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.514708][ T28] audit: type=1400 audit(1784971881.438:4110): avc: denied { write } for pid=17566 comm="syz.5.2614" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.580275][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2614'. [ 523.859217][T17587] EXT4-fs: Ignoring removed bh option [ 523.910885][T17587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.924983][ T28] audit: type=1400 audit(1784971881.848:4111): avc: denied { write } for pid=17586 comm="syz.1.2621" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.999291][T13943] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /106/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 524.049991][ T28] audit: type=1400 audit(1784971881.928:4112): avc: denied { write } for pid=13943 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.082766][T13943] EXT4-fs (loop1): Remounting filesystem read-only [ 524.101473][ T28] audit: type=1400 audit(1784971882.028:4113): avc: denied { write } for pid=13943 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.132168][T13943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.151795][ T28] audit: type=1400 audit(1784971882.028:4114): avc: denied { write } for pid=13943 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.200888][T17600] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2627'. [ 524.201482][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.246156][ T28] audit: type=1400 audit(1784971882.028:4115): avc: denied { write } for pid=13943 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.313743][ T28] audit: type=1400 audit(1784971882.028:4116): avc: denied { write } for pid=13943 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.399313][T17617] ip6gretap0: entered promiscuous mode [ 524.422799][T17617] €: entered promiscuous mode [ 524.440736][T17626] EXT4-fs: Ignoring removed bh option [ 524.450957][T17617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2626'. [ 524.537430][T17626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.552827][T17601] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.572394][T17601] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 524.582298][T17601] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 524.592927][T17601] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 524.603567][T17601] EXT4-fs (loop1): journal inode is deleted [ 524.612418][T13062] EXT4-fs error (device loop8): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /126/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 524.635093][T13062] EXT4-fs (loop8): Remounting filesystem read-only [ 524.649816][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.651011][T17639] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2637'. [ 525.555395][ T3359] net_ratelimit: 12 callbacks suppressed [ 525.555414][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.597126][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.145162][T17662] rock: directory entry would overflow storage [ 526.151498][T17662] rock: sig=0x5245, size=8, remaining=5 [ 526.177126][T17665] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2643'. [ 526.211406][T17665] FAULT_INJECTION: forcing a failure. [ 526.211406][T17665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.255929][T17656] lo speed is unknown, defaulting to 1000 [ 526.269739][T17665] CPU: 1 UID: 0 PID: 17665 Comm: syz.4.2643 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 526.269779][T17665] Tainted: [W]=WARN [ 526.269788][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 526.269803][T17665] Call Trace: [ 526.269812][T17665] [ 526.269822][T17665] __dump_stack+0x1d/0x30 [ 526.269853][T17665] dump_stack_lvl+0x95/0xd0 [ 526.269874][T17665] dump_stack+0x15/0x1b [ 526.269946][T17665] should_fail_ex+0x25e/0x270 [ 526.269981][T17665] should_fail+0xb/0x20 [ 526.270010][T17665] should_fail_usercopy+0x1a/0x20 [ 526.270057][T17665] _copy_from_user+0x1c/0xb0 [ 526.270127][T17665] ___sys_sendmsg+0xc1/0x1e0 [ 526.270182][T17665] __sys_sendmmsg+0x185/0x320 [ 526.270253][T17665] __x64_sys_sendmmsg+0x57/0x70 [ 526.270292][T17665] x64_sys_call+0x27aa/0x3020 [ 526.270344][T17665] do_syscall_64+0x136/0x3c0 [ 526.270374][T17665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.270402][T17665] RIP: 0033:0x7f0ef698de99 [ 526.270445][T17665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.270488][T17665] RSP: 002b:00007f0ef53e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.270548][T17665] RAX: ffffffffffffffda RBX: 00007f0ef6c15fa0 RCX: 00007f0ef698de99 [ 526.270563][T17665] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 526.270580][T17665] RBP: 00007f0ef53e7090 R08: 0000000000000000 R09: 0000000000000000 [ 526.270596][T17665] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 526.270613][T17665] R13: 00007f0ef6c16038 R14: 00007f0ef6c15fa0 R15: 00007ffe72578af8 [ 526.270652][T17665] [ 526.500177][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.659886][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.720884][T17677] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2645'. [ 526.722310][T17674] set_capacity_and_notify: 28 callbacks suppressed [ 526.722352][T17674] loop4: detected capacity change from 0 to 1024 [ 526.766706][T17674] EXT4-fs: Ignoring removed bh option [ 526.808517][T17674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.844691][T17689] loop5: detected capacity change from 0 to 1024 [ 526.860748][T17680] loop3: detected capacity change from 0 to 8192 [ 526.896090][T17682] loop8: detected capacity change from 0 to 256 [ 526.958095][T13380] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /145/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 526.996432][T13380] EXT4-fs (loop4): Remounting filesystem read-only [ 527.037555][T17695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=17695 comm=syz.5.2655 [ 527.062509][T13380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.163707][T17703] loop5: detected capacity change from 0 to 512 [ 527.179768][T17703] EXT4-fs warning (device loop5): read_mmp_block:110: Error -117 while reading MMP block 12 [ 527.205040][T17684] loop6: detected capacity change from 0 to 7 [ 527.226954][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 527.250669][T17708] loop4: detected capacity change from 0 to 1024 [ 527.278090][T17708] EXT4-fs: Invalid want_extra_isize 2 [ 527.686006][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.724982][T17720] loop3: detected capacity change from 0 to 512 [ 527.733196][T17720] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.2657: corrupted xattr block 95: invalid header [ 527.747134][T17720] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 527.775822][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 527.791557][ C0] EXT4-fs (loop3): initial error at time 1784971885: ext4_expand_extra_isize_ea:2810: inode 11 [ 527.794483][T17720] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2657: bg 0: block 7: invalid block bitmap [ 527.801962][ C0] EXT4-fs (loop3): last error at time 1784971885: ext4_expand_extra_isize_ea:2810: inode 11 [ 527.814171][T17720] loop3: lost filesystem error report for type 5 error -117 [ 527.824319][ C0] [ 527.868787][T17722] loop5: detected capacity change from 0 to 1024 [ 528.017857][T17722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 528.031650][T17720] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 528.054266][T17722] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.066331][T17720] loop3: lost filesystem error report for type 5 error -117 [ 528.078415][T17720] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.2657: corrupted xattr block 95: invalid header [ 528.130184][T17720] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 528.131895][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 528.131913][ T28] audit: type=1400 audit(1784971886.058:4141): avc: denied { write } for pid=17718 comm="syz.5.2664" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.169277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.169388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.189351][T17720] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 528.378800][T17720] EXT4-fs (loop3): 1 orphan inode deleted [ 528.385663][T17720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.407844][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 528.668045][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.695351][T17732] loop4: detected capacity change from 0 to 1764 [ 529.031244][ T3359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.167727][T17741] lo speed is unknown, defaulting to 1000 [ 529.313774][T17744] EXT4-fs: Ignoring removed bh option [ 529.371481][T17744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.425824][ T28] audit: type=1400 audit(1784971887.348:4142): avc: denied { write } for pid=17743 comm="syz.5.2668" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.491490][T14982] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /97/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 529.547608][ T28] audit: type=1400 audit(1784971887.418:4143): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.611388][T14982] EXT4-fs (loop5): Remounting filesystem read-only [ 529.632297][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.643819][ T28] audit: type=1400 audit(1784971887.558:4144): avc: denied { write } for pid=14982 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.697544][ T28] audit: type=1400 audit(1784971887.558:4145): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.747221][ T28] audit: type=1400 audit(1784971887.558:4146): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.792843][ T28] audit: type=1400 audit(1784971887.558:4147): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.840830][ T28] audit: type=1400 audit(1784971887.558:4148): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.888466][ T28] audit: type=1400 audit(1784971887.558:4149): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.918701][ T28] audit: type=1400 audit(1784971887.558:4150): avc: denied { write } for pid=14982 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.024122][T17754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 530.039450][T17754] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.072278][T17760] FAULT_INJECTION: forcing a failure. [ 530.072278][T17760] name failslab, interval 1, probability 0, space 0, times 0 [ 530.086860][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.145069][T17760] CPU: 1 UID: 0 PID: 17760 Comm: syz.1.2676 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 530.145107][T17760] Tainted: [W]=WARN [ 530.145158][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 530.145175][T17760] Call Trace: [ 530.145183][T17760] [ 530.145192][T17760] __dump_stack+0x1d/0x30 [ 530.145230][T17760] dump_stack_lvl+0x95/0xd0 [ 530.145291][T17760] dump_stack+0x15/0x1b [ 530.145315][T17760] should_fail_ex+0x25e/0x270 [ 530.145343][T17760] should_failslab+0x8c/0xb0 [ 530.145366][T17760] __kmalloc_noprof+0xd4/0x4a0 [ 530.145393][T17760] ? nf_tables_newrule+0xd68/0x16d0 [ 530.145502][T17760] ? nf_tables_newrule+0xd68/0x16d0 [ 530.145538][T17760] nf_tables_newrule+0xd68/0x16d0 [ 530.145572][T17760] nfnetlink_rcv+0xbf7/0x1740 [ 530.145680][T17760] netlink_unicast+0x5a7/0x680 [ 530.145759][T17760] netlink_sendmsg+0x5be/0x6f0 [ 530.145790][T17760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.145892][T17760] ____sys_sendmsg+0x532/0x580 [ 530.145934][T17760] ___sys_sendmsg+0x195/0x1e0 [ 530.145985][T17760] __x64_sys_sendmsg+0xd4/0x160 [ 530.146022][T17760] x64_sys_call+0x194c/0x3020 [ 530.146107][T17760] do_syscall_64+0x136/0x3c0 [ 530.146141][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.146245][T17760] RIP: 0033:0x7f4f46b3de99 [ 530.146262][T17760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.146283][T17760] RSP: 002b:00007f4f45597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.146310][T17760] RAX: ffffffffffffffda RBX: 00007f4f46dc5fa0 RCX: 00007f4f46b3de99 [ 530.146329][T17760] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 530.146346][T17760] RBP: 00007f4f45597090 R08: 0000000000000000 R09: 0000000000000000 [ 530.146366][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.146382][T17760] R13: 00007f4f46dc6038 R14: 00007f4f46dc5fa0 R15: 00007fff94047288 [ 530.146404][T17760] [ 530.473097][T17762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.487822][T17758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.523148][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.532876][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.660648][T13380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 530.828560][T17780] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 530.863788][T17782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=17782 comm=syz.1.2682 [ 530.900789][T17785] xt_hashlimit: size too large, truncated to 1048576 [ 530.980598][T17780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.013758][T17788] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2685'. [ 531.094091][T17780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.117017][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.121435][T17780] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 531.595933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.604406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.612562][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.620874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.629422][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.652445][ T6971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.690955][T17780] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.2683: Allocating blocks 41-42 which overlap fs metadata [ 531.704901][T17780] loop8: lost filesystem error report for type 5 error -117 [ 531.711376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.731756][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 531.740356][ C1] EXT4-fs (loop8): initial error at time 1784971889: ext4_mb_mark_diskspace_used:4222 [ 531.751758][ C1] EXT4-fs (loop8): last error at time 1784971889: ext4_mb_mark_diskspace_used:4222 [ 531.974324][T17826] netlink: 'syz.5.2690': attribute type 21 has an invalid length. [ 532.044998][T17826] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.285038][T17805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.293339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.331158][T17826] IPv6: Can't replace route, no match found [ 532.409407][T17831] xt_hashlimit: size too large, truncated to 1048576 [ 532.473251][T17780] EXT4-fs (loop8): Remounting filesystem read-only [ 532.632429][T17780] EXT4-fs (loop8): 1 truncate cleaned up [ 532.638483][T17780] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.822438][T17780] syz.8.2683 (17780) used greatest stack depth: 9344 bytes left [ 532.893987][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.101116][T17860] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2695'. [ 533.186079][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 533.186099][ T28] audit: type=1400 audit(1784971891.118:4161): avc: denied { write } for pid=17865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.344338][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.401596][T17880] set_capacity_and_notify: 8 callbacks suppressed [ 533.401616][T17880] loop3: detected capacity change from 0 to 1024 [ 533.484265][ T28] audit: type=1400 audit(1784971891.408:4162): avc: denied { write } for pid=17868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.555521][T17880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.576798][ T28] audit: type=1400 audit(1784971891.458:4163): avc: denied { write } for pid=17890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.709910][T17894] loop5: detected capacity change from 0 to 8192 [ 533.725041][T17880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2691'. [ 533.848380][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.943831][T17905] bridge_slave_0: left allmulticast mode [ 533.981557][T17905] bridge_slave_0: left promiscuous mode [ 533.992277][ T28] audit: type=1400 audit(1784971891.918:4164): avc: denied { write } for pid=17899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.023240][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.052726][T17905] bridge_slave_1: left allmulticast mode [ 534.068004][ T28] audit: type=1400 audit(1784971891.978:4165): avc: denied { write } for pid=17922 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.090275][T17905] bridge_slave_1: left promiscuous mode [ 534.097634][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.177600][T17919] loop3: detected capacity change from 0 to 512 [ 534.190865][T17905] bond0: (slave bond_slave_0): Releasing backup interface [ 534.209754][T17905] bond0: (slave bond_slave_1): Releasing backup interface [ 534.254725][T17905] team0: Port device team_slave_0 removed [ 534.301090][T17905] team0: Port device team_slave_1 removed [ 534.308206][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.326256][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.373992][T17905] bond0: (slave veth1_to_batadv): Releasing backup interface [ 534.430673][ T28] audit: type=1400 audit(1784971892.358:4166): avc: denied { write } for pid=17930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.452582][T17919] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2704: bg 0: block 393: padding at end of block bitmap is not set [ 534.457123][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.473324][T17919] loop3: lost filesystem error report for type 5 error -117 [ 534.485269][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 534.499340][ C1] EXT4-fs (loop3): initial error at time 1784971892: ext4_validate_block_bitmap:441 [ 534.499372][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.508758][ C1] EXT4-fs (loop3): last error at time 1784971892: ext4_validate_block_bitmap:441 [ 534.509269][T17919] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 534.516037][ T28] audit: type=1400 audit(1784971892.428:4167): avc: denied { ioctl } for pid=17927 comm="syz.8.2706" path="socket:[52186]" dev="sockfs" ino=52186 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.570442][T17919] loop3: lost filesystem error report for type 5 error -117 [ 534.577263][T17919] EXT4-fs (loop3): 2 truncates cleaned up [ 534.590979][T17919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.591875][ T28] audit: type=1400 audit(1784971892.518:4168): avc: denied { write } for pid=17945 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.653436][ T124] lo speed is unknown, defaulting to 1000 [ 534.829929][ T28] audit: type=1400 audit(1784971892.758:4169): avc: denied { write } for pid=17951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.864908][T17961] loop8: detected capacity change from 0 to 512 [ 534.882853][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.918002][T17961] EXT4-fs (loop8): 1 orphan inode deleted [ 534.927789][T17961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.945925][T17961] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.958437][ T28] audit: type=1400 audit(1784971892.868:4170): avc: denied { write } for pid=17964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.004583][T17970] loop1: detected capacity change from 0 to 2048 [ 535.033136][T17970] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 535.077158][T17975] loop4: detected capacity change from 0 to 1024 [ 535.097670][T17961] netlink: 'syz.8.2707': attribute type 4 has an invalid length. [ 535.118168][T17975] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 535.152274][T17981] netlink: 'syz.8.2707': attribute type 4 has an invalid length. [ 535.187540][T17984] SET target dimension over the limit! [ 535.368837][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.376107][T17928] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.429835][T17969] syz.1.2709 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 535.443124][T17969] CPU: 0 UID: 0 PID: 17969 Comm: syz.1.2709 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 535.443162][T17969] Tainted: [W]=WARN [ 535.443170][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 535.443185][T17969] Call Trace: [ 535.443193][T17969] [ 535.443202][T17969] __dump_stack+0x1d/0x30 [ 535.443269][T17969] dump_stack_lvl+0x95/0xd0 [ 535.443364][T17969] dump_stack+0x15/0x1b [ 535.443388][T17969] dump_header+0x80/0x240 [ 535.443414][T17969] oom_kill_process+0x295/0x350 [ 535.443602][T17969] out_of_memory+0x981/0xbc0 [ 535.443641][T17969] try_charge_memcg+0x621/0xa00 [ 535.443670][T17969] charge_memcg+0x6d/0x120 [ 535.443768][T17969] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 535.443819][T17969] swap_cache_alloc_folio+0x47b/0x5e0 [ 535.443898][T17969] swap_cluster_readahead+0x2b1/0x460 [ 535.443938][T17969] swapin_readahead+0xd8/0x8a0 [ 535.443994][T17969] ? lapic_next_event+0x11/0x20 [ 535.444019][T17969] ? clockevents_program_event+0x2fd/0x340 [ 535.444048][T17969] ? _raw_spin_unlock+0x9/0x30 [ 535.444131][T17969] ? tick_program_event+0x79/0xc0 [ 535.444188][T17969] ? _raw_spin_unlock+0x9/0x30 [ 535.444218][T17969] ? __hrtimer_rearm_deferred+0x571/0x650 [ 535.444256][T17969] ? __rcu_read_unlock+0x4e/0x70 [ 535.444318][T17969] ? swap_cache_get_folio+0x1f7/0x200 [ 535.444416][T17969] do_swap_page+0x2a2/0x1ec0 [ 535.444453][T17969] ? __rcu_read_lock+0x36/0x50 [ 535.444482][T17969] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 535.444584][T17969] handle_mm_fault+0xb3c/0x2da0 [ 535.444687][T17969] do_user_addr_fault+0x634/0x1060 [ 535.444723][T17969] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 535.444758][T17969] ? trace_page_fault_user+0x1f/0xa0 [ 535.444833][T17969] exc_page_fault+0x62/0xa0 [ 535.444893][T17969] asm_exc_page_fault+0x26/0x30 [ 535.444970][T17969] RIP: 0033:0x7f4f46b3ea07 [ 535.444991][T17969] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 e8 93 19 00 00 0f 1f 00 48 83 ec 10 48 63 d2 48 63 ff 45 31 c9 [ 535.445014][T17969] RSP: 002b:00007fff940473e8 EFLAGS: 00010206 [ 535.445037][T17969] RAX: 0000000000000000 RBX: 00007f4f46dc5fa0 RCX: 0000555589609808 [ 535.445054][T17969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.445069][T17969] RBP: 00007f4f46dc7da0 R08: 0000000000000000 R09: 0000000000000000 [ 535.445153][T17969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000082ce2 [ 535.445169][T17969] R13: 00007f4f46dc609c R14: 0000000000082ace R15: 00007f4f46dc6090 [ 535.445192][T17969] [ 535.765131][T17969] memory: usage 302260kB, limit 307200kB, failcnt 81 [ 535.779906][T17969] memory+swap: usage 287576kB, limit 9007199254740988kB, failcnt 0 [ 535.806702][T17969] kmem: usage 234740kB, limit 9007199254740988kB, failcnt 0 [ 535.811839][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 535.815504][T17969] Memory cgroup stats for /syz1: [ 535.835019][T17969] cache 0 [ 535.895354][T17969] rss 0 [ 535.898294][T17969] shmem 0 [ 535.901377][T17969] mapped_file 0 [ 535.905228][T17969] dirty 0 [ 535.908403][T17969] writeback 0 [ 535.912460][T17969] workingset_refault_anon 40 [ 535.918112][T17969] workingset_refault_file 0 [ 535.924427][T17969] swap 405504 [ 535.927947][T17969] swapcached 577536 [ 535.931849][T17969] pgpgin 142290 [ 535.935674][T17969] pgpgout 142289 [ 535.939318][T17969] pgfault 161006 [ 535.944178][T17969] pgmajfault 17 [ 535.948420][T17969] inactive_anon 0 [ 535.952218][T17969] active_anon 4096 [ 535.956338][T17969] inactive_file 0 [ 535.960059][T17969] active_file 0 [ 535.963571][T17969] unevictable 0 [ 535.967449][T17969] hierarchical_memory_limit 314572800 [ 535.972969][T17969] hierarchical_memsw_limit 9223372036854771712 [ 535.979471][T17969] total_cache 0 [ 535.983077][T17969] total_rss 0 [ 535.986650][T17969] total_shmem 0 [ 535.990167][T17969] total_mapped_file 0 [ 535.994224][T17969] total_dirty 0 [ 535.998397][T17969] total_writeback 0 [ 536.002266][T17969] total_workingset_refault_anon 40 [ 536.007911][T17969] total_workingset_refault_file 0 [ 536.013098][T17969] total_swap 405504 [ 536.017358][T17969] total_swapcached 577536 [ 536.021815][T17969] total_pgpgin 142290 [ 536.026163][T17969] total_pgpgout 142289 [ 536.030388][T17969] total_pgfault 161006 [ 536.034766][T17969] total_pgmajfault 17 [ 536.039094][T17969] total_inactive_anon 0 [ 536.043372][T17969] total_active_anon 4096 [ 536.047973][T17969] total_inactive_file 0 [ 536.052234][T17969] total_active_file 0 [ 536.058661][T17969] total_unevictable 0 [ 536.062787][T17969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2709,pid=17969,uid=0 [ 536.078619][T17928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.079900][T17969] Memory cgroup out of memory: Killed process 17969 (syz.1.2709) total-vm:94180kB, anon-rss:1236kB, file-rss:22480kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 536.129814][T17928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.195086][T18001] loop1: detected capacity change from 0 to 512 [ 536.224973][T18001] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2713: bg 0: block 393: padding at end of block bitmap is not set [ 536.239841][T18001] loop1: lost filesystem error report for type 5 error -117 [ 536.240380][T18001] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 536.257970][T18001] loop1: lost filesystem error report for type 5 error -117 [ 536.258310][T18001] EXT4-fs (loop1): 2 truncates cleaned up [ 536.271995][T18001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.414235][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.422932][T17987] bridge_slave_0: left allmulticast mode [ 536.432626][T18011] netlink: 'syz.1.2713': attribute type 2 has an invalid length. [ 536.449997][T17987] bridge_slave_0: left promiscuous mode [ 536.472507][T17987] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.507265][T17987] bridge_slave_1: left allmulticast mode [ 536.513042][T17987] bridge_slave_1: left promiscuous mode [ 536.548287][T17987] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.572201][T18016] loop8: detected capacity change from 0 to 512 [ 536.603681][T18020] loop5: detected capacity change from 0 to 8192 [ 536.615367][T18016] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2715: bg 0: block 393: padding at end of block bitmap is not set [ 536.629834][T18016] loop8: lost filesystem error report for type 5 error -117 [ 536.630679][T18016] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 536.630909][T17987] bond0: (slave bond_slave_0): Releasing backup interface [ 536.638138][T18016] loop8: lost filesystem error report for type 5 error -117 [ 536.648113][T18016] EXT4-fs (loop8): 2 truncates cleaned up [ 536.667825][T18016] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.712679][T17987] bond0: (slave bond_slave_1): Releasing backup interface [ 536.732596][T15662] net_ratelimit: 10 callbacks suppressed [ 536.732675][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.734595][T17987] team0: Port device team_slave_0 removed [ 536.771385][T17987] team0: Port device team_slave_1 removed [ 536.778448][T17987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.798210][T17987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.842195][T17987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.849992][T17987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.861104][T17987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 536.883062][T17999] vlan0: entered promiscuous mode [ 536.894629][T17999] team0: Port device vlan0 added [ 536.896659][T18016] netlink: 'syz.8.2715': attribute type 2 has an invalid length. [ 536.900085][ T7053] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.916741][ T7053] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.927011][ T7053] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.938678][ T7053] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.982831][T18011] 0: entered promiscuous mode [ 536.993393][T18016] 1: entered promiscuous mode [ 537.029973][T13943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.073434][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.089759][T18031] loop3: detected capacity change from 0 to 512 [ 537.159892][T18031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2722: bg 0: block 393: padding at end of block bitmap is not set [ 537.174178][T18031] loop3: lost filesystem error report for type 5 error -117 [ 537.176179][T18031] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 537.183006][T18040] FAULT_INJECTION: forcing a failure. [ 537.183006][T18040] name failslab, interval 1, probability 0, space 0, times 0 [ 537.190485][T18031] loop3: lost filesystem error report for type 5 error -117 [ 537.194658][T18040] CPU: 1 UID: 0 PID: 18040 Comm: syz.8.2723 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 537.194773][T18040] Tainted: [W]=WARN [ 537.194781][T18040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 537.194796][T18040] Call Trace: [ 537.194805][T18040] [ 537.194814][T18040] __dump_stack+0x1d/0x30 [ 537.194843][T18040] dump_stack_lvl+0x95/0xd0 [ 537.194868][T18040] dump_stack+0x15/0x1b [ 537.194963][T18040] should_fail_ex+0x25e/0x270 [ 537.195040][T18040] ? __pfx_sock_alloc_inode+0x10/0x10 [ 537.195069][T18040] should_failslab+0x8c/0xb0 [ 537.195097][T18040] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 537.195163][T18040] ? sock_alloc_inode+0x36/0xf0 [ 537.195190][T18040] ? sock_alloc_inode+0x36/0xf0 [ 537.195226][T18040] ? selinux_socket_create+0x86/0x180 [ 537.195340][T18040] ? __pfx_sock_alloc_inode+0x10/0x10 [ 537.195447][T18040] sock_alloc_inode+0x36/0xf0 [ 537.195474][T18040] alloc_inode+0x40/0x170 [ 537.195577][T18040] __sock_create+0x121/0x580 [ 537.195634][T18040] ? _parse_integer_limit+0x177/0x1a0 [ 537.195690][T18040] sock_create_kern+0x38/0x50 [ 537.195720][T18040] mptcp_subflow_create_socket+0x81/0x500 [ 537.195813][T18040] __mptcp_nmpc_sk+0xb5/0x3d0 [ 537.195838][T18040] mptcp_connect+0x57/0x8e0 [ 537.195873][T18040] __inet_stream_connect+0x166/0x7d0 [ 537.195972][T18040] ? lock_sock_nested+0x84/0x110 [ 537.196002][T18040] inet_stream_connect+0x44/0x70 [ 537.196045][T18040] ? __pfx_inet_stream_connect+0x10/0x10 [ 537.196172][T18040] __sys_connect+0x1f1/0x2a0 [ 537.196208][T18040] __x64_sys_connect+0x3f/0x50 [ 537.196240][T18040] x64_sys_call+0x2df0/0x3020 [ 537.196298][T18040] do_syscall_64+0x136/0x3c0 [ 537.196325][T18040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.196352][T18040] RIP: 0033:0x7f42b06ade99 [ 537.196371][T18040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.196436][T18040] RSP: 002b:00007f42af107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 537.196462][T18040] RAX: ffffffffffffffda RBX: 00007f42b0935fa0 RCX: 00007f42b06ade99 [ 537.196477][T18040] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000007 [ 537.196493][T18040] RBP: 00007f42af107090 R08: 0000000000000000 R09: 0000000000000000 [ 537.196509][T18040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.196581][T18040] R13: 00007f42b0936038 R14: 00007f42b0935fa0 R15: 00007ffc8ba24da8 [ 537.196603][T18040] [ 537.196614][T18040] socket: no more sockets [ 537.255356][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 537.269354][T18031] EXT4-fs (loop3): 2 truncates cleaned up [ 537.270226][ C1] EXT4-fs (loop3): initial error at time 1784971895: ext4_validate_block_bitmap:441 [ 537.270273][ C1] EXT4-fs (loop3): last error at time 1784971895: ext4_mb_clear_bb:6679 [ 537.544091][T18031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.611594][T18031] netlink: 'syz.3.2722': attribute type 2 has an invalid length. [ 537.622143][T18031] 0: entered promiscuous mode [ 537.657089][T18056] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2729: bg 0: block 104: invalid block bitmap [ 537.669564][T18056] loop5: lost filesystem error report for type 5 error -117 [ 537.669752][T18056] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 537.685712][T18056] loop5: lost filesystem error report for type 5 error -117 [ 537.685980][T18056] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2729: invalid indirect mapped block 1 (level 1) [ 537.706437][T18056] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 537.706759][T18056] EXT4-fs (loop5): 1 truncate cleaned up [ 537.716530][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 537.716571][ C0] EXT4-fs (loop5): initial error at time 1784971895: ext4_validate_block_bitmap:432 [ 537.716620][ C0] EXT4-fs (loop5): last error at time 1784971895: ext4_free_branches:1023: inode 11 [ 537.754531][T18056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.770767][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.813045][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.849614][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.021254][T18071] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2732: bg 0: block 393: padding at end of block bitmap is not set [ 538.035549][T18071] loop4: lost filesystem error report for type 5 error -117 [ 538.038406][T18077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.053974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.062257][T18077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.067526][T18071] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 538.105651][T18074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.114093][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.115363][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 538.128702][ C0] EXT4-fs (loop4): initial error at time 1784971895: ext4_validate_block_bitmap:441 [ 538.136976][T18071] loop4: lost filesystem error report for type 5 error -117 [ 538.138169][ C0] EXT4-fs (loop4): last error at time 1784971895: ext4_validate_block_bitmap:441 [ 538.188279][T18074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.268402][T18071] EXT4-fs (loop4): 2 truncates cleaned up [ 538.286566][T18071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.397022][T18071] netlink: 'syz.4.2732': attribute type 2 has an invalid length. [ 538.407591][T18071] 0: entered promiscuous mode [ 538.419189][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2736'. [ 538.534074][T13380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.572130][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 538.572148][ T28] audit: type=1400 audit(1784971896.498:4172): avc: denied { read } for pid=18094 comm="syz.5.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 538.646098][T18099] set_capacity_and_notify: 2 callbacks suppressed [ 538.646118][T18099] loop3: detected capacity change from 0 to 512 [ 538.660816][ T28] audit: type=1400 audit(1784971896.578:4173): avc: denied { connect } for pid=18094 comm="syz.5.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 538.764885][T18104] FAULT_INJECTION: forcing a failure. [ 538.764885][T18104] name failslab, interval 1, probability 0, space 0, times 0 [ 538.777892][T18104] CPU: 1 UID: 0 PID: 18104 Comm: syz.4.2744 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 538.777925][T18104] Tainted: [W]=WARN [ 538.777933][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 538.777947][T18104] Call Trace: [ 538.777956][T18104] [ 538.777965][T18104] __dump_stack+0x1d/0x30 [ 538.777999][T18104] dump_stack_lvl+0x95/0xd0 [ 538.778048][T18104] dump_stack+0x15/0x1b [ 538.778100][T18104] should_fail_ex+0x25e/0x270 [ 538.778136][T18104] ? __get_vm_area_node+0x106/0x1d0 [ 538.778165][T18104] should_failslab+0x8c/0xb0 [ 538.778193][T18104] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 538.778259][T18104] ? __get_vm_area_node+0x106/0x1d0 [ 538.778290][T18104] __get_vm_area_node+0x106/0x1d0 [ 538.778321][T18104] __vmalloc_node_range_noprof+0x266/0x11e0 [ 538.778365][T18104] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 538.778397][T18104] ? avc_has_perm_noaudit+0xa3/0x120 [ 538.778425][T18104] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 538.778457][T18104] __vmalloc_noprof+0xa4/0xf0 [ 538.778537][T18104] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 538.778577][T18104] bpf_prog_alloc_no_stats+0x47/0x390 [ 538.778611][T18104] ? bpf_prog_alloc+0x2a/0x150 [ 538.778652][T18104] bpf_prog_alloc+0x3c/0x150 [ 538.778684][T18104] bpf_prog_load+0x54b/0x1100 [ 538.778722][T18104] ? avc_has_perm_noaudit+0xa3/0x120 [ 538.778755][T18104] ? vfs_write+0x760/0x990 [ 538.778814][T18104] __sys_bpf+0xbae/0xc30 [ 538.778845][T18104] ? vfs_write+0x760/0x990 [ 538.778864][T18104] ? vfs_write+0x760/0x990 [ 538.778901][T18104] __x64_sys_bpf+0x69/0x80 [ 538.778936][T18104] x64_sys_call+0x10cb/0x3020 [ 538.778966][T18104] do_syscall_64+0x136/0x3c0 [ 538.778992][T18104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.779095][T18104] RIP: 0033:0x7f0ef698de99 [ 538.779116][T18104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.779139][T18104] RSP: 002b:00007f0ef53e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 538.779165][T18104] RAX: ffffffffffffffda RBX: 00007f0ef6c15fa0 RCX: 00007f0ef698de99 [ 538.779180][T18104] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 538.779194][T18104] RBP: 00007f0ef53e7090 R08: 0000000000000000 R09: 0000000000000000 [ 538.779212][T18104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.779239][T18104] R13: 00007f0ef6c16038 R14: 00007f0ef6c15fa0 R15: 00007ffe72578af8 [ 538.779266][T18104] [ 538.779368][T18104] syz.4.2744: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 538.970408][T18099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2742: bg 0: block 104: invalid block bitmap [ 539.002512][T18104] ,cpuset=/,mems_allowed=0 [ 539.002621][T18104] CPU: 1 UID: 0 PID: 18104 Comm: syz.4.2744 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 539.002714][T18104] Tainted: [W]=WARN [ 539.002722][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 539.002736][T18104] Call Trace: [ 539.002759][T18104] [ 539.002837][T18104] __dump_stack+0x1d/0x30 [ 539.002865][T18104] dump_stack_lvl+0x95/0xd0 [ 539.002890][T18104] dump_stack+0x15/0x1b [ 539.002913][T18104] warn_alloc+0x145/0x1c0 [ 539.002974][T18104] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 539.003008][T18104] ? avc_has_perm_noaudit+0xa3/0x120 [ 539.003090][T18104] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 539.003125][T18104] __vmalloc_noprof+0xa4/0xf0 [ 539.003155][T18104] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 539.003190][T18104] bpf_prog_alloc_no_stats+0x47/0x390 [ 539.003262][T18104] ? bpf_prog_alloc+0x2a/0x150 [ 539.003295][T18104] bpf_prog_alloc+0x3c/0x150 [ 539.003373][T18104] bpf_prog_load+0x54b/0x1100 [ 539.003408][T18104] ? avc_has_perm_noaudit+0xa3/0x120 [ 539.003493][T18104] ? vfs_write+0x760/0x990 [ 539.003517][T18104] __sys_bpf+0xbae/0xc30 [ 539.003558][T18104] ? vfs_write+0x760/0x990 [ 539.003607][T18104] ? vfs_write+0x760/0x990 [ 539.003699][T18104] __x64_sys_bpf+0x69/0x80 [ 539.003731][T18104] x64_sys_call+0x10cb/0x3020 [ 539.003760][T18104] do_syscall_64+0x136/0x3c0 [ 539.003810][T18104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.003837][T18104] RIP: 0033:0x7f0ef698de99 [ 539.003857][T18104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.003880][T18104] RSP: 002b:00007f0ef53e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.003948][T18104] RAX: ffffffffffffffda RBX: 00007f0ef6c15fa0 RCX: 00007f0ef698de99 [ 539.003966][T18104] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 539.003981][T18104] RBP: 00007f0ef53e7090 R08: 0000000000000000 R09: 0000000000000000 [ 539.003996][T18104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.004011][T18104] R13: 00007f0ef6c16038 R14: 00007f0ef6c15fa0 R15: 00007ffe72578af8 [ 539.004033][T18104] [ 539.007629][T18104] Mem-Info: [ 539.018490][T18099] loop3: lost filesystem error report for type 5 error -117 [ 539.028110][T18104] active_anon:12240 inactive_anon:0 isolated_anon:0 [ 539.028110][T18104] active_file:2 inactive_file:25471 isolated_file:0 [ 539.028110][T18104] unevictable:0 dirty:195 writeback:0 [ 539.028110][T18104] slab_reclaimable:3916 slab_unreclaimable:24739 [ 539.028110][T18104] mapped:30323 shmem:775 pagetables:6103 [ 539.028110][T18104] sec_pagetables:0 bounce:0 [ 539.028110][T18104] kernel_misc_reclaimable:0 [ 539.028110][T18104] free:1766595 free_pcp:9473 free_cma:0 [ 539.101217][T18099] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 539.107434][T18104] Node 0 active_anon:48960kB inactive_anon:0kB active_file:8kB inactive_file:101884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121292kB dirty:780kB writeback:0kB shmem:3100kB kernel_stack:6224kB pagetables:24412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 539.110212][T18099] loop3: lost filesystem error report for type 5 error -117 [ 539.110411][T18099] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2742: invalid indirect mapped block 1 (level 1) [ 539.120620][T18104] Node 0 [ 539.124055][T18099] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 539.126942][T18104] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.127056][T18104] lowmem_reserve[]: 0 2878 7857 7857 [ 539.127164][T18104] Node 0 DMA32 free:2947564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947668kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 539.127433][T18104] lowmem_reserve[]: 0 0 4978 4978 [ 539.127553][T18104] Node 0 Normal free:4103456kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48960kB inactive_anon:0kB active_file:8kB inactive_file:101884kB unevictable:0kB writepending:780kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:37796kB local_pcp:18816kB free_cma:0kB [ 539.127717][T18104] lowmem_reserve[]: 0 0 0 0 [ 539.127873][T18104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 539.128424][T18104] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 2*256kB (M) 2*512kB (M) 4*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2947564kB [ 539.129158][T18104] Node 0 [ 539.129156][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 539.129194][T18104] Normal: 3914*4kB (ME) 1222*8kB (UME) 727*16kB (UME) 100*32kB (UME) 33*64kB (UME) 6*128kB (UM) 31*256kB (UM) 23*512kB (UME) 18*1024kB (UME) 12*2048kB (UME) 976*4096kB (UM) = 4103560kB [ 539.130289][T18104] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 539.130321][T18104] 26239 total pagecache pages [ 539.130384][T18104] 3 pages in swap cache [ 539.130403][T18104] Free swap = 124792kB [ 539.130439][T18104] Total swap = 124996kB [ 539.130463][T18104] 2097051 pages RAM [ 539.130498][T18104] 0 pages HighMem/MovableOnly [ 539.130521][T18104] 81735 pages reserved [ 539.131076][ C0] EXT4-fs (loop3): initial error at time 1784971897: ext4_validate_block_bitmap:432 [ 539.131697][ C0] EXT4-fs (loop3): last error at time 1784971897: ext4_mb_clear_bb:6679 [ 539.515493][T18108] loop1: detected capacity change from 0 to 8192 [ 539.557450][T18099] EXT4-fs (loop3): 1 truncate cleaned up [ 539.611838][T18112] loop5: detected capacity change from 0 to 8192 [ 539.647298][T18099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.668600][T18108] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 539.962460][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 539.980374][ T28] audit: type=1400 audit(1784971897.878:4174): avc: denied { write } for pid=18098 comm="syz.3.2742" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.212499][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.333365][T18132] SELinux: Context is not valid (left unmapped). [ 540.346787][T18125] loop1: detected capacity change from 0 to 512 [ 540.348785][ T28] audit: type=1400 audit(1784971898.268:4175): avc: denied { relabelto } for pid=18129 comm="syz.5.2754" name="blkio.bfq.io_serviced" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 540.380439][ T28] audit: type=1400 audit(1784971898.268:4176): avc: denied { associate } for pid=18129 comm="syz.5.2754" name="blkio.bfq.io_serviced" dev="tmpfs" ino=681 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 540.427417][T18125] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2750: bg 0: block 393: padding at end of block bitmap is not set [ 540.429814][ T28] audit: type=1400 audit(1784971898.358:4177): avc: denied { connect } for pid=18127 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 540.441855][T18125] loop1: lost filesystem error report for type 5 error -117 [ 540.463533][T18125] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 540.479534][T18125] loop1: lost filesystem error report for type 5 error -117 [ 540.488005][T18125] EXT4-fs (loop1): 2 truncates cleaned up [ 540.501962][T18125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.542329][T18125] netlink: 'syz.1.2750': attribute type 2 has an invalid length. [ 540.548011][T18140] netlink: 'syz.5.2754': attribute type 1 has an invalid length. [ 540.558106][T18140] netlink: 'syz.5.2754': attribute type 4 has an invalid length. [ 540.560316][T18125] 1: entered promiscuous mode [ 540.566148][T18140] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2754'. [ 540.583779][T13943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.615005][T18142] loop1: detected capacity change from 0 to 1024 [ 540.762853][T18145] loop1: detected capacity change from 0 to 8192 [ 540.779391][T18132] netlink: 'syz.5.2754': attribute type 1 has an invalid length. [ 540.787193][T18132] netlink: 'syz.5.2754': attribute type 4 has an invalid length. [ 540.794943][T18132] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2754'. [ 541.131866][ T28] audit: type=1400 audit(1784971899.048:4178): avc: denied { append } for pid=18129 comm="syz.5.2754" path="/122/blkio.bfq.io_serviced" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 541.219145][T18150] loop1: detected capacity change from 0 to 8192 [ 541.256166][T18150] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 541.270498][T18154] loop3: detected capacity change from 0 to 512 [ 541.276890][ T28] audit: type=1400 audit(1784971899.188:4179): avc: denied { unlink } for pid=14982 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 541.342991][T18156] loop4: detected capacity change from 0 to 8192 [ 541.400495][ T28] audit: type=1326 audit(1784971899.328:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.5.2764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 541.473000][ T28] audit: type=1326 audit(1784971899.328:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.5.2764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 541.499347][T18160] loop5: detected capacity change from 0 to 512 [ 541.527741][T18160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.039978][T18160] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2764: iget: bad i_size value: 38620345925642 [ 542.304217][T18160] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 542.305414][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 542.320986][ C1] EXT4-fs (loop5): initial error at time 1784971900: ext4_orphan_get:1399: inode 15 [ 542.330409][ C1] EXT4-fs (loop5): last error at time 1784971900: ext4_orphan_get:1399: inode 15 [ 542.345915][ T3375] net_ratelimit: 13 callbacks suppressed [ 542.345933][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.372749][T18160] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2764: couldn't read orphan inode 15 (err -117) [ 542.386891][T18160] loop5: lost filesystem error report for type 5 error -117 [ 542.387822][T18160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.415845][T18154] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2762: bg 0: block 104: invalid block bitmap [ 542.428312][T18154] loop3: lost filesystem error report for type 5 error -117 [ 542.428529][T18154] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 542.444683][T18154] loop3: lost filesystem error report for type 5 error -117 [ 542.444922][T18154] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2762: invalid indirect mapped block 1 (level 1) [ 542.451958][T18007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.452313][T18154] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 542.453407][T18154] EXT4-fs (loop3): 1 truncate cleaned up [ 542.516431][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 542.522903][ C1] EXT4-fs (loop3): initial error at time 1784971900: ext4_validate_block_bitmap:432 [ 542.532346][ C1] EXT4-fs (loop3): last error at time 1784971900: ext4_free_branches:1023: inode 11 [ 542.617699][T18160] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2764: bg 0: block 5: invalid block bitmap [ 542.663014][T18160] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 488 with error 28 [ 542.863680][T18160] EXT4-fs (loop5): This should not happen!! Data will be lost [ 542.863680][T18160] [ 542.876423][T18160] EXT4-fs (loop5): Total free blocks count 0 [ 542.887125][T18160] EXT4-fs (loop5): Free/Dirty block details [ 542.893142][T18160] EXT4-fs (loop5): free_blocks=0 [ 542.899441][T18160] EXT4-fs (loop5): dirty_blocks=492 [ 542.904818][T18160] EXT4-fs (loop5): Block reservation details [ 542.911929][T18160] EXT4-fs (loop5): i_reserved_data_blocks=492 [ 542.923039][T18158] EXT4-fs (loop5): shut down requested (0) [ 542.940805][T18174] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2767: bg 0: block 393: padding at end of block bitmap is not set [ 542.971936][T18174] loop8: lost filesystem error report for type 5 error -117 [ 542.975302][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 542.989161][ C1] EXT4-fs (loop8): initial error at time 1784971900: ext4_validate_block_bitmap:441 [ 542.998572][ C1] EXT4-fs (loop8): last error at time 1784971900: ext4_validate_block_bitmap:441 [ 543.010103][T18174] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 543.043529][T18174] loop8: lost filesystem error report for type 5 error -117 [ 543.044020][T18174] EXT4-fs (loop8): 2 truncates cleaned up [ 543.061371][T18154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.091578][T18174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.146796][T18180] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.153755][T18178] FAULT_INJECTION: forcing a failure. [ 543.153755][T18178] name failslab, interval 1, probability 0, space 0, times 0 [ 543.192625][T18178] CPU: 0 UID: 0 PID: 18178 Comm: syz.5.2768 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 543.192669][T18178] Tainted: [W]=WARN [ 543.192679][T18178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.192694][T18178] Call Trace: [ 543.192742][T18178] [ 543.192752][T18178] __dump_stack+0x1d/0x30 [ 543.192781][T18178] dump_stack_lvl+0x95/0xd0 [ 543.192809][T18178] dump_stack+0x15/0x1b [ 543.192901][T18178] should_fail_ex+0x25e/0x270 [ 543.192937][T18178] ? sctp_add_bind_addr+0x71/0x1e0 [ 543.192977][T18178] should_failslab+0x8c/0xb0 [ 543.193089][T18178] __kmalloc_cache_noprof+0x7b/0x3d0 [ 543.193121][T18178] ? sctp_add_bind_addr+0x71/0x1e0 [ 543.193162][T18178] sctp_add_bind_addr+0x71/0x1e0 [ 543.193195][T18178] sctp_copy_local_addr_list+0x1b4/0x250 [ 543.193303][T18178] sctp_copy_one_addr+0x7f/0x280 [ 543.193343][T18178] sctp_bind_addr_copy+0x79/0x290 [ 543.193462][T18178] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 543.193571][T18178] sctp_connect_new_asoc+0x1c3/0x3a0 [ 543.193597][T18178] sctp_sendmsg+0x105f/0x1d00 [ 543.193669][T18178] ? __pfx_sctp_sendmsg+0x10/0x10 [ 543.193788][T18178] inet_sendmsg+0xc5/0xd0 [ 543.193821][T18178] ? __pfx_inet_sendmsg+0x10/0x10 [ 543.193848][T18178] ____sys_sendmsg+0x4e8/0x580 [ 543.193888][T18178] ___sys_sendmsg+0x195/0x1e0 [ 543.193969][T18178] __x64_sys_sendmsg+0xd4/0x160 [ 543.194013][T18178] x64_sys_call+0x194c/0x3020 [ 543.194090][T18178] do_syscall_64+0x136/0x3c0 [ 543.194117][T18178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.194144][T18178] RIP: 0033:0x7f94adc1de99 [ 543.194227][T18178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.194247][T18178] RSP: 002b:00007f94ac677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.194270][T18178] RAX: ffffffffffffffda RBX: 00007f94adea5fa0 RCX: 00007f94adc1de99 [ 543.194362][T18178] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 543.194376][T18178] RBP: 00007f94ac677090 R08: 0000000000000000 R09: 0000000000000000 [ 543.194390][T18178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.194403][T18178] R13: 00007f94adea6038 R14: 00007f94adea5fa0 R15: 00007fffe1d18788 [ 543.194423][T18178] [ 543.201905][T18173] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 543.267050][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 543.289156][T18173] 2: entered promiscuous mode [ 543.456318][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.535885][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.572117][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.633238][ T28] kauditd_printk_skb: 257 callbacks suppressed [ 543.633258][ T28] audit: type=1326 audit(1784971901.558:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4f46b3de99 code=0x7ffc0000 [ 543.680581][T18194] set_capacity_and_notify: 1 callbacks suppressed [ 543.680598][T18194] loop3: detected capacity change from 0 to 512 [ 543.684462][ T28] audit: type=1326 audit(1784971901.598:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.1.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4f46b3de99 code=0x7ffc0000 [ 543.743914][T18194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 543.763243][T18194] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.820795][T18200] syzkaller0: entered promiscuous mode [ 543.832670][T18200] syzkaller0: entered allmulticast mode [ 543.873526][T18194] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 543.897115][T13530] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 543.967392][T18202] loop3: detected capacity change from 0 to 8192 [ 544.064861][T18206] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2778'. [ 544.266217][T18215] lo speed is unknown, defaulting to 1000 [ 544.436017][T18218] loop4: detected capacity change from 0 to 8192 [ 544.477529][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.513960][T18222] loop5: detected capacity change from 0 to 512 [ 544.552682][T18222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 544.589828][T18222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 544.638983][T18222] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.323051][T18234] sctp: [Deprecated]: syz.4.2786 (pid 18234) Use of int in max_burst socket option. [ 545.323051][T18234] Use struct sctp_assoc_value instead [ 545.522386][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.605042][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.690481][T18006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.030020][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 546.107360][T18241] loop1: detected capacity change from 0 to 8192 [ 546.193807][ T28] audit: type=1400 audit(1784971904.108:4441): avc: denied { write } for pid=18247 comm="syz.3.2793" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 546.313417][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 546.650697][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.101217][T18277] loop3: detected capacity change from 0 to 8192 [ 547.535518][ T28] audit: type=1400 audit(1784971905.458:4442): avc: denied { getopt } for pid=18283 comm="syz.3.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 547.557672][T18282] loop8: detected capacity change from 0 to 8192 [ 547.686581][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.757853][T18294] loop1: detected capacity change from 0 to 1024 [ 547.774278][T18294] EXT4-fs: Ignoring removed bh option [ 547.844468][T18294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.881049][T13943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.484769][T18318] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 548.495709][T18316] loop5: detected capacity change from 0 to 256 [ 548.592235][T18320] loop8: detected capacity change from 0 to 512 [ 548.602162][T18320] EXT4-fs: test_dummy_encryption option not supported [ 548.677143][T18321] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 548.704428][T18320] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2810'. [ 548.716566][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.813020][T18318] netlink: 'syz.1.2808': attribute type 4 has an invalid length. [ 548.820900][T18318] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2808'. [ 549.127298][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.185679][T18321] netlink: 'syz.1.2808': attribute type 4 has an invalid length. [ 549.324243][T18321] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2808'. [ 550.239257][ T28] audit: type=1326 audit(1784971908.158:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18330 comm="syz.8.2813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42b06ade99 code=0x0 [ 550.264440][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.330917][T18327] loop4: detected capacity change from 0 to 8192 [ 550.518095][T18340] loop8: detected capacity change from 0 to 1024 [ 550.539547][T18340] EXT4-fs: Ignoring removed bh option [ 550.571242][T18340] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.594064][T18349] netlink: 'syz.3.2821': attribute type 12 has an invalid length. [ 550.644610][T18351] loop5: detected capacity change from 0 to 1024 [ 550.662728][T18353] random: crng reseeded on system resumption [ 550.673717][ T28] audit: type=1400 audit(1784971908.588:4444): avc: denied { write } for pid=18352 comm="syz.3.2823" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 550.674978][T18351] EXT4-fs: Ignoring removed bh option [ 550.705482][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.715793][T18351] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 550.726469][ T28] audit: type=1400 audit(1784971908.588:4445): avc: denied { open } for pid=18352 comm="syz.3.2823" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 550.750185][ T28] audit: type=1400 audit(1784971908.648:4446): avc: denied { ioctl } for pid=18352 comm="syz.3.2823" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 550.791688][T18357] netlink: 'syz.3.2823': attribute type 6 has an invalid length. [ 550.808005][T18351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.884392][ T28] audit: type=1400 audit(1784971908.808:4447): avc: denied { write } for pid=18350 comm="syz.5.2822" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.950227][T18363] loop8: detected capacity change from 0 to 8192 [ 550.957894][ T28] audit: type=1400 audit(1784971908.868:4448): avc: denied { write } for pid=18350 comm="syz.5.2822" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.983877][ T28] audit: type=1400 audit(1784971908.888:4449): avc: denied { create } for pid=18350 comm="syz.5.2822" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 551.046905][ T28] audit: type=1400 audit(1784971908.918:4450): avc: denied { read } for pid=18350 comm="syz.5.2822" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 551.315206][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.324533][T18373] FAULT_INJECTION: forcing a failure. [ 551.324533][T18373] name failslab, interval 1, probability 0, space 0, times 0 [ 551.337181][T18373] CPU: 1 UID: 0 PID: 18373 Comm: syz.8.2828 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 551.337214][T18373] Tainted: [W]=WARN [ 551.337223][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 551.337238][T18373] Call Trace: [ 551.337247][T18373] [ 551.337266][T18373] __dump_stack+0x1d/0x30 [ 551.337333][T18373] dump_stack_lvl+0x95/0xd0 [ 551.337361][T18373] dump_stack+0x15/0x1b [ 551.337386][T18373] should_fail_ex+0x25e/0x270 [ 551.337465][T18373] should_failslab+0x8c/0xb0 [ 551.337495][T18373] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 551.337522][T18373] ? skb_clone+0x151/0x1f0 [ 551.337595][T18373] ? skb_clone+0x151/0x1f0 [ 551.337636][T18373] skb_clone+0x151/0x1f0 [ 551.337709][T18373] __netlink_deliver_tap+0x2be/0x510 [ 551.337738][T18373] netlink_unicast+0x654/0x680 [ 551.337763][T18373] netlink_sendmsg+0x5be/0x6f0 [ 551.337826][T18373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.337860][T18373] ____sys_sendmsg+0x532/0x580 [ 551.337936][T18373] ___sys_sendmsg+0x195/0x1e0 [ 551.338043][T18373] __x64_sys_sendmsg+0xd4/0x160 [ 551.338086][T18373] x64_sys_call+0x194c/0x3020 [ 551.338165][T18373] do_syscall_64+0x136/0x3c0 [ 551.338233][T18373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.338264][T18373] RIP: 0033:0x7f42b06ade99 [ 551.338285][T18373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.338308][T18373] RSP: 002b:00007f42af107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.338330][T18373] RAX: ffffffffffffffda RBX: 00007f42b0935fa0 RCX: 00007f42b06ade99 [ 551.338414][T18373] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 551.338432][T18373] RBP: 00007f42af107090 R08: 0000000000000000 R09: 0000000000000000 [ 551.338449][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.338465][T18373] R13: 00007f42b0936038 R14: 00007f42b0935fa0 R15: 00007ffc8ba24da8 [ 551.338487][T18373] [ 551.387814][ T28] audit: type=1400 audit(1784971909.298:4451): avc: denied { listen } for pid=18374 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 551.671697][T18375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.680329][T18375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.681015][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.710733][T18380] loop5: detected capacity change from 0 to 1024 [ 551.717899][ T28] audit: type=1400 audit(1784971909.648:4452): avc: denied { remount } for pid=18379 comm="syz.5.2831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 551.744657][T18380] macsec1: entered promiscuous mode [ 551.750029][T18380] dummy0: entered promiscuous mode [ 551.755308][T18380] macsec1: entered allmulticast mode [ 551.760695][T18380] dummy0: entered allmulticast mode [ 551.767006][T18380] dummy0: left allmulticast mode [ 551.772029][T18380] dummy0: left promiscuous mode [ 551.806362][T18383] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 551.829145][T18383] tmpfs: Bad value for 'mpol' [ 551.899344][T18391] loop1: detected capacity change from 0 to 1024 [ 551.906949][T18391] EXT4-fs: Ignoring removed bh option [ 551.927080][T18391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.950372][T13943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.011696][T18399] loop1: detected capacity change from 0 to 8192 [ 552.155747][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.251847][T18413] dummy0: entered allmulticast mode [ 552.275005][T18413] dummy0: left allmulticast mode [ 552.316507][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.457735][T18427] xt_hl: Unknown TTL match mode: 29 [ 552.635430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.643747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.683898][T18437] loop4: detected capacity change from 0 to 512 [ 552.766703][T18437] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2850: bg 0: block 104: invalid block bitmap [ 552.783592][T18437] loop4: lost filesystem error report for type 5 error -117 [ 552.783967][T18437] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 552.800024][T18437] loop4: lost filesystem error report for type 5 error -117 [ 552.800509][T18437] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2850: invalid indirect mapped block 1 (level 1) [ 552.808358][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 552.808410][ C0] EXT4-fs (loop4): initial error at time 1784971910: ext4_validate_block_bitmap:432 [ 552.808590][ C0] EXT4-fs (loop4): last error at time 1784971910: ext4_mb_clear_bb:6679 [ 552.885184][T18437] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 552.888250][T18437] EXT4-fs (loop4): 1 truncate cleaned up [ 552.903993][T18437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.905382][T18452] FAULT_INJECTION: forcing a failure. [ 552.905382][T18452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.929040][T18452] CPU: 0 UID: 0 PID: 18452 Comm: syz.5.2855 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 552.929112][T18452] Tainted: [W]=WARN [ 552.929120][T18452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 552.929132][T18452] Call Trace: [ 552.929140][T18452] [ 552.929148][T18452] __dump_stack+0x1d/0x30 [ 552.929173][T18452] dump_stack_lvl+0x95/0xd0 [ 552.929193][T18452] dump_stack+0x15/0x1b [ 552.929273][T18452] should_fail_ex+0x25e/0x270 [ 552.929301][T18452] should_fail+0xb/0x20 [ 552.929385][T18452] should_fail_usercopy+0x1a/0x20 [ 552.929503][T18452] _copy_from_iter+0xcc/0xe70 [ 552.929588][T18452] ? __alloc_skb+0x511/0x6f0 [ 552.929616][T18452] ? __alloc_skb+0x205/0x6f0 [ 552.929644][T18452] netlink_sendmsg+0x4a4/0x6f0 [ 552.929683][T18452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.929709][T18452] ____sys_sendmsg+0x532/0x580 [ 552.929744][T18452] ___sys_sendmsg+0x195/0x1e0 [ 552.929808][T18452] __x64_sys_sendmsg+0xd4/0x160 [ 552.929843][T18452] x64_sys_call+0x194c/0x3020 [ 552.929867][T18452] do_syscall_64+0x136/0x3c0 [ 552.929936][T18452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.929978][T18452] RIP: 0033:0x7f94adc1de99 [ 552.930036][T18452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.930055][T18452] RSP: 002b:00007f94ac677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.930077][T18452] RAX: ffffffffffffffda RBX: 00007f94adea5fa0 RCX: 00007f94adc1de99 [ 552.930107][T18452] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 552.930158][T18452] RBP: 00007f94ac677090 R08: 0000000000000000 R09: 0000000000000000 [ 552.930171][T18452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.930184][T18452] R13: 00007f94adea6038 R14: 00007f94adea5fa0 R15: 00007fffe1d18788 [ 552.930202][T18452] [ 553.143455][T18453] loop1: detected capacity change from 0 to 512 [ 553.150298][T18453] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 553.165511][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2850'. [ 553.175365][T18453] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 553.303046][T13380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.419422][T18466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.428157][T18466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.280789][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.505272][T18482] loop8: detected capacity change from 0 to 512 [ 554.534498][T18485] EXT4-fs: inline encryption not supported [ 554.546977][T18485] EXT4-fs: Mount option(s) incompatible with ext3 [ 554.805271][T18482] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2867: bg 0: block 104: invalid block bitmap [ 554.830940][T18482] loop8: lost filesystem error report for type 5 error -117 [ 554.831315][T18482] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 554.847417][T18482] loop8: lost filesystem error report for type 5 error -117 [ 554.848037][T18482] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2867: invalid indirect mapped block 1 (level 1) [ 554.868584][T18482] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 554.869072][T18482] EXT4-fs (loop8): 1 truncate cleaned up [ 554.884643][T18482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.977013][T18500] syzkaller0: entered promiscuous mode [ 554.982806][T18500] syzkaller0: entered allmulticast mode [ 555.304021][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 555.304047][ T28] audit: type=1400 audit(1784971913.228:4455): avc: denied { write } for pid=18480 comm="syz.8.2867" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 555.345036][T18007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.353571][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.355259][T18500] set_capacity_and_notify: 1 callbacks suppressed [ 555.355276][T18500] loop1: detected capacity change from 0 to 4096 [ 555.380157][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2867'. [ 555.384141][T18500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.414929][T13062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.435914][ T28] audit: type=1400 audit(1784971913.368:4456): avc: denied { write } for pid=18499 comm="syz.1.2869" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 555.458001][T18505] loop4: detected capacity change from 0 to 8192 [ 555.466994][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.589556][T13943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.668252][T18519] loop8: detected capacity change from 0 to 8192 [ 555.680742][T18519] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.499560][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.888162][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.916293][ T28] audit: type=1326 audit(1784971915.838:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18550 comm="syz.8.2885" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42b06ade99 code=0x0 [ 557.955931][ T28] audit: type=1400 audit(1784971915.868:4458): avc: denied { getopt } for pid=18548 comm="syz.4.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 558.061470][T18560] loop5: detected capacity change from 0 to 512 [ 558.076866][T18560] EXT4-fs: inline encryption not supported [ 558.099939][T18560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 558.115178][T18560] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 558.158366][T18560] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 1 [ 558.169194][T18560] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 558.181777][T18560] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2888: Failed to acquire dquot type 1 [ 558.185000][ T28] audit: type=1400 audit(1784971916.108:4459): avc: denied { mount } for pid=18569 comm="syz.4.2891" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 558.194412][T18560] loop5: lost filesystem error report for type 5 error -5 [ 558.226398][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 558.240011][ C1] EXT4-fs (loop5): initial error at time 1784971916: ext4_acquire_dquot:7041 [ 558.243557][T18560] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, [ 558.248821][ C1] EXT4-fs (loop5): last error at time 1784971916: ext4_acquire_dquot:7041 [ 558.265975][T18560] block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 558.300936][T18560] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2888: corrupted inode contents [ 558.315718][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 558.317416][T18560] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #12: comm syz.5.2888: mark_inode_dirty error [ 558.346741][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 558.347118][T18560] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2888: corrupted inode contents [ 558.385434][T18584] loop3: detected capacity change from 0 to 8192 [ 558.393910][T18586] FAULT_INJECTION: forcing a failure. [ 558.393910][T18586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.401384][T18584] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 558.412870][T18586] CPU: 1 UID: 0 PID: 18586 Comm: syz.4.2896 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 558.412907][T18586] Tainted: [W]=WARN [ 558.412916][T18586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 558.412938][T18586] Call Trace: [ 558.412947][T18586] [ 558.412979][T18586] __dump_stack+0x1d/0x30 [ 558.413007][T18586] dump_stack_lvl+0x95/0xd0 [ 558.413030][T18586] dump_stack+0x15/0x1b [ 558.413052][T18586] should_fail_ex+0x25e/0x270 [ 558.413119][T18586] should_fail+0xb/0x20 [ 558.413147][T18586] should_fail_usercopy+0x1a/0x20 [ 558.413179][T18586] _copy_from_user+0x1c/0xb0 [ 558.413269][T18586] ___sys_sendmsg+0xc1/0x1e0 [ 558.413332][T18586] ? terminate_walk+0x1d5/0x200 [ 558.413402][T18586] __sys_sendmmsg+0x185/0x320 [ 558.413455][T18586] __x64_sys_sendmmsg+0x57/0x70 [ 558.413516][T18586] x64_sys_call+0x27aa/0x3020 [ 558.413542][T18586] do_syscall_64+0x136/0x3c0 [ 558.413641][T18586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.413667][T18586] RIP: 0033:0x7f0ef698de99 [ 558.413685][T18586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.413745][T18586] RSP: 002b:00007f0ef53e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 558.413769][T18586] RAX: ffffffffffffffda RBX: 00007f0ef6c15fa0 RCX: 00007f0ef698de99 [ 558.413785][T18586] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 558.413800][T18586] RBP: 00007f0ef53e7090 R08: 0000000000000000 R09: 0000000000000000 [ 558.413815][T18586] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 558.413867][T18586] R13: 00007f0ef6c16038 R14: 00007f0ef6c15fa0 R15: 00007ffe72578af8 [ 558.413887][T18586] [ 558.480711][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 558.481191][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.504301][T18560] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.2888: mark_inode_dirty error [ 558.628700][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 558.743649][T18560] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2888: corrupted inode contents [ 558.764792][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 558.792257][T18588] lo speed is unknown, defaulting to 1000 [ 558.857898][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'. [ 558.866985][T18591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2897'. [ 559.057705][T18560] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 559.088617][T18560] loop5: lost filesystem error report for type 5 error -117 [ 559.089256][T18560] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2888: corrupted inode contents [ 559.108614][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 559.114563][T18560] EXT4-fs error (device loop5): ext4_truncate:4691: inode #12: comm syz.5.2888: mark_inode_dirty error [ 559.134780][T18560] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 559.135118][T18560] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 559.223155][T18560] loop5: lost filesystem error report for type 5 error -117 [ 559.223437][T18560] EXT4-fs (loop5): 1 truncate cleaned up [ 559.237010][T18560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.745212][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.844614][ T28] audit: type=1400 audit(1784971917.768:4460): avc: denied { write } for pid=18598 comm="syz.4.2900" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 559.845434][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.967072][ T28] audit: type=1400 audit(1784971917.768:4461): avc: denied { write } for pid=18598 comm="syz.4.2900" path="/202/dev/kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 560.025188][T18601] loop5: detected capacity change from 0 to 2048 [ 560.075943][T18601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.121929][ T28] audit: type=1400 audit(1784971917.838:4462): avc: denied { unmount } for pid=13380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 560.369630][T18006] Process accounting resumed [ 560.634931][T18614] netlink: 'syz.8.2903': attribute type 5 has an invalid length. [ 560.678304][ T6972] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 560.710372][ T6972] EXT4-fs (loop5): Remounting filesystem read-only [ 560.731771][T14982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.746682][T18620] loop8: detected capacity change from 0 to 8192 [ 560.779132][T18624] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.858728][ T28] audit: type=1326 audit(1784971918.788:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 560.886507][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.938772][ T28] audit: type=1326 audit(1784971918.818:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 560.971628][T18627] ================================================================== [ 560.979911][T18627] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 560.987064][T18627] [ 560.989418][T18627] write to 0xffff88814852593a of 2 bytes by task 18620 on cpu 1: [ 560.997152][T18627] fat16_ent_put+0x28/0x60 [ 561.001619][T18627] fat_alloc_clusters+0x55e/0xc40 [ 561.006682][T18627] fat_get_block+0x252/0x5e0 [ 561.011301][T18627] __block_write_begin_int+0x400/0xf90 [ 561.016803][T18627] cont_write_begin+0x5bf/0x920 [ 561.021695][T18627] fat_write_begin+0x52/0xe0 [ 561.026299][T18627] generic_perform_write+0x186/0x490 [ 561.031703][T18627] __generic_file_write_iter+0x9e/0x120 [ 561.037365][T18627] generic_file_write_iter+0x77/0x1f0 [ 561.042756][T18627] vfs_write+0x57d/0x990 [ 561.047019][T18627] ksys_write+0xdc/0x1a0 [ 561.051284][T18627] __x64_sys_write+0x40/0x50 [ 561.055902][T18627] x64_sys_call+0x27e1/0x3020 [ 561.060611][T18627] do_syscall_64+0x136/0x3c0 [ 561.065307][T18627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.071333][T18627] [ 561.073682][T18627] read to 0xffff888148525800 of 512 bytes by task 18627 on cpu 0: [ 561.081683][T18627] fat_mirror_bhs+0x1df/0x330 [ 561.086386][T18627] fat_alloc_clusters+0xb25/0xc40 [ 561.091542][T18627] fat_add_cluster+0x46/0xe0 [ 561.096179][T18627] fat_fallocate+0x11e/0x1c0 [ 561.100798][T18627] vfs_fallocate+0x3ac/0x400 [ 561.105410][T18627] file_ioctl+0x4e1/0x5b0 [ 561.109770][T18627] do_vfs_ioctl+0x7c4/0xe50 [ 561.114381][T18627] __se_sys_ioctl+0x82/0x140 [ 561.118987][T18627] __x64_sys_ioctl+0x43/0x50 [ 561.123611][T18627] x64_sys_call+0x1563/0x3020 [ 561.128328][T18627] do_syscall_64+0x136/0x3c0 [ 561.132939][T18627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.138948][T18627] [ 561.141381][T18627] Reported by Kernel Concurrency Sanitizer on: [ 561.147548][T18627] CPU: 0 UID: 0 PID: 18627 Comm: syz.8.2907 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 561.158598][T18627] Tainted: [W]=WARN [ 561.162420][T18627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 561.172499][T18627] ================================================================== [ 561.292059][T18632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 561.805298][ T28] audit: type=1326 audit(1784971918.818:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 561.835774][T18007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.850921][ T28] audit: type=1326 audit(1784971918.818:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 561.888639][ T28] audit: type=1326 audit(1784971918.818:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 561.916582][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.937319][ T28] audit: type=1326 audit(1784971918.818:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 561.969613][ T28] audit: type=1326 audit(1784971918.818:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 561.998148][ T28] audit: type=1326 audit(1784971918.818:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 562.024291][ T28] audit: type=1326 audit(1784971918.818:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 562.050826][ T28] audit: type=1326 audit(1784971918.818:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18623 comm="syz.5.2905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94adc1de99 code=0x7ffc0000 [ 562.956477][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.996342][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.875871][T18007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.884264][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.046219][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.077278][T15662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.798093][T18007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.806382][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.817178][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.826451][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.835374][T18006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.116229][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.236272][ T3375] net_ratelimit: 3 callbacks suppressed [ 570.236287][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog