last executing test programs: 5m43.62313898s ago: executing program 32 (id=452): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m40.83626945s ago: executing program 33 (id=459): r0 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/timers\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$watch_queue(r3, &(0x7f0000000940)=""/211, 0xd3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1000, 0x830d}, 0x1116c8, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000180)=0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) 5m16.648231415s ago: executing program 6 (id=537): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x42}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m15.541892163s ago: executing program 6 (id=541): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x7, 0x2, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x54e, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x41, 0x1, 0x8000, 0x60, @private0, @mcast1, 0x40, 0x1, 0x9, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYRES8=r9, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$eJzs3c1vHGdcB/DvbOzEcas0bUMJUdtsUqV1W+PYDk0U9UATe524+AXZjtQIUFM1CYpiUdSC1FYcUglxoqJCCAm4oB45VSoHekG5wZETByTof4AqLoQDLNrZdbKO9yV2N3YIn89qMm+/521ndp7senee8H9ZvV4vpx2uX/mb3awsT56Lsz9++93XjemrO9mffXmn+LtkJEk1Gfrv8lwZnpldWV7sk9Ht5FqSu0mR5ECa8y4Oblq7luJP8uyD9bsp/ipHOyQb2Wbj6KvO/2t7ff4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATaWZ2cnKqyML80pUPqt2VQ4D32L+R3Q/lqN/FD/2KLZKiMWVkZGOo76NHHux+qfHPybzcXHu5OfL3SL585qXD7744VNlI36NCu+KzL768/dH6+o1PH2wa7hg41GpXY/nArlXv0e3fWbJLtaX51eX5xQuXatX51eXq+bNnJ09fnlutzs2ntnp1da22WJ1ZqV1YW16pjs28WZ06f/5MtTZxdfnK0qXZiYXaxsZzvzw9OXm2+v7Er9curKwuL51+f2J15vL8wsL80qUyprG7EXOucSL+2vxada12YbFavXlr/caZfpVsBE113FNsDprul9P05PT01NT09NTZd86/c25ycmjLhsmHZEvE3p+07J2/Hei1G36mSqv/z0Lms5Qr+SDVjo+ZzGYly1nssr9lo/8/dbrWs9z2/n+jlz/6YPexlP3/q821V7v1/13q0v9Rrzdz3mn6jcdn+SJf5nY+ynrWcyOf/uwctzz+a0D5VH9+a7c+LqWWpcxnNcuZz2IulFuqrS3VnM/ZnM1kPszlzGU11cxlPgupZTVXs5q11MozaiYrqeVC1rKclVQzlpm8mWqmcj7ncybV1DKRq1nOlSzlUmZzoczlZm6Vz/uZHnW8HzT1KEHTPYIG3P/Xn8T/CfK4DfwaDjtVb/X/+7sG1DeWxmZ2rVYAAADAIP3SP+bQkRf+4V+T4bxSfi4/N79Qm9zragEAAAADVH5d7+XGbLix9EoK7/8BAADgaVOUv7ErkozmeHOp+UuoffEhAAAAADwlyr//v9qYjTaWjqe4fyeUa3tdNwAAAGAw+t9jv29EMb5x+9/q9eb8eiuidZ/f0bn5hdrEzPLCu1N5vbzLQPlLgy257UuK4fLnB2/lRDPqxGhzPro5x5FG1NTEu1N5KydbDRl7rTF7baxD5HQz8o1m5Bs9Is80IgHgaXeyR3/8qP3/WxlvRowfG9qfZOhYh551Us8KAE+K/mPs9I0ofuXB+//hVrab+v8XcvM/m18pmMjH+STruZ7x8tcG5TcONuX6m9+0PjO4/zWEyYz3+TRgI/afzlUy3ufzgNG2gV7G+3wi0IzNbyVnHv+BAIBddLJLP7yd/n+87f1/tr7/vz+00A0/KQSAJ8L9EewHuvDcppz3uo0AwGZ6aQAAAAAAAAAAAAAAAAAAAAAAAAAAABi8gd72f2SHyf+tNa7foIch6LNwsPUc7DyfP02ye3UuBlxWZQD51JPs1vHavYUcTnb8rHY8jfcn2ft29V0Yar0kbn+0vldXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZTkezrtL2SHEgymeT07tfq8bmz1xXYfb/avlLcy718nkN7Vx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdT6/7/lTTnzzQ3ZaiSnEpyLclv7HUdB+neXldgQA7uMF3b/f8bxzz1IkPNw55ieGZ2ZXmxcfjLsR8qP3773deNqS35gUctpwysPDS4RKuEh2P/+tmNpefLVKOzNz67/Xuf/G519mIq2Z+La3MLs4uXVt57kOSl4vukmua0YaO+f3Dq77/p0PLvGy3t7OFy58onZ3Zrub/YKXXvcnu5tX5julHSWu2Dtd//nVuft+16ISeS18aSsc0l/XZj6lLSiQz3Kq34qfij4lD+PNfK4994Nop60ThEz5XtP3jz1vqNiY8/Wb/epU6HczzJ9WSkd52+att9vLyedFSedZXhRqmTZVDjnyN92thTW45TXdrwfHnKjLbasL9rG9pVO7Thf+r1+sZy2/Ne6VStZo3OdKnRi3m9w5GuH0i61+j13ke6s+Kn4l+Ky/nn/GHb+B+VxvE/le6vzs1ZlJFtZ0rXyEozsmz5dPuODx+O/Pe/eKTadxymhu36400v3krb9b91rAZ0PaoXPa9HbSVu73XRVmJl61nR43VR9khHHkrRuvp0S9Oq55FmVJd6/kLeToaO9boqbumt3+5+Vdyc/r3Ou3f6+v/LYiz/kTvG/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ58RbKv0/ZKcirJ4Y31alLfRrYHuu2ojBbbreJA3bn/z1Ohst0Exb3cy+c59HiqAwAAAAAAAMBuuzj747fffd2YioOtTa2/71eToSSHiz87mNmV5cU+GQ0n15LcbSyPdNjf48/9jXR59sH63cba0e22BAB4VP8bAAD//2vcY1k=") ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x1a, 0x9, {{0x41, 0x4, 0x2, 0x30, 0x104, 0x66, 0x0, 0xc0, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x24, 0xf1, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@broadcast, 0xd}, {@private=0xa010102, 0x1000}]}, @cipso={0x86, 0x34, 0x8dc1b1fc7cfdafe6, [{0x2, 0x10, "41f27f4d8052e2b467d6681a87ef"}, {0x4, 0xf, "0f52d939afedf1b2975bb1f925"}, {0x1, 0xf, "05027c06f7f59cf8c8d253ec13"}]}, @cipso={0x86, 0x18, 0xfffffffffffffffe, [{0x1, 0x12, "c5f17ae14b05d296b5a690ec20bccad6"}]}, @ssrr={0x89, 0x13, 0xfe, [@empty, @local, @local, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x67, 0x3, [{0x0, 0x9, "16253112691e0a"}, {0x1, 0x12, "4b06e9203660459ab70ba7ba529fbeee"}, {0x6, 0xe, "c18e96635ec8e45e188b41d1"}, {0x5, 0xb, "d7a03b4705fb820abe"}, {0x7, 0xf, "aa5ccae2afc6f15cfa3fdf615e"}, {0x2, 0xf, "d172128ba621f2b0c4598824e7"}, {0x2, 0xf, "4809e1db8b6d3352f7e2a31d37"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) semget(0x1, 0x4, 0x39c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r11 = socket$can_bcm(0x1d, 0x2, 0x2) signalfd4(r11, &(0x7f0000000000)={[0xf06]}, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5m14.768040512s ago: executing program 6 (id=544): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x7, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x5, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4854, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x10020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r3}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 5m13.787509317s ago: executing program 6 (id=547): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x48, &(0x7f0000000100)=r2, 0x120) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x94000001) 5m9.363913797s ago: executing program 6 (id=558): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x94000001) 5m3.423635346s ago: executing program 6 (id=580): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x4, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m3.403875847s ago: executing program 34 (id=580): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x4, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m26.63836596s ago: executing program 3 (id=1115): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getresuid(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xd, 0x0, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x44004) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x878b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82) fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) preadv(r1, &(0x7f0000002d00)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x101, 0x9) ioctl$KDGKBTYPE(r1, 0x4b33, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}]}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x44, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x90) 2m24.600547881s ago: executing program 3 (id=1125): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x400, &(0x7f0000000000)={[{@nodiscard}, {@nodiscard}]}, 0x1, 0x24b, &(0x7f0000001d40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x157) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) close(r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x3, 0x7fffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x3800, 0x0) 2m23.319628973s ago: executing program 3 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2m23.02847299s ago: executing program 3 (id=1138): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') setns(r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x40000) accept(r2, 0x0, 0x0) unshare(0x26020480) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf2514000000080001000000000008001d"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004c050) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2m22.2432308s ago: executing program 3 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt_trace/trace\x00', 0x1, 0x0) lseek(r0, 0x100000001, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r1}, 0x2) 2m22.040752195s ago: executing program 3 (id=1144): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@remote, 0x9c940000, 0x1, 0x3, 0xa, 0x9}, 0x20) 2m21.990378056s ago: executing program 35 (id=1144): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@remote, 0x9c940000, 0x1, 0x3, 0xa, 0x9}, 0x20) 2m14.693045399s ago: executing program 5 (id=1182): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xffffff4f, @loopback, 0x9ed}}}, 0x30) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 2) 2m14.360680377s ago: executing program 5 (id=1183): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) 2m14.139840533s ago: executing program 5 (id=1186): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x157) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") fcntl$notify(0xffffffffffffffff, 0x402, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) close(r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x3, 0x7fffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x3800, 0x0) 2m13.757629862s ago: executing program 5 (id=1190): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') setns(r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x40000) accept(r2, 0x0, 0x0) unshare(0x26020480) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf2514000000080001000000000008001d"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004c050) 2m13.381681632s ago: executing program 7 (id=1196): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m13.118131149s ago: executing program 5 (id=1197): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) 2m12.704990829s ago: executing program 7 (id=1200): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x157) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) close(r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x3, 0x7fffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x3800, 0x0) 2m12.23739389s ago: executing program 7 (id=1204): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0xa, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="01feffffa400050014001a80100005800c0004800800"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m12.147522493s ago: executing program 7 (id=1207): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') setns(r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x40000) accept(r2, 0x0, 0x0) unshare(0x26020480) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf2514000000080001000000000008001d"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004c050) 2m11.944626598s ago: executing program 5 (id=1208): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000ffb"], 0x1c}, 0x1, 0x0, 0x0, 0x4048885}, 0x44040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r3, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2m11.944290388s ago: executing program 36 (id=1208): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000ffb"], 0x1c}, 0x1, 0x0, 0x0, 0x4048885}, 0x44040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r3, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2m11.657757215s ago: executing program 0 (id=1211): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m11.44093615s ago: executing program 7 (id=1213): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 2m11.184448646s ago: executing program 7 (id=1215): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x157) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) close(r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x3, 0x7fffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x3800, 0x0) 2m11.165614677s ago: executing program 37 (id=1215): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x157) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x32, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg(r3, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) close(r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x3, 0x7fffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x3800, 0x0) 2m11.161004598s ago: executing program 0 (id=1218): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x16600, 0x10, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0x20000000, 0x0, 0x5, 0xffffffffffffff01, 0x8, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB='`\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001f00000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5420) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380100001600330627bd700000000080e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000200000033000000", @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES64], 0x138}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m9.86215274s ago: executing program 0 (id=1220): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4fbff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100fdff6a0af2fe000000008500000064000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0xfd, 0x4, 0xfffffffc, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @remote, 0x20, 0xba08, 0x2, 0x4}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x2d}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x0, 0x7, 0x2}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400006f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0x9, 0x0, 0x6, 0x8, 0x7, "b889c5a049c88a07a80e94e5ed061a676aae59"}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000300)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo={0x8, 0x0, 0x0, 0x5417, 0x3}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2m9.207881786s ago: executing program 0 (id=1222): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') setns(r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x40000) accept(r2, 0x0, 0x0) unshare(0x26020480) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf2514000000080001000000000008001d"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004c050) 2m8.854707165s ago: executing program 0 (id=1224): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x7, 0x2, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x54e, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x41, 0x1, 0x8000, 0x60, @private0, @mcast1, 0x40, 0x1, 0x9, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYRES8=r10, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$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") ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x1a, 0x9, {{0x41, 0x4, 0x2, 0x30, 0x104, 0x66, 0x0, 0xc0, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x24, 0xf1, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@broadcast, 0xd}, {@private=0xa010102, 0x1000}]}, @cipso={0x86, 0x34, 0x8dc1b1fc7cfdafe6, [{0x2, 0x10, "41f27f4d8052e2b467d6681a87ef"}, {0x4, 0xf, "0f52d939afedf1b2975bb1f925"}, {0x1, 0xf, "05027c06f7f59cf8c8d253ec13"}]}, @cipso={0x86, 0x18, 0xfffffffffffffffe, [{0x1, 0x12, "c5f17ae14b05d296b5a690ec20bccad6"}]}, @ssrr={0x89, 0x13, 0xfe, [@empty, @local, @local, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x67, 0x3, [{0x0, 0x9, "16253112691e0a"}, {0x1, 0x12, "4b06e9203660459ab70ba7ba529fbeee"}, {0x6, 0xe, "c18e96635ec8e45e188b41d1"}, {0x5, 0xb, "d7a03b4705fb820abe"}, {0x7, 0xf, "aa5ccae2afc6f15cfa3fdf615e"}, {0x2, 0xf, "d172128ba621f2b0c4598824e7"}, {0x2, 0xf, "4809e1db8b6d3352f7e2a31d37"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) semget(0x1, 0x4, 0x39c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r12 = socket$can_bcm(0x1d, 0x2, 0x2) signalfd4(r12, &(0x7f0000000000)={[0xf06]}, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m8.27162236s ago: executing program 0 (id=1226): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00000a8000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000019b000/0x2000)=nil, &(0x7f0000074000/0x4000)=nil, &(0x7f00003f5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001ec000/0x4000)=nil, 0x0}, 0x68) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2216, 0xaf49, 0x16, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x56d, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0}, 0x3400c8d4) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/cgroup\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b700008500000083000000bf090000000000005509010000000000950000000000000085100000f9ffffff8510000005000000028a30000c000000bf91000000000200129f0000010000008500000084000000b7000000000007009500000000000000000e09ecd7"], &(0x7f0000000300)='GPL\x00', 0x5, 0x9, &(0x7f0000000340)=""/9, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(r9, 0x8008b705, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4048050) 2m8.181080782s ago: executing program 38 (id=1226): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00000a8000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000019b000/0x2000)=nil, &(0x7f0000074000/0x4000)=nil, &(0x7f00003f5000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001ec000/0x4000)=nil, 0x0}, 0x68) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2216, 0xaf49, 0x16, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x56d, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0}, 0x3400c8d4) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/cgroup\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b700008500000083000000bf090000000000005509010000000000950000000000000085100000f9ffffff8510000005000000028a30000c000000bf91000000000200129f0000010000008500000084000000b7000000000007009500000000000000000e09ecd7"], &(0x7f0000000300)='GPL\x00', 0x5, 0x9, &(0x7f0000000340)=""/9, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(r9, 0x8008b705, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4048050) 5.487616093s ago: executing program 9 (id=1882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x1, 0x6c6, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000001b40)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880f, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x3}}}}}}}, 0x0) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$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") move_mount(r5, &(0x7f0000000140)='.\x00', r4, 0x0, 0x41) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) 5.037101364s ago: executing program 2 (id=1884): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) sendmsg$inet(r4, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x20000000) r5 = fsmount(r3, 0x0, 0xa) fchdir(r5) chdir(&(0x7f00000000c0)='./sys\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r6, &(0x7f0000001fc0)=""/184, 0x18) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) 4.988549155s ago: executing program 4 (id=1887): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x0, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x0, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000800)={'#! ', './sys/module/usbcore/parameters/quirks/file0', [{}, {0x20, 'e8dab99234bb312e'}, {}, {0x20, 'syz'}], 0xa, "cc5f1bf74efe9bac5977d5bd27489de7c210df5669b78b"}, 0x5e) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r3, 0x150}, 0x0, &(0x7f00000008c0)="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", 0x0) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r3, 0x150}, 0x0, &(0x7f00000008c0)="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", 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x2c, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x2c, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000540)={0x2, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0fc5:1227:b\nnm', 0xe) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233455566778899aabbccddeeff00112233c1ffffff8899aabbccddeeff00112233445566778899aabbccddeeff001122330500000000000000ccddeeff", 0x50c}, 0x48, r0) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233455566778899aabbccddeeff00112233c1ffffff8899aabbccddeeff00112233445566778899aabbccddeeff001122330500000000000000ccddeeff", 0x50c}, 0x48, r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @private2, 0x3}, 0x1c) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 4.705205432s ago: executing program 4 (id=1890): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1000, 0x8041) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) statx(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', 0x1000, 0x200, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002c40)=0x0) lstat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) r7 = socket(0x28, 0x5, 0x0) r8 = semget$private(0x0, 0x2, 0x7c4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) getgroups(0x5, &(0x7f0000000280)=[0xee01, 0xee00, 0x0, 0xee01, 0xee00]) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(0x0, r13) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000340)={{0x2, r9, r10, r11, r13, 0x1, 0xf9ae}, 0x1, 0x3dc, 0x0, 0x0, 0x0, 0x0, 0x7}) r14 = gettid() r15 = getuid() stat(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003080)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000003180)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000031c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r19 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) fadvise64(r19, 0x7fffffffffffffff, 0xfffffbf7, 0x4) r20 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1400c, &(0x7f0000000740)={[{@data_err_abort}, {@sb={'sb', 0x3d, 0x5}}, {@i_version}, {@resuid={'resuid', 0x3d, r21}}]}, 0xff, 0x462, &(0x7f0000000200)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="532780", 0x3}, {&(0x7f0000001200)="ce3db2d61997dbd5f3ccead0ef0ed97c5899a4475bc2f4c28a90a989171cbfd602a120d5a39a29c9b2d4cec758f25914d50d9daa140771996ccc6c4eeaad445b273a86cee2186f88ea2e6656011a478613164a8fc364691688383cd889eb322e0d16208792d1d47af21833e2bacfd8e437341960a2ec02bb89c20b7849cac98c37fcbaf7154353643e284b6e28ad99d8aa04e0cd8eac632a7b395d006f3b30f7c4ef4d80d5c8b1efe439c151a953", 0xae}, {&(0x7f00000012c0)="b2746943a3a8bb0081976ddc82965bd7d4c82894e9b2158e2f1a72987dcbb5023919713aaa139e97cbe4ee481e9724753bf203bf3b59fe4e619d34e171c146a9194cb5da8a09003ad1e5f08617827932e5780ec25ac1c035423070f8c71e76a344bc81773c880b68aeae35ee6dba823c47c75752e9e38d4bf291a12e9bc4d1e7426cc7597d1d7148f36f03cf70c84f3c78", 0x91}, {&(0x7f0000001380)="16e19ffe145c6cb9068f8fd98804d4824405ac3d0f8a33951c9fd482c9ff2ca92e32df15f0c95e8a8afac8341497ebd526ad3e0b3b1e657e03d4c79f49bc6dba05db82fe3950e4b696ba84ee8c36b3", 0x4f}], 0x5, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r0, 0xffffffffffffffff]}}], 0xd8, 0x4000010}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000016c0)="856dd0ad26978130a991671bbf731b23f93aefafe880440944c5b003074598d7918f8b1dab053f2353", 0x29}], 0x1, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18, 0x24}}, {{&(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)="5142bc8bbed6f99400024ee0e354f552186e7319be64d9692b13a21824c25dccf8f0b142e346831efd0d3530c68c2e7aecf2cb180c895291f8bd1c7bf2dc2b509cca839022288899d34490aca34837bf1c940734e54bfd1336bd3246877fc546835c87b46779b34bf5ed214ca0fd27bdf6d57d8d16bedb3669f08ae620c7489598293f2d7e8083fd0d8fd7251efe5a8dc839f9118aae642c0b94ad24d992defc54bd1a2083c138b6ead63d5f68f9728e93cc9d89e1863147f9e75a63bc7dba403fb368528ac1c90c4fe394824b50a8d1cc99488329525d176e61747825988410e1f4494519a6b3c5a53c", 0xea}], 0x1, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0, 0x40}}, {{&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000021c0)="e8c2a905e89aa4d536bd3625d452ce8b4dafe683ce3451d5e44e27b013f9f61c69febeae88fd2df3fa9e970d548224065aada4e80bac6c17ea98ab2b3efabb693e3a964dcb7a2272004277d1", 0x4c}, {&(0x7f0000002240)="4c0b098846f19582befd04e3fc70f808b4acd1c2a692ae68fadbd2c4e29ee67947ea988aad810fc2ba26fae257b8df19a09c14825f42d942ffbb4706d1862044a6b4aa411283474068fdca40269d69ae1c58b9508425dc2c5eb95adcde2da526bbc87e568a43761736fbdeff9d5ab5028d402fb4ec888a2de2c76f23846c5548c6902c21b1dbbc70bca74f94b87567a141179f5431248a6e30c8cc5f47c3", 0x9e}, {&(0x7f0000002300)="baa44f71ad05b06494380495feec801a759b58eb6e81c8fa2092fa52cf8ca1fbb9c7dfc9aa1c43754bf7dc25a61baad90586308dcd5b1e243b5b70bb2ff31d725d5f605bad98e3a093ff8d4cc946823429ff895c2f6e0563c16e97a98937594af05439ef6c59a8cbbbc20b45bd1e66bd3f152dbf0bdb15d00af585ef3416dfc98db91d1a36b2f957740fc11e16ccb40548c0dee0cdcafd1dec92dcc6a8855a55fd224fbf515ce5d4fcb96d4d665d6363f4e0330207bb84982c093f6628be1bce31b0fcb141f1271230665a0607deb6", 0xcf}, {&(0x7f0000002400)="8067065d2e946bbf3607fa5da1acdc4f61d6695a417da021f2946f5fe09bdcce10176157dd88b3a90b16470a23cce7a91cc28810d959513e5776971496bc2700", 0x40}, {&(0x7f0000002440)="e0c33656768da9e4fde62913bb79575fa08e5063a264e4a30dca97f2a14d4e6f707676e7e0ae42aed0bfc519d74c2833f42ef6163c1e624b1e547d71b693762983316441b7f25e75e24611cbfb1a5d0d8742f5e34e6e16043f83410c9959218a102edf88f1e7df978ba9b46c2598fcf35db0f91f32a698e92a3349c74b68a61863a5f3f50c1d15a03bd30eb3eca8ea8d39e2e7b597bd1ac164ee9890946f1b3974cee61774", 0xa5}, {&(0x7f0000002500)="04a96f6c7c2624988a79829c0f05b05e3172c79ff4578f60a9ec03e5f548f8ed8125a14c4fee", 0x26}], 0x6, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r0, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}], 0xb8, 0x48080}}, {{&(0x7f0000002800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002880)="71b2a124f6c37683", 0x8}, {&(0x7f00000028c0)="ee0e21c128407bdae8c69c464df04bf5fdbbad24e689df", 0x17}], 0x2, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xe0, 0x801}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f40)="a802afa07472b59038fd78dfd36b12c26fe52898b7c57396cab0d98b095ba1ad124868a785231a521c465a4f6ba78e8c18514b14a581e9e4536107c4dd096dbb27b99a99cdd1c4affe8d1271514d8710ca91be15c80e480cd5a619121b2e05b8ea89543ec827732de580ea7147929c3f4f4b3eca768a4a66211ebc6a669344c88fe61eafe5bd673b9704d0", 0x8b}, {&(0x7f0000003000)="a7d7b5e279603135ac5fd4c92ab55e5820a31c54a2e808f342e775adb5225149abc60ff152c759507de74daf4235", 0x2e}], 0x2, &(0x7f0000003200)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, r18}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r19, r1, r0]}}], 0x58, 0x20008081}}, {{&(0x7f0000003280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003300)="8c2d67467382b2ee4dba01f15b8ea478e104e43c75d7254245d8086b7f5cc25dd26de58b7831bc20b58443573204af961f33285172f74e366c6184a4c0ad87d56fab13893a26677933307f66a761dff53c8f0876249f075319291527fd2a16865426b48b9fe6801ae5", 0x69}, {&(0x7f0000003380)="ca348624fa92a463971580d776d4fce506f0ef2a57f6b921793c072bbf05ee89baf2ed3eea3eb4987535a403ddde16784ab55622c2dcd45eec4aa50fbea7c5365a592397a120949e9ea12363747d678b5911a464aa7eefff814c1202be429f6a1ee2bd5c325e7a20b741f14a9e197f4678f7624dc0d60c12bcffbb35f9d64aba0fd978c46c80f1adae1507baf4d7d661c9e35fe0dea0e0fc6e24d790a57719388e2782c8b1a9bb29e9b624ed24ccb6ae4b2809bbec92749c699d37904d07b2fef823df0bc1a0eb74aeac31712f20165c15b5", 0xd2}, {&(0x7f0000003480)="7c941852548d4dab7197c4c132d168eb4c57cdf52d69f03957b3f7d97d227bf3315c66e0f0cbceefeb1a5a801f7dda198684bd16ca3826486631715aa16e3c36dacca48abe275967ef41801e40395e86", 0x50}, {&(0x7f0000003500)="d88882728244b63cecc16b98f80caa9a4b1a8408c94eadb007eae408c91066e44ec101adf07c729980887f8cd2a9e4408740a05b86336bd05a1adc232f312f4975725c4dbb61d2d8de0b4910572807b0912133ae29271cc92836eebfe78dd1fce7f989ee11e0eb4f98585396b4aba6c0632b6b16a162b63117cd580ba3f6875ae7cef81d5919243e7c137b9c8f952eaf3cefb5b4626a1993b30dd5abf0be7b49d993c67946ff95049c16136080422887d67d4bf3", 0xb4}, {&(0x7f00000035c0)="75816284569ccb87ea863d3a3fe09951dac5e09c5d965392ca4fa81bb7aa3a480e867ef5037fd76dd23d063210a7f7579ab6437c4f47ff12fcefd2ebedab8cbd647609388d6f5e2b3e9bd9f493baec93022da516a80a9a6dedda4002b6a202aa5d9eccb6a8270182ce39536d9e31df76aadb1e70392f7d9b06cacedce699c04e3dcd07ad791e770c7c5507171630821872c149453319e853a8867c9d1c52a9ea8ccbcc49334e0bc17de63525118d3fa0677f7e58b09cbcecbe468d094796d61646a8bcf0f5b7494a4562878fe09408ed0f43bc31038993f509a7f9d0b660", 0xde}], 0x5, &(0x7f0000003800)=[@cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x60, 0x884}}], 0x7, 0x24008880) 4.664402653s ago: executing program 4 (id=1892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000003ef435774abd6035b34a000a000004"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a3200000000340003"], 0xe4}}, 0x0) 4.580959375s ago: executing program 9 (id=1893): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) keyctl$read(0xb, r6, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x4, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.528673936s ago: executing program 2 (id=1894): syz_clone3(&(0x7f00000007c0)={0x1e0180, &(0x7f0000000240), 0x0, &(0x7f00000003c0), {0x36}, &(0x7f00000004c0)=""/245, 0xf5, 0x0, 0x0}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) r4 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x404, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") fallocate(0xffffffffffffffff, 0x10, 0x0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0xd0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x200}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100") 4.39519963s ago: executing program 4 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 4.221552024s ago: executing program 4 (id=1896): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4800}}, {@minixdf}]}, 0x1, 0x4fe, &(0x7f0000000c00)="$eJzs3c9vI1cdAPDvOHHiZNMmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEANEgdXM55knay9iTaJHcWfjzSa9+bN+vveZue99TeJXwAj63ZE7EfERES8HxGz+fUkP+KdzpHe99nBo5XDg0crSbTb7/0rydrTa9H1Z1K38tcsRcSPvhfx0+TJuM3dvY3lWq26ndfnW/Wt+ebu3r31+vJada26WaksLS4tvHX/zcqljfWV+kRe+uqnf9z/1s/Tbs3kV7rHcZk6Qy8ex0mNR8QPriLYEIzl45kYdkd4JoWIeDEiXs2e/9kYy76aAMBN1m7PRnu2uw4A3HSFLAeWFMp5LmAmCoVyuZPDeymmC7VGs3X3YWNnc7WTK5uLYuHheq26kOcK56KYpPXFrPy4XjlVvx8RL0TELyensnp5pVFbHeZ/fABghN06tf7/d7Kz/gMAN1xp2B0AAAbO+g8Ao8f6DwCjx/oPAKOns/5PDbsbAMAAef8PAKPH+g8AI+WH776bHu3D/POvVz/Y3dlofHBvtdrcKNd3Vsorje2t8lqjsZZ9Zk/9rNerNRpbi2/Ezodz395qtuabu3sP6o2dzdaD7HO9H1SL2V37AxgZANDPC6988pckXZHfnsqO6NrLoTjUngFXrTDsDgBDMzbsDgBDY7cvGF0XeI8vPQA3RI8tek8o9foFoXa73b66LgFX7M6X5P9hVHXl//0UMIwY+X8YXfL/MLra7eS8e/7HeW8EAK43OX6gz/f/X8zPv8u/OfCT1dN3fHyVvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDr7Wj/33K+F/hMFArlcsRzETEXxeTheq26EBHPR8SfJ4uTaX1xyH0GAC6q8Pck3//rzuzrMyeaXr51XJyIiJ/9+r1ffbjcam3/KWIi+ffk0fXWx/n1yuB7DwCc7Widzs5db+Q/O3i0cnQMsj//+G5ElDrxDw8m4vA4/niMZ+dSFCNi+j9JXu9IunIXF7H/UUR8sdf4k5jJciCdnU9Px09jPzfQ+IUT8QtZW+ec/l184RL6AqPmk3T+eafX81eI29m59/Nfymaoi8vnv/SlVg6zOfBx/KP5b6zP/Hf7vDHe+MP3O6WpJ9s+ivjyeMRR7MOu+ecoftIn/uvnjP/Xr7z8ar+29m8i7kTv+N2x5lv1rfnm7t699fryWnWtulmpLC0uLbx1/83KfJajnu+/Gvzz7bvP92tLxz/dJ37pjPF//Zzj/+3/3//x154S/5uv9YpfiJeeEj9dE79xzvjL078v9WtL46/2Gf9ZX/+754z/6d/2ntg2HAAYnubu3sZyrVbdVlC4/oX0n+w16EbPwncGFWsiejf94rXOM32qqd1+plj9ZozLyLoB18HxQx8R/+t5RzLwPgEAAAAAAAAAAAAAACcN4jeWhj1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7PAwAA//83fM8k") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002780)=0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$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") fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x200, {0x8, 0x3}, 0x1, r3, 0xffffffffffffffff, 0x1, 0x3e8, 0x401, 0x70, 0x5, 0x200, 0x8, 0x7, 0x1, 0x0, 0x1000, 0x963, 0x8000000000000001, 0x100, 0x2}}, 0xa0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.685415008s ago: executing program 9 (id=1899): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xcfed, 0xb0a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, r1, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0xffffffee, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x1, "2930a346f48166435f4f3f2f8b27925d8be3760c987e886f6ecb7cff2b1deab4f7f39753814dfcf4c6858b194557df3eb571a0b2b6710ffc8902"}, 0x42, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000005a233fabbc650603256cb680", @ANYRES16, @ANYBLOB="010000000000000000000c0000000c0003800800038004000180"], 0x20}, 0x1, 0x0, 0x0, 0x88840}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 3.627254179s ago: executing program 9 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (fail_nth: 3) 3.163343241s ago: executing program 4 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x100002}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x100002}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) 3.123205622s ago: executing program 9 (id=1905): syz_clone3(&(0x7f00000007c0)={0x1e0180, &(0x7f0000000240), 0x0, &(0x7f00000003c0), {0x36}, &(0x7f00000004c0)=""/245, 0xf5, 0x0, 0x0}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) r4 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x404, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") fallocate(0xffffffffffffffff, 0x10, 0x0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0xd0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x200}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100") 2.431587829s ago: executing program 2 (id=1909): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xb, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x7, 0x2, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x54e, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x41, 0x1, 0x8000, 0x60, @private0, @mcast1, 0x40, 0x1, 0x9, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYRES8=r10, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$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") ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x1a, 0x9, {{0x41, 0x4, 0x2, 0x30, 0x104, 0x66, 0x0, 0xc0, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x24, 0xf1, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@broadcast, 0xd}, {@private=0xa010102, 0x1000}]}, @cipso={0x86, 0x34, 0x8dc1b1fc7cfdafe6, [{0x2, 0x10, "41f27f4d8052e2b467d6681a87ef"}, {0x4, 0xf, "0f52d939afedf1b2975bb1f925"}, {0x1, 0xf, "05027c06f7f59cf8c8d253ec13"}]}, @cipso={0x86, 0x18, 0xfffffffffffffffe, [{0x1, 0x12, "c5f17ae14b05d296b5a690ec20bccad6"}]}, @ssrr={0x89, 0x13, 0xfe, [@empty, @local, @local, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x67, 0x3, [{0x0, 0x9, "16253112691e0a"}, {0x1, 0x12, "4b06e9203660459ab70ba7ba529fbeee"}, {0x6, 0xe, "c18e96635ec8e45e188b41d1"}, {0x5, 0xb, "d7a03b4705fb820abe"}, {0x7, 0xf, "aa5ccae2afc6f15cfa3fdf615e"}, {0x2, 0xf, "d172128ba621f2b0c4598824e7"}, {0x2, 0xf, "4809e1db8b6d3352f7e2a31d37"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) semget(0x1, 0x4, 0x39c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r12 = socket$can_bcm(0x1d, 0x2, 0x2) signalfd4(r12, &(0x7f0000000000)={[0xf06]}, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.248463714s ago: executing program 2 (id=1910): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x94000001) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) 1.696756967s ago: executing program 1 (id=1914): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 1.696539318s ago: executing program 1 (id=1915): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x4292, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x60b5, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000853000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) 1.532865902s ago: executing program 1 (id=1916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x53, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x20040040) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) capget(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0xf, 0x8, 0x6, 0xf, 0x401, 0xffffca08}) 1.510817863s ago: executing program 1 (id=1917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.444613894s ago: executing program 1 (id=1918): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1c32, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x4, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.252734099s ago: executing program 2 (id=1919): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x16600, 0x10, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0x20000000, 0x0, 0x5, 0xffffffffffffff01, 0x8, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000007001000040000002500000001000000", @ANYRES32, @ANYBLOB='`\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001f00000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x5420) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380100001600330627bd700000000080e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000200000033000000", @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES64], 0x138}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 983.646405ms ago: executing program 9 (id=1921): syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') syz_usb_connect$midi(0x0, 0x41, &(0x7f00000019c0)=ANY=[], 0x0) socket$tipc(0x1e, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 779.20092ms ago: executing program 8 (id=1924): unshare(0x20000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x4e30, 0x7, @empty, 0x7}}, 0x0, 0x0, 0x40, 0x0, "a27c1d4960797690869ef31401a187ca0f8c433a07f45185979da6aba549627cb32b2ca11504af08af11fe48214c970d348cfa995c88ae8335f71b776761980dcb4f8c856651ecd264f1585a3f8003cc"}, 0xd8) pipe(&(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000006000000040000000144989f554cb6f5bcc3cac0b8a200000011510000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 676.693933ms ago: executing program 8 (id=1925): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 674.644253ms ago: executing program 8 (id=1926): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000007, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="1c000000190081044e81f782db4cb90402200800fd007c05e8fe55a1", 0x1c}], 0x1}, 0x44004) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x82, 0x2, 0x70, {0xa, 0x4e22, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'veth1_to_bond\x00'}}, 0x1e) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x80) ioctl$BLKRASET(r5, 0x1262, 0x0) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000005680)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x412440, 0x0) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f00000001c0)=0x7) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000001340)) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r8 = syz_open_dev$sg(&(0x7f0000000040), 0xb8c4, 0x80680) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) rt_sigqueueinfo(r9, 0x3d, 0x0) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0xc69, 0x1, 0xc, 0x7, r9}) 404.69307ms ago: executing program 8 (id=1927): unshare(0x20000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) 373.894051ms ago: executing program 8 (id=1928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 300.652173ms ago: executing program 8 (id=1929): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x94000001) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) 215.359864ms ago: executing program 1 (id=1930): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x4292, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10003, 0x85}, 0x10100c, 0x7, 0xffff, 0x7, 0xfffffffffffffffd, 0x4, 0x8, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x60b5, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000853000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) 0s ago: executing program 2 (id=1931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): r permissive=1 [ 386.303244][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 386.401814][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 386.572714][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.579904][ T5597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.590601][T10560] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 386.630354][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 386.645341][T10560] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 386.867243][ T5597] Bluetooth: hci0: Frame reassembly failed (-84) [ 387.092701][T10606] Bluetooth: hci0: Frame reassembly failed (-84) [ 387.119463][T10606] loop8: detected capacity change from 0 to 2048 [ 387.528323][ T5601] IPVS: stop unused estimator thread 0... [ 387.549864][ T28] audit: type=1400 audit(1786507803.410:1367): avc: denied { write } for pid=10583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.597252][T10606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.610225][T10606] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.677804][T10610] loop9: detected capacity change from 0 to 512 [ 387.735871][T10610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.753492][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 387.755602][ T28] audit: type=1400 audit(1786507803.520:1368): avc: denied { write } for pid=10590 comm="syz.8.1560" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.803360][T10610] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1561: iget: bad i_size value: 38620345925642 [ 387.827651][T10610] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 387.832160][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 387.840261][T10610] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1561: couldn't read orphan inode 15 (err -117) [ 387.841458][ C1] EXT4-fs (loop9): initial error at time 1786507803: ext4_orphan_get:1399: inode 15 [ 387.869001][ C1] EXT4-fs (loop9): last error at time 1786507803: ext4_orphan_get:1399: inode 15 [ 387.877786][ T28] audit: type=1400 audit(1786507803.600:1369): avc: denied { write } for pid=10612 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.958881][T10610] loop9: lost filesystem error report for type 5 error -117 [ 387.963792][T10610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.002218][ T28] audit: type=1400 audit(1786507803.890:1370): avc: denied { write } for pid=10618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.059779][ T28] audit: type=1400 audit(1786507803.950:1371): avc: denied { write } for pid=10634 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.114560][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 388.130216][ T28] audit: type=1400 audit(1786507804.020:1372): avc: denied { write } for pid=10594 comm="syz.9.1561" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.298086][ T28] audit: type=1400 audit(1786507804.190:1373): avc: denied { ioctl } for pid=10632 comm="syz.2.1564" path="socket:[27799]" dev="sockfs" ino=27799 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 388.332916][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.471457][T10648] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 388.882870][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.889062][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 388.951424][ T28] audit: type=1400 audit(1786507804.840:1374): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.061472][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.380991][T10665] loop9: detected capacity change from 0 to 1764 [ 389.478640][T10671] loop8: detected capacity change from 0 to 2048 [ 389.620740][T10671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 389.734734][T10685] xt_hashlimit: size too large, truncated to 1048576 [ 389.760959][ T5601] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.844339][T10692] –: renamed from vxcan1 (while UP) [ 389.987638][T10695] Bluetooth: hci0: Frame reassembly failed (-84) [ 390.014707][T10695] loop9: detected capacity change from 0 to 2048 [ 390.083987][T10695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.096580][T10695] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.382490][T10699] netlink: 'syz.2.1581': attribute type 21 has an invalid length. [ 390.454500][T10699] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1581'. [ 390.800908][T10706] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 390.837187][T10706] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 390.956405][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 390.993138][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.719451][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 391.719466][ T28] audit: type=1400 audit(1786507807.610:1384): avc: denied { write } for pid=10666 comm="syz.8.1576" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.766396][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.768859][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 391.887636][ T28] audit: type=1400 audit(1786507807.780:1385): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.942405][ T28] audit: type=1400 audit(1786507807.810:1386): avc: denied { write } for pid=8618 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.966093][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.975871][ T28] audit: type=1400 audit(1786507807.810:1387): avc: denied { write } for pid=8618 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.999951][ T28] audit: type=1400 audit(1786507807.810:1388): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.066921][ T28] audit: type=1400 audit(1786507807.820:1389): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.090219][ T28] audit: type=1400 audit(1786507807.820:1390): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.112803][ T28] audit: type=1400 audit(1786507807.820:1391): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.146727][ T28] audit: type=1400 audit(1786507807.820:1392): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.188039][ T28] audit: type=1400 audit(1786507807.830:1393): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.366056][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 392.493171][T10735] loop8: detected capacity change from 0 to 2048 [ 392.641007][T10740] loop9: detected capacity change from 0 to 164 [ 392.705803][T10740] netlink: 'syz.9.1592': attribute type 21 has an invalid length. [ 392.761115][T10735] loop8: p3 < > p4 < > [ 392.770617][T10740] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1592'. [ 392.907923][T10735] loop8: partition table partially beyond EOD, truncated [ 392.929849][T10735] loop8: p3 start 4284289 is beyond EOD, truncated [ 393.001450][T10746] loop9: detected capacity change from 0 to 1024 [ 393.053197][T10746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.207893][T10754] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 393.246452][T10754] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 393.279409][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.320829][T10757] loop8: detected capacity change from 0 to 1764 [ 393.408198][ T5597] Bluetooth: hci0: Frame reassembly failed (-84) [ 393.650759][T10773] Bluetooth: hci0: Frame reassembly failed (-84) [ 393.666201][T10773] loop9: detected capacity change from 0 to 2048 [ 394.022243][T10776] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1603'. [ 394.194386][T10773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.207054][T10773] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.801949][T10787] netlink: 'syz.1.1607': attribute type 5 has an invalid length. [ 394.809836][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 394.861664][T10781] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 394.874414][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 394.924227][T10795] netlink: 'syz.2.1610': attribute type 21 has an invalid length. [ 394.956771][T10795] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1610'. [ 394.971659][T10791] loop8: detected capacity change from 0 to 2048 [ 395.079840][T10791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 395.161422][ T4030] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 395.186658][ T4030] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 162 with error 28 [ 395.204402][ T4030] EXT4-fs (loop8): This should not happen!! Data will be lost [ 395.204402][ T4030] [ 395.215715][ T4030] EXT4-fs (loop8): Total free blocks count 0 [ 395.221760][ T4030] EXT4-fs (loop8): Free/Dirty block details [ 395.227846][ T4030] EXT4-fs (loop8): free_blocks=2415919104 [ 395.233922][ T4030] EXT4-fs (loop8): dirty_blocks=304 [ 395.239156][ T4030] EXT4-fs (loop8): Block reservation details [ 395.245535][ T4030] EXT4-fs (loop8): i_reserved_data_blocks=21 [ 395.329599][ T4030] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 162 with max blocks 972 with error 28 [ 395.444120][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 395.450902][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 395.660278][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.162904][T10820] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 396.239118][T10826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=10826 comm=syz.2.1619 [ 396.258062][T10820] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.544261][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.553006][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.773375][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 397.773441][ T28] audit: type=1400 audit(1786507813.660:1410): avc: denied { write } for pid=10834 comm="syz.4.1622" name="control" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 397.863211][T10840] loop9: detected capacity change from 0 to 164 [ 398.018846][T10840] netlink: 'syz.9.1623': attribute type 21 has an invalid length. [ 398.191408][T10840] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1623'. [ 398.858153][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.079349][T10869] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.094637][T10869] loop8: detected capacity change from 0 to 2048 [ 399.264864][T10869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.277468][T10869] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.515712][ T28] audit: type=1400 audit(1786507815.410:1411): avc: denied { write } for pid=10849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.547016][ T28] audit: type=1400 audit(1786507815.440:1412): avc: denied { write } for pid=10850 comm="syz.8.1626" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 399.731145][ T28] audit: type=1400 audit(1786507815.620:1413): avc: denied { write } for pid=10878 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.931309][T10883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=10883 comm=syz.1.1630 [ 400.140384][T10885] loop9: detected capacity change from 0 to 2048 [ 400.157282][T10885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 400.294111][ T28] audit: type=1400 audit(1786507816.190:1414): avc: denied { write } for pid=10889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.408292][ T28] audit: type=1400 audit(1786507816.240:1415): avc: denied { write } for pid=10911 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.625418][ T28] audit: type=1400 audit(1786507816.450:1416): avc: denied { write } for pid=10914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.747834][ T28] audit: type=1400 audit(1786507816.490:1417): avc: denied { write } for pid=10931 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.798582][T10945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=10945 comm=syz.1.1642 [ 400.802176][ T28] audit: type=1326 audit(1786507816.670:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.1641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da59e0d9 code=0x7ffc0000 [ 400.857150][ T28] audit: type=1326 audit(1786507816.670:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.1641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da59e0d9 code=0x7ffc0000 [ 400.882582][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 400.888857][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 401.082787][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.329895][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 401.561949][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=10989 comm=syz.8.1654 [ 401.829733][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 402.053222][T11017] Bluetooth: hci0: Frame reassembly failed (-84) [ 402.068328][T11017] loop8: detected capacity change from 0 to 2048 [ 402.243468][T11017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.256049][T11017] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.566986][T11021] loop9: detected capacity change from 0 to 2048 [ 402.585298][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.611213][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.710540][T11021] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 402.797433][T11015] syz.9.1659 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 402.811682][T11015] CPU: 1 UID: 0 PID: 11015 Comm: syz.9.1659 Not tainted syzkaller #0 PREEMPT(lazy) [ 402.811790][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.811836][T11015] Call Trace: [ 402.811843][T11015] [ 402.811852][T11015] __dump_stack+0x1d/0x30 [ 402.811916][T11015] dump_stack_lvl+0x95/0xd0 [ 402.811938][T11015] dump_stack+0x15/0x1b [ 402.811958][T11015] dump_header+0x80/0x240 [ 402.812058][T11015] oom_kill_process+0x295/0x350 [ 402.812131][T11015] out_of_memory+0x981/0xbc0 [ 402.812177][T11015] try_charge_memcg+0x621/0xa00 [ 402.812213][T11015] __memcg_kmem_charge_page+0x199/0x3a0 [ 402.812323][T11015] __alloc_frozen_pages_noprof+0x18a/0x350 [ 402.812365][T11015] alloc_pages_mpol+0xa9/0x1d0 [ 402.812409][T11015] alloc_pages_noprof+0x8f/0x140 [ 402.812485][T11015] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 402.812534][T11015] __kvmalloc_node_noprof+0x3a0/0x590 [ 402.812623][T11015] ? futex_hash_allocate+0x1a3/0x940 [ 402.812645][T11015] ? futex_hash_allocate+0x1a3/0x940 [ 402.812667][T11015] ? futex_hash_allocate+0x1a3/0x940 [ 402.812692][T11015] futex_hash_allocate+0x1a3/0x940 [ 402.812797][T11015] ? cap_task_prctl+0x13f/0x6b0 [ 402.812845][T11015] futex_hash_prctl+0xd8/0xf0 [ 402.812904][T11015] __se_sys_prctl+0x4f4/0x13b0 [ 402.812943][T11015] __x64_sys_prctl+0x67/0x80 [ 402.812970][T11015] x64_sys_call+0x2533/0x3020 [ 402.812994][T11015] do_syscall_64+0x136/0x3c0 [ 402.813092][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.813120][T11015] RIP: 0033:0x7fbc4cabe0d9 [ 402.813137][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.813156][T11015] RSP: 002b:00007fbc4b517028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 402.813189][T11015] RAX: ffffffffffffffda RBX: 00007fbc4cd45fa0 RCX: 00007fbc4cabe0d9 [ 402.813273][T11015] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 402.813287][T11015] RBP: 00007fbc4cb55024 R08: 0000000000000000 R09: 0000000000000000 [ 402.813304][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.813322][T11015] R13: 00007fbc4cd46038 R14: 00007fbc4cd45fa0 R15: 00007ffecf9283d8 [ 402.813409][T11015] [ 402.813419][T11015] memory: usage 307200kB, limit 307200kB, failcnt 1695 [ 403.078802][T11015] memory+swap: usage 308352kB, limit 9007199254740988kB, failcnt 0 [ 403.104111][T11015] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 403.122932][T11015] Memory cgroup stats for /syz9: [ 403.123253][T11015] cache 12288 [ 403.150748][T11015] rss 4096 [ 403.171615][T11015] shmem 0 [ 403.241302][T11039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11039 comm=syz.1.1666 [ 403.258711][T11015] mapped_file 0 [ 403.262775][T11015] dirty 0 [ 403.266092][T11015] writeback 0 [ 403.278019][T11015] workingset_refault_anon 242 [ 403.292149][T11015] workingset_refault_file 262 [ 403.353871][T11015] swap 1179648 [ 403.363160][T11015] swapcached 6340608 [ 403.374736][T11015] pgpgin 188407 [ 403.384584][T11015] pgpgout 188402 [ 403.398614][T11015] pgfault 89608 [ 403.410008][T11015] pgmajfault 142 [ 403.426371][T11015] inactive_anon 4096 [ 403.438993][T11015] active_anon 0 [ 403.449714][T11015] inactive_file 0 [ 403.460680][T11015] active_file 12288 [ 403.478482][T11015] unevictable 0 [ 403.490711][T11015] hierarchical_memory_limit 314572800 [ 403.517243][T11015] hierarchical_memsw_limit 9223372036854771712 [ 403.545871][T11015] total_cache 12288 [ 403.557712][T11015] total_rss 4096 [ 403.571562][T11015] total_shmem 0 [ 403.582478][T11015] total_mapped_file 0 [ 403.596577][T11015] total_dirty 0 [ 403.610571][T11015] total_writeback 0 [ 403.621743][T11015] total_workingset_refault_anon 242 [ 403.641411][T11015] total_workingset_refault_file 262 [ 403.666673][T11015] total_swap 1179648 [ 403.680844][T11015] total_swapcached 6340608 [ 403.695821][T11015] total_pgpgin 188407 [ 403.707453][T11015] total_pgpgout 188402 [ 403.713972][T11015] total_pgfault 89608 [ 403.718068][T11015] total_pgmajfault 142 [ 403.722156][T11015] total_inactive_anon 4096 [ 403.726663][T11015] total_active_anon 0 [ 403.730665][T11015] total_inactive_file 0 [ 403.734832][T11015] total_active_file 12288 [ 403.739223][T11015] total_unevictable 0 [ 403.743224][T11015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1659,pid=11014,uid=0 [ 403.758006][T11015] Memory cgroup out of memory: Killed process 11014 (syz.9.1659) total-vm:94188kB, anon-rss:1244kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 403.834246][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 403.844603][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 403.850729][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 403.937052][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 403.937070][ T28] audit: type=1400 audit(1786507819.830:1498): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.990864][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.035057][ T28] audit: type=1400 audit(1786507819.860:1499): avc: denied { write } for pid=8319 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.069782][T11067] FAULT_INJECTION: forcing a failure. [ 404.069782][T11067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.110844][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.9.1676 Not tainted syzkaller #0 PREEMPT(lazy) [ 404.110874][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.110893][T11067] Call Trace: [ 404.110902][T11067] [ 404.110987][T11067] __dump_stack+0x1d/0x30 [ 404.111012][T11067] dump_stack_lvl+0x95/0xd0 [ 404.111034][T11067] dump_stack+0x15/0x1b [ 404.111059][T11067] should_fail_ex+0x25e/0x270 [ 404.111137][T11067] should_fail+0xb/0x20 [ 404.111288][T11067] should_fail_usercopy+0x1a/0x20 [ 404.111330][T11067] _copy_to_user+0x20/0xa0 [ 404.111359][T11067] simple_read_from_buffer+0xb5/0x130 [ 404.111396][T11067] proc_fail_nth_read+0x10e/0x150 [ 404.111427][T11067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.111455][T11067] vfs_read+0x18e/0x7c0 [ 404.111479][T11067] ? __rcu_read_unlock+0x4e/0x70 [ 404.111530][T11067] ? __fget_files+0x184/0x1c0 [ 404.111629][T11067] ? mutex_lock+0x57/0x90 [ 404.111660][T11067] ksys_read+0xdc/0x1a0 [ 404.111715][T11067] __x64_sys_read+0x40/0x50 [ 404.111736][T11067] x64_sys_call+0x2886/0x3020 [ 404.111838][T11067] do_syscall_64+0x136/0x3c0 [ 404.111905][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.111933][T11067] RIP: 0033:0x7fbc4ca7e90e [ 404.111950][T11067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.111975][T11067] RSP: 002b:00007fbc4b516fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.112073][T11067] RAX: ffffffffffffffda RBX: 00007fbc4b5176c0 RCX: 00007fbc4ca7e90e [ 404.112096][T11067] RDX: 000000000000000f RSI: 00007fbc4b5170a0 RDI: 0000000000000005 [ 404.112111][T11067] RBP: 00007fbc4b517090 R08: 0000000000000000 R09: 0000000000000000 [ 404.112128][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.112145][T11067] R13: 00007fbc4cd46038 R14: 00007fbc4cd45fa0 R15: 00007ffecf9283d8 [ 404.112172][T11067] [ 404.269980][ T28] audit: type=1400 audit(1786507819.860:1500): avc: denied { write } for pid=8319 comm="syz-executor" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.364829][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.434182][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.462958][T11073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11073 comm=syz.9.1679 [ 404.518503][ T28] audit: type=1400 audit(1786507819.860:1501): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.617104][ T28] audit: type=1400 audit(1786507819.860:1502): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.672277][T11075] loop9: detected capacity change from 0 to 512 [ 404.690648][ T28] audit: type=1400 audit(1786507819.870:1503): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.712505][ T28] audit: type=1400 audit(1786507819.870:1504): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.734450][ T28] audit: type=1400 audit(1786507819.870:1505): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.736735][T11075] EXT4-fs: Ignoring removed bh option [ 404.768736][ T28] audit: type=1400 audit(1786507819.870:1506): avc: denied { write } for pid=8319 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.869306][T11075] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 404.952525][T11075] EXT4-fs (loop9): 1 truncate cleaned up [ 404.959098][T11075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.998579][T11075] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 405.217029][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.241244][T11099] netlink: 'syz.8.1674': attribute type 8 has an invalid length. [ 405.400110][ T4055] Bluetooth: hci0: Frame reassembly failed (-84) [ 405.558966][T11116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1690'. [ 405.712229][T11120] Bluetooth: hci0: Frame reassembly failed (-84) [ 405.727794][T11120] loop9: detected capacity change from 0 to 2048 [ 405.820378][T11120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.833084][T11120] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.849468][ T28] audit: type=1400 audit(1786507821.740:1507): avc: denied { write } for pid=11104 comm="syz.9.1685" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.170394][T11129] loop8: detected capacity change from 0 to 256 [ 406.585454][T11135] FAULT_INJECTION: forcing a failure. [ 406.585454][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 406.625662][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.1.1695 Not tainted syzkaller #0 PREEMPT(lazy) [ 406.625773][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.625787][T11135] Call Trace: [ 406.625797][T11135] [ 406.625807][T11135] __dump_stack+0x1d/0x30 [ 406.625893][T11135] dump_stack_lvl+0x95/0xd0 [ 406.626020][T11135] dump_stack+0x15/0x1b [ 406.626039][T11135] should_fail_ex+0x25e/0x270 [ 406.626094][T11135] should_failslab+0x8c/0xb0 [ 406.626119][T11135] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 406.626143][T11135] ? do_getname+0x2e/0x1c0 [ 406.626229][T11135] ? do_getname+0x2e/0x1c0 [ 406.626261][T11135] do_getname+0x2e/0x1c0 [ 406.626294][T11135] __se_sys_renameat2+0x38/0x1c0 [ 406.626407][T11135] __x64_sys_renameat2+0x67/0x80 [ 406.626480][T11135] x64_sys_call+0x2a12/0x3020 [ 406.626511][T11135] do_syscall_64+0x136/0x3c0 [ 406.626554][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.626580][T11135] RIP: 0033:0x7feb69e2e0d9 [ 406.626607][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.626633][T11135] RSP: 002b:00007feb68887028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 406.626661][T11135] RAX: ffffffffffffffda RBX: 00007feb6a0b5fa0 RCX: 00007feb69e2e0d9 [ 406.626747][T11135] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 406.626765][T11135] RBP: 00007feb68887090 R08: 0000000000000006 R09: 0000000000000000 [ 406.626830][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.626957][T11135] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 406.626985][T11135] [ 406.844119][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.865034][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.876355][T11139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.913787][T11139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.942954][T11144] netlink: 'syz.4.1698': attribute type 21 has an invalid length. [ 406.957449][T11144] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1698'. [ 407.025506][T11150] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1701'. [ 407.392786][T11160] loop8: detected capacity change from 0 to 2048 [ 407.450220][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.458823][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.468546][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 407.502168][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 407.780646][T11163] FAULT_INJECTION: forcing a failure. [ 407.780646][T11163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.870614][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.903830][T11163] CPU: 1 UID: 0 PID: 11163 Comm: syz.2.1705 Not tainted syzkaller #0 PREEMPT(lazy) [ 407.903858][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.903876][T11163] Call Trace: [ 407.903885][T11163] [ 407.903959][T11163] __dump_stack+0x1d/0x30 [ 407.903983][T11163] dump_stack_lvl+0x95/0xd0 [ 407.904006][T11163] dump_stack+0x15/0x1b [ 407.904106][T11163] should_fail_ex+0x25e/0x270 [ 407.904164][T11163] should_fail+0xb/0x20 [ 407.904195][T11163] should_fail_usercopy+0x1a/0x20 [ 407.904281][T11163] _copy_from_user+0x1c/0xb0 [ 407.904308][T11163] ___sys_sendmsg+0xc1/0x1e0 [ 407.904343][T11163] __x64_sys_sendmsg+0xd4/0x160 [ 407.904368][T11163] x64_sys_call+0x194c/0x3020 [ 407.904479][T11163] do_syscall_64+0x136/0x3c0 [ 407.904548][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.904579][T11163] RIP: 0033:0x7fe393f7e0d9 [ 407.904639][T11163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.904676][T11163] RSP: 002b:00007fe3929d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.904701][T11163] RAX: ffffffffffffffda RBX: 00007fe394205fa0 RCX: 00007fe393f7e0d9 [ 407.904717][T11163] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 407.904730][T11163] RBP: 00007fe3929d7090 R08: 0000000000000000 R09: 0000000000000000 [ 407.904826][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.904843][T11163] R13: 00007fe394206038 R14: 00007fe394205fa0 R15: 00007fff2fea34f8 [ 407.904870][T11163] [ 408.577916][T11168] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 408.730514][T11168] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 409.356309][T11170] FAULT_INJECTION: forcing a failure. [ 409.356309][T11170] name failslab, interval 1, probability 0, space 0, times 0 [ 409.432808][T11170] CPU: 0 UID: 0 PID: 11170 Comm: syz.1.1709 Not tainted syzkaller #0 PREEMPT(lazy) [ 409.432913][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.432931][T11170] Call Trace: [ 409.432941][T11170] [ 409.432952][T11170] __dump_stack+0x1d/0x30 [ 409.432986][T11170] dump_stack_lvl+0x95/0xd0 [ 409.433012][T11170] dump_stack+0x15/0x1b [ 409.433039][T11170] should_fail_ex+0x25e/0x270 [ 409.433076][T11170] ? rxrpc_lookup_local+0x2a0/0xca0 [ 409.433193][T11170] should_failslab+0x8c/0xb0 [ 409.433230][T11170] __kmalloc_cache_noprof+0x7b/0x3d0 [ 409.433386][T11170] ? rxrpc_lookup_local+0x2a0/0xca0 [ 409.433434][T11170] rxrpc_lookup_local+0x2a0/0xca0 [ 409.433482][T11170] ? selinux_socket_sendmsg+0x2e2/0x410 [ 409.433547][T11170] ? lock_sock_nested+0x84/0x110 [ 409.433623][T11170] rxrpc_sendmsg+0x2e2/0x580 [ 409.433668][T11170] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 409.433709][T11170] ____sys_sendmsg+0x532/0x580 [ 409.433754][T11170] ___sys_sendmsg+0x195/0x1e0 [ 409.433838][T11170] __x64_sys_sendmsg+0xd4/0x160 [ 409.433869][T11170] x64_sys_call+0x194c/0x3020 [ 409.433900][T11170] do_syscall_64+0x136/0x3c0 [ 409.433999][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.434029][T11170] RIP: 0033:0x7feb69e2e0d9 [ 409.434047][T11170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.434065][T11170] RSP: 002b:00007feb68887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.434086][T11170] RAX: ffffffffffffffda RBX: 00007feb6a0b5fa0 RCX: 00007feb69e2e0d9 [ 409.434106][T11170] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 409.434145][T11170] RBP: 00007feb68887090 R08: 0000000000000000 R09: 0000000000000000 [ 409.434163][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.434180][T11170] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 409.434279][T11170] [ 409.682945][T11172] loop9: detected capacity change from 0 to 256 [ 409.778897][T11158] syz.4.1704 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 409.922466][T11158] CPU: 0 UID: 0 PID: 11158 Comm: syz.4.1704 Not tainted syzkaller #0 PREEMPT(lazy) [ 409.922558][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.922576][T11158] Call Trace: [ 409.922586][T11158] [ 409.922607][T11158] __dump_stack+0x1d/0x30 [ 409.922692][T11158] dump_stack_lvl+0x95/0xd0 [ 409.922722][T11158] dump_stack+0x15/0x1b [ 409.922831][T11158] dump_header+0x80/0x240 [ 409.922866][T11158] oom_kill_process+0x295/0x350 [ 409.922905][T11158] out_of_memory+0x981/0xbc0 [ 409.922941][T11158] try_charge_memcg+0x621/0xa00 [ 409.922984][T11158] __memcg_kmem_charge_page+0x199/0x3a0 [ 409.923028][T11158] __alloc_frozen_pages_noprof+0x18a/0x350 [ 409.923074][T11158] alloc_pages_mpol+0xa9/0x1d0 [ 409.923166][T11158] alloc_pages_noprof+0x8f/0x140 [ 409.923209][T11158] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 409.923286][T11158] __kvmalloc_node_noprof+0x3a0/0x590 [ 409.923323][T11158] ? futex_hash_allocate+0x1a3/0x940 [ 409.923361][T11158] ? futex_hash_allocate+0x1a3/0x940 [ 409.923390][T11158] ? futex_hash_allocate+0x1a3/0x940 [ 409.923430][T11158] futex_hash_allocate+0x1a3/0x940 [ 409.923521][T11158] ? cap_task_prctl+0x13f/0x6b0 [ 409.923572][T11158] futex_hash_prctl+0xd8/0xf0 [ 409.923606][T11158] __se_sys_prctl+0x4f4/0x13b0 [ 409.923710][T11158] __x64_sys_prctl+0x67/0x80 [ 409.923797][T11158] x64_sys_call+0x2533/0x3020 [ 409.923821][T11158] do_syscall_64+0x136/0x3c0 [ 409.923894][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.923924][T11158] RIP: 0033:0x7f63da59e0d9 [ 409.923945][T11158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.923966][T11158] RSP: 002b:00007f63d8ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 409.923986][T11158] RAX: ffffffffffffffda RBX: 00007f63da825fa0 RCX: 00007f63da59e0d9 [ 409.924069][T11158] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 409.924082][T11158] RBP: 00007f63da635024 R08: 0000000000000000 R09: 0000000000000000 [ 409.924095][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.924111][T11158] R13: 00007f63da826038 R14: 00007f63da825fa0 R15: 00007ffcf9c75878 [ 409.924166][T11158] [ 410.266524][T11158] memory: usage 234636kB, limit 307200kB, failcnt 6689 [ 410.339153][T11158] memory+swap: usage 152080kB, limit 9007199254740988kB, failcnt 0 [ 410.347697][T11158] kmem: usage 145036kB, limit 9007199254740988kB, failcnt 0 [ 410.370305][T11158] Memory cgroup stats for /syz4: [ 410.370779][T11158] cache 1032192 [ 410.388833][T11182] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1712'. [ 410.406650][T11158] rss 12288 [ 410.444606][T11158] shmem 524288 [ 410.448250][T11158] mapped_file 573440 [ 410.458382][T11158] dirty 0 [ 410.463085][T11158] writeback 0 [ 410.468007][T11158] workingset_refault_anon 536 [ 410.474576][T11158] workingset_refault_file 3489 [ 410.481055][T11158] swap 167936 [ 410.503842][T11158] swapcached 60399616 [ 410.520360][T11158] pgpgin 215504 [ 410.533959][T11158] pgpgout 215246 [ 410.546298][T11158] pgfault 156360 [ 410.559709][T11158] pgmajfault 377 [ 410.579728][T11158] inactive_anon 0 [ 410.585446][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.600082][T11158] active_anon 540672 [ 410.609030][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.610860][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.618952][T11158] inactive_file 503808 [ 410.643257][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.645132][T11158] active_file 4096 [ 410.666384][T11158] unevictable 0 [ 410.669909][T11158] hierarchical_memory_limit 314572800 [ 410.688637][T11158] hierarchical_memsw_limit 9223372036854771712 [ 410.695125][T11158] total_cache 1032192 [ 410.700638][T11158] total_rss 12288 [ 410.710721][T11158] total_shmem 524288 [ 410.716510][T11158] total_mapped_file 573440 [ 410.725360][T11158] total_dirty 0 [ 410.733675][T11158] total_writeback 0 [ 410.738832][T11158] total_workingset_refault_anon 536 [ 410.744439][T11158] total_workingset_refault_file 3489 [ 410.749966][T11158] total_swap 167936 [ 410.754072][T11158] total_swapcached 60399616 [ 410.758704][T11158] total_pgpgin 215504 [ 410.762870][T11158] total_pgpgout 215246 [ 410.767052][T11158] total_pgfault 156361 [ 410.771179][T11158] total_pgmajfault 377 [ 410.775689][T11158] total_inactive_anon 0 [ 410.779887][T11158] total_active_anon 540672 [ 410.807582][T11158] total_inactive_file 503808 [ 410.812308][T11158] total_active_file 4096 [ 410.829663][T11158] total_unevictable 0 [ 410.839135][T11158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1704,pid=11157,uid=0 [ 410.865544][T11158] Memory cgroup out of memory: Killed process 11158 (syz.4.1704) total-vm:94320kB, anon-rss:1256kB, file-rss:22164kB, shmem-rss:512kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 411.184007][T11204] loop9: detected capacity change from 0 to 256 [ 411.367285][T11209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1724'. [ 411.522482][T11200] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1721: No space for directory leaf checksum. Please run e2fsck -D. [ 411.546305][T11200] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1721: checksumming directory block 0 [ 411.546419][T11200] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 411.546485][T11200] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1721: No space for directory leaf checksum. Please run e2fsck -D. [ 411.546535][T11200] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1721: checksumming directory block 0 [ 411.546691][T11200] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 411.608548][T11200] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1721: No space for directory leaf checksum. Please run e2fsck -D. [ 411.635802][T11200] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1721: checksumming directory block 0 [ 411.648249][T11200] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 411.658905][T11200] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1721: No space for directory leaf checksum. Please run e2fsck -D. [ 411.674507][T11200] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1721: checksumming directory block 0 [ 411.686922][T11200] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 411.696494][T11200] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 411.998710][T11225] FAULT_INJECTION: forcing a failure. [ 411.998710][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 412.011505][T11225] CPU: 0 UID: 0 PID: 11225 Comm: syz.8.1729 Not tainted syzkaller #0 PREEMPT(lazy) [ 412.011536][T11225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.011560][T11225] Call Trace: [ 412.011568][T11225] [ 412.011578][T11225] __dump_stack+0x1d/0x30 [ 412.011607][T11225] dump_stack_lvl+0x95/0xd0 [ 412.011628][T11225] dump_stack+0x15/0x1b [ 412.011648][T11225] should_fail_ex+0x25e/0x270 [ 412.011683][T11225] should_failslab+0x8c/0xb0 [ 412.011713][T11225] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 412.011805][T11225] ? dup_task_struct+0x5a/0x6a0 [ 412.011825][T11225] ? dup_task_struct+0x5a/0x6a0 [ 412.011912][T11225] dup_task_struct+0x5a/0x6a0 [ 412.012007][T11225] copy_process+0x5a0/0x2310 [ 412.012026][T11225] ? kstrtoull+0x111/0x140 [ 412.012054][T11225] ? kstrtouint_from_user+0xa8/0xf0 [ 412.012140][T11225] ? __rcu_read_unlock+0x4e/0x70 [ 412.012177][T11225] kernel_clone+0x1c0/0x5f0 [ 412.012211][T11225] __x64_sys_clone+0x143/0x180 [ 412.012277][T11225] x64_sys_call+0x1222/0x3020 [ 412.012343][T11225] do_syscall_64+0x136/0x3c0 [ 412.012373][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.012476][T11225] RIP: 0033:0x7fad20c1e0d9 [ 412.012505][T11225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.012538][T11225] RSP: 002b:00007fad1f676fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 412.012561][T11225] RAX: ffffffffffffffda RBX: 00007fad20ea5fa0 RCX: 00007fad20c1e0d9 [ 412.012574][T11225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006314e000 [ 412.012657][T11225] RBP: 00007fad1f677090 R08: 0000000000000000 R09: 0000000000000000 [ 412.012669][T11225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 412.012681][T11225] R13: 00007fad20ea6038 R14: 00007fad20ea5fa0 R15: 00007ffc4808e6a8 [ 412.012700][T11225] [ 412.297835][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.318390][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.400552][T11234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.444434][ T5601] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.446993][T11234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.685152][T11219] syz.1.1728 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 412.744269][T11241] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.760076][T11241] loop9: detected capacity change from 0 to 2048 [ 412.847348][T11241] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.859950][T11241] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.873985][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 412.874011][ T28] audit: type=1400 audit(1786507828.770:1517): avc: denied { write } for pid=11235 comm="syz.9.1734" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.955985][T11240] loop8: detected capacity change from 0 to 512 [ 412.984809][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.1.1728 Not tainted syzkaller #0 PREEMPT(lazy) [ 412.984852][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.984870][T11219] Call Trace: [ 412.984878][T11219] [ 412.984888][T11219] __dump_stack+0x1d/0x30 [ 412.984921][T11219] dump_stack_lvl+0x95/0xd0 [ 412.985011][T11219] dump_stack+0x15/0x1b [ 412.985037][T11219] dump_header+0x80/0x240 [ 412.985067][T11219] oom_kill_process+0x295/0x350 [ 412.985123][T11219] out_of_memory+0x981/0xbc0 [ 412.985178][T11219] try_charge_memcg+0x621/0xa00 [ 412.985206][T11219] charge_memcg+0x6d/0x120 [ 412.985238][T11219] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 412.985342][T11219] swap_cache_alloc_folio+0x47b/0x5e0 [ 412.985437][T11219] swap_cluster_readahead+0x3d2/0x460 [ 412.985484][T11219] swapin_readahead+0xd8/0x8a0 [ 412.985571][T11219] ? _raw_spin_unlock+0x9/0x30 [ 412.985604][T11219] ? swap_put_entries_cluster+0x49c/0x4c0 [ 412.985728][T11219] ? __entry_text_end+0xf1c8/0x1020f9 [ 412.985761][T11219] ? __rcu_read_unlock+0x4e/0x70 [ 412.985790][T11219] ? swap_cache_get_folio+0x1f7/0x200 [ 412.985836][T11219] do_swap_page+0x2a2/0x1ec0 [ 412.985923][T11219] ? __css_rstat_updated+0xbb/0x280 [ 412.985960][T11219] ? __rcu_read_lock+0x36/0x50 [ 412.985992][T11219] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 412.986039][T11219] handle_mm_fault+0xb3c/0x2da0 [ 412.986159][T11219] do_user_addr_fault+0x634/0x1060 [ 412.986198][T11219] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 412.986234][T11219] ? trace_page_fault_user+0x1f/0xa0 [ 412.986330][T11219] exc_page_fault+0x62/0xa0 [ 412.986362][T11219] asm_exc_page_fault+0x26/0x30 [ 412.986384][T11219] RIP: 0033:0x7feb69cfb96f [ 412.986411][T11219] Code: b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 56 c4 3b 00 85 c0 0f 8e 53 fd ff ff e8 2d 7f fe ff 49 39 c4 73 88 48 8d 1d 31 a6 3b 00 <83> 3d 36 c4 3b 00 00 48 8d ab 00 1e 00 00 0f 8e 2e fd ff ff 66 66 [ 412.986430][T11219] RSP: 002b:00007ffd0b8a5340 EFLAGS: 00010283 [ 412.986448][T11219] RAX: 0000000000064be4 RBX: 00007feb6a0b5fa0 RCX: 0000000000064960 [ 412.986465][T11219] RDX: 0000000000000284 RSI: 00007ffd0b8a5320 RDI: 0000000000000001 [ 412.986483][T11219] RBP: 00007feb6a0b7da0 R08: 000000002668e869 R09: 3fffffffffffffff [ 412.986499][T11219] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000064ba5 [ 412.986570][T11219] R13: 00007feb6a0b618c R14: 0000000000064931 R15: 00007feb6a0b6180 [ 412.986619][T11219] [ 413.245859][T11219] memory: usage 307200kB, limit 307200kB, failcnt 13513 [ 413.268119][T11240] EXT4-fs: Ignoring removed bh option [ 413.282225][T11240] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 413.293052][T11219] memory+swap: usage 287536kB, limit 9007199254740988kB, failcnt 0 [ 413.302763][T11245] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1735'. [ 413.313706][T11240] EXT4-fs (loop8): 1 truncate cleaned up [ 413.319409][T11219] kmem: usage 268916kB, limit 9007199254740988kB, failcnt 0 [ 413.339903][T11240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.362177][T11219] Memory cgroup stats for /syz1: [ 413.362665][T11219] cache 0 [ 413.370636][T11219] rss 0 [ 413.373570][T11219] shmem 0 [ 413.376530][T11219] mapped_file 0 [ 413.380062][T11219] dirty 0 [ 413.383089][T11219] writeback 0 [ 413.386408][T11219] workingset_refault_anon 1054 [ 413.391267][T11219] workingset_refault_file 8087 [ 413.396295][T11219] swap 14475264 [ 413.399811][T11219] swapcached 34529280 [ 413.403955][T11219] pgpgin 231233 [ 413.407496][T11219] pgpgout 231233 [ 413.411331][T11219] pgfault 166822 [ 413.414998][T11219] pgmajfault 711 [ 413.418634][T11219] inactive_anon 0 [ 413.422393][T11219] active_anon 0 [ 413.425883][T11219] inactive_file 0 [ 413.429683][T11219] active_file 0 [ 413.433276][T11219] unevictable 0 [ 413.434239][T11229] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 413.436772][T11219] hierarchical_memory_limit 314572800 [ 413.436827][T11219] hierarchical_memsw_limit 9223372036854771712 [ 413.436839][T11219] total_cache 0 [ 413.436849][T11219] total_rss 0 [ 413.436858][T11219] total_shmem 0 [ 413.436939][T11219] total_mapped_file 0 [ 413.436949][T11219] total_dirty 0 [ 413.436958][T11219] total_writeback 0 [ 413.436969][T11219] total_workingset_refault_anon 1054 [ 413.436980][T11219] total_workingset_refault_file 8087 [ 413.436996][T11219] total_swap 14475264 [ 413.437011][T11219] total_swapcached 34529280 [ 413.437022][T11219] total_pgpgin 231233 [ 413.437033][T11219] total_pgpgout 231233 [ 413.437043][T11219] total_pgfault 166824 [ 413.437053][T11219] total_pgmajfault 711 [ 413.437064][T11219] total_inactive_anon 0 [ 413.437075][T11219] total_active_anon 0 [ 413.437085][T11219] total_inactive_file 0 [ 413.437114][T11219] total_active_file 0 [ 413.437177][T11219] total_unevictable 0 [ 413.437188][T11219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1728,pid=11219,uid=0 [ 413.437308][T11219] Memory cgroup out of memory: Killed process 11219 (syz.1.1728) total-vm:94320kB, anon-rss:1236kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 413.899528][T11262] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1738: No space for directory leaf checksum. Please run e2fsck -D. [ 413.934551][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.956184][T11262] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1738: checksumming directory block 0 [ 413.983991][T11264] loop8: detected capacity change from 0 to 164 [ 414.003155][T11264] netlink: 'syz.8.1740': attribute type 21 has an invalid length. [ 414.020103][T11264] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1740'. [ 414.053011][T11262] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 414.100979][T11265] loop8: detected capacity change from 0 to 1024 [ 414.111088][T11262] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1738: No space for directory leaf checksum. Please run e2fsck -D. [ 414.151117][T11265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.188617][T11262] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1738: checksumming directory block 0 [ 414.210085][T11262] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 414.223548][T11262] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1738: No space for directory leaf checksum. Please run e2fsck -D. [ 414.239480][T11262] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1738: checksumming directory block 0 [ 414.251931][T11262] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 414.262534][T11262] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1738: No space for directory leaf checksum. Please run e2fsck -D. [ 414.264315][ T28] audit: type=1400 audit(1786507830.100:1518): avc: denied { write } for pid=11263 comm="syz.8.1740" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.278689][T11262] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1738: checksumming directory block 0 [ 414.327430][T11262] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 414.337086][T11262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 414.425093][T11273] netlink: 'syz.1.1742': attribute type 21 has an invalid length. [ 414.533715][T11273] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1742'. [ 414.545260][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 414.551332][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 414.625183][ T28] audit: type=1400 audit(1786507830.520:1519): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.662775][T11279] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 414.670034][ T28] audit: type=1400 audit(1786507830.550:1520): avc: denied { write } for pid=8618 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.693093][ T28] audit: type=1400 audit(1786507830.550:1521): avc: denied { write } for pid=8618 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.715459][ T28] audit: type=1400 audit(1786507830.550:1522): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.715851][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 414.751860][ T28] audit: type=1400 audit(1786507830.550:1523): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.780985][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.793081][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.801365][ T28] audit: type=1400 audit(1786507830.550:1524): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.801393][ T8618] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.801454][ T28] audit: type=1400 audit(1786507830.650:1525): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.801483][ T28] audit: type=1400 audit(1786507830.650:1526): avc: denied { write } for pid=8618 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.894146][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.951089][T11290] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1747'. [ 415.362471][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 415.391625][T11297] loop8: detected capacity change from 0 to 512 [ 415.406185][T11297] EXT4-fs: Ignoring removed bh option [ 415.445841][T11297] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 415.451004][T11304] FAULT_INJECTION: forcing a failure. [ 415.451004][T11304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.468272][T11304] CPU: 1 UID: 0 PID: 11304 Comm: syz.4.1752 Not tainted syzkaller #0 PREEMPT(lazy) [ 415.468308][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.468323][T11304] Call Trace: [ 415.468331][T11304] [ 415.468340][T11304] __dump_stack+0x1d/0x30 [ 415.468487][T11304] dump_stack_lvl+0x95/0xd0 [ 415.468510][T11304] dump_stack+0x15/0x1b [ 415.468530][T11304] should_fail_ex+0x25e/0x270 [ 415.468567][T11304] should_fail+0xb/0x20 [ 415.468649][T11304] should_fail_usercopy+0x1a/0x20 [ 415.468696][T11304] _copy_to_user+0x20/0xa0 [ 415.468719][T11304] simple_read_from_buffer+0xb5/0x130 [ 415.468826][T11304] proc_fail_nth_read+0x10e/0x150 [ 415.468858][T11304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.468883][T11304] vfs_read+0x18e/0x7c0 [ 415.468902][T11304] ? __rcu_read_unlock+0x4e/0x70 [ 415.468936][T11304] ? __fget_files+0x184/0x1c0 [ 415.469000][T11304] ? mutex_lock+0x57/0x90 [ 415.469032][T11304] ksys_read+0xdc/0x1a0 [ 415.469064][T11304] __x64_sys_read+0x40/0x50 [ 415.469084][T11304] x64_sys_call+0x2886/0x3020 [ 415.469109][T11304] do_syscall_64+0x136/0x3c0 [ 415.469184][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.469215][T11304] RIP: 0033:0x7f63da55e90e [ 415.469237][T11304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.469263][T11304] RSP: 002b:00007f63d8ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.469291][T11304] RAX: ffffffffffffffda RBX: 00007f63d8ff76c0 RCX: 00007f63da55e90e [ 415.469344][T11304] RDX: 000000000000000f RSI: 00007f63d8ff70a0 RDI: 0000000000000006 [ 415.469409][T11304] RBP: 00007f63d8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 415.469422][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.469439][T11304] R13: 00007f63da826038 R14: 00007f63da825fa0 R15: 00007ffcf9c75878 [ 415.469463][T11304] [ 415.470933][T11297] EXT4-fs (loop8): 1 truncate cleaned up [ 415.673296][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 415.673325][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.673338][ T3303] Call Trace: [ 415.673348][ T3303] [ 415.673359][ T3303] __dump_stack+0x1d/0x30 [ 415.673426][ T3303] dump_stack_lvl+0x95/0xd0 [ 415.673513][ T3303] dump_stack+0x15/0x1b [ 415.673533][ T3303] dump_header+0x80/0x240 [ 415.673610][ T3303] oom_kill_process+0x295/0x350 [ 415.673761][ T3303] out_of_memory+0x981/0xbc0 [ 415.673797][ T3303] try_charge_memcg+0x621/0xa00 [ 415.673828][ T3303] charge_memcg+0x6d/0x120 [ 415.673938][ T3303] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 415.673978][ T3303] swap_cache_alloc_folio+0x47b/0x5e0 [ 415.674090][ T3303] swap_cluster_readahead+0x3d2/0x460 [ 415.674241][ T3303] swapin_readahead+0xd8/0x8a0 [ 415.674290][ T3303] ? tick_program_event+0x79/0xc0 [ 415.674325][ T3303] ? _raw_spin_unlock+0x9/0x30 [ 415.674406][ T3303] ? __rcu_read_unlock+0x4e/0x70 [ 415.674442][ T3303] ? swap_cache_get_folio+0x1f7/0x200 [ 415.674481][ T3303] do_swap_page+0x2a2/0x1ec0 [ 415.674585][ T3303] ? __schedule+0x799/0xd10 [ 415.674608][ T3303] ? __rcu_read_lock+0x36/0x50 [ 415.674636][ T3303] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 415.674751][ T3303] handle_mm_fault+0xb3c/0x2da0 [ 415.674814][ T3303] do_user_addr_fault+0x634/0x1060 [ 415.674855][ T3303] ? trace_page_fault_user+0x1f/0xa0 [ 415.674887][ T3303] exc_page_fault+0x62/0xa0 [ 415.674913][ T3303] asm_exc_page_fault+0x26/0x30 [ 415.674962][ T3303] RIP: 0033:0x7fe393f39257 [ 415.674985][ T3303] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 415.675006][ T3303] RSP: 002b:00007fff2fea37f0 EFLAGS: 00010202 [ 415.675024][ T3303] RAX: 0000000000000000 RBX: 00005555823e1500 RCX: 00007fe393f39257 [ 415.675043][ T3303] RDX: 00007fff2fea3830 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.675061][ T3303] RBP: 00007fff2fea389c R08: 0000000000000000 R09: 0000000000000000 [ 415.675157][ T3303] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 415.675173][ T3303] R13: 00000000000927c0 R14: 0000000000065541 R15: 00007fff2fea38f0 [ 415.675193][ T3303] [ 415.675225][ T3303] memory: usage 256224kB, limit 307200kB, failcnt 14822 [ 415.727324][T11297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.909006][ T3303] memory+swap: usage 296404kB, limit 9007199254740988kB, failcnt 0 [ 415.965458][ T3303] kmem: usage 278948kB, limit 9007199254740988kB, failcnt 0 [ 416.005251][ T3303] Memory cgroup stats for /syz2: [ 416.005460][ T3303] cache 1703936 [ 416.041387][T11295] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 416.069939][ T3303] rss 69632 [ 416.078229][ T5601] Bluetooth: hci0: Frame reassembly failed (-84) [ 416.084989][T11310] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1753: No space for directory leaf checksum. Please run e2fsck -D. [ 416.089891][ T3303] shmem 1703936 [ 416.151310][ T3303] mapped_file 0 [ 416.173680][ T3303] dirty 0 [ 416.177649][ T3303] writeback 0 [ 416.181166][ T3303] workingset_refault_anon 1327 [ 416.192214][ T3303] workingset_refault_file 1775 [ 416.197065][ T3303] swap 7839744 [ 416.200518][ T3303] swapcached 47689728 [ 416.204992][ T3303] pgpgin 441270 [ 416.208580][ T3303] pgpgout 440836 [ 416.212450][ T3303] pgfault 388520 [ 416.216138][ T3303] pgmajfault 881 [ 416.219794][ T3303] inactive_anon 0 [ 416.223739][ T3303] active_anon 1765376 [ 416.227899][ T3303] inactive_file 0 [ 416.231600][ T3303] active_file 0 [ 416.235888][ T3303] unevictable 0 [ 416.239538][ T3303] hierarchical_memory_limit 314572800 [ 416.245439][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 416.251823][ T3303] total_cache 1703936 [ 416.297596][ T3303] total_rss 69632 [ 416.324380][T11310] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1753: checksumming directory block 0 [ 416.340888][ T3303] total_shmem 1703936 [ 416.356920][T11310] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 416.379095][T11322] Bluetooth: hci0: Frame reassembly failed (-84) [ 416.494897][T11310] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1753: No space for directory leaf checksum. Please run e2fsck -D. [ 416.549752][ T3303] total_mapped_file 0 [ 416.606098][ T3303] total_dirty 0 [ 416.646570][T11310] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1753: checksumming directory block 0 [ 416.667423][ T3303] total_writeback 0 [ 416.723494][ T3303] total_workingset_refault_anon 1327 [ 416.752294][T11310] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 416.766529][T11327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1757'. [ 416.793579][ T3303] total_workingset_refault_file 1775 [ 416.820018][ T3303] total_swap 7839744 [ 416.852054][T11310] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1753: No space for directory leaf checksum. Please run e2fsck -D. [ 416.876277][ T3303] total_swapcached 47689728 [ 416.883699][ T3303] total_pgpgin 441270 [ 416.889636][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.891754][ T3303] total_pgpgout 440836 [ 416.923069][T11310] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1753: checksumming directory block 0 [ 416.943670][ T3303] total_pgfault 388520 [ 416.957024][ T3303] total_pgmajfault 881 [ 416.970094][ T3303] total_inactive_anon 0 [ 416.977660][T11331] loop8: detected capacity change from 0 to 164 [ 416.987008][ T3303] total_active_anon 1765376 [ 416.995999][ T3303] total_inactive_file 0 [ 416.997920][T11310] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 417.005822][ T3303] total_active_file 0 [ 417.010723][T11310] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.1753: No space for directory leaf checksum. Please run e2fsck -D. [ 417.029626][ T3303] total_unevictable 0 [ 417.029904][T11310] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.4.1753: checksumming directory block 0 [ 417.048367][T11310] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 417.062551][T11331] netlink: 'syz.8.1758': attribute type 21 has an invalid length. [ 417.071043][T11310] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 417.072016][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 417.087254][T11333] FAULT_INJECTION: forcing a failure. [ 417.087254][T11333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.111998][T11331] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1758'. [ 417.125657][ T3303] ,cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1748,pid=11287,uid=0 [ 417.142285][T11331] loop8: detected capacity change from 0 to 1024 [ 417.153658][T11335] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1760'. [ 417.154428][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.1.1759 Not tainted syzkaller #0 PREEMPT(lazy) [ 417.154559][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.154617][T11333] Call Trace: [ 417.154638][T11333] [ 417.154661][T11333] __dump_stack+0x1d/0x30 [ 417.154740][T11333] dump_stack_lvl+0x95/0xd0 [ 417.154806][T11333] dump_stack+0x15/0x1b [ 417.154957][T11333] should_fail_ex+0x25e/0x270 [ 417.155066][T11333] should_fail+0xb/0x20 [ 417.155149][T11333] should_fail_usercopy+0x1a/0x20 [ 417.155364][T11333] _copy_to_user+0x20/0xa0 [ 417.155437][T11333] simple_read_from_buffer+0xb5/0x130 [ 417.155586][T11333] proc_fail_nth_read+0x10e/0x150 [ 417.155663][T11333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.155740][T11333] vfs_read+0x18e/0x7c0 [ 417.155798][T11333] ? __rcu_read_unlock+0x4e/0x70 [ 417.155927][T11333] ? __fget_files+0x184/0x1c0 [ 417.156001][T11333] ? mutex_lock+0x57/0x90 [ 417.156081][T11333] ksys_read+0xdc/0x1a0 [ 417.156150][T11333] __x64_sys_read+0x40/0x50 [ 417.156211][T11333] x64_sys_call+0x2886/0x3020 [ 417.156307][T11333] do_syscall_64+0x136/0x3c0 [ 417.156408][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.156555][T11333] RIP: 0033:0x7feb69dee90e [ 417.156621][T11333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.156709][T11333] RSP: 002b:00007feb68886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.156776][T11333] RAX: ffffffffffffffda RBX: 00007feb688876c0 RCX: 00007feb69dee90e [ 417.156825][T11333] RDX: 000000000000000f RSI: 00007feb688870a0 RDI: 0000000000000004 [ 417.156861][T11333] RBP: 00007feb68887090 R08: 0000000000000000 R09: 0000000000000000 [ 417.156968][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.156997][T11333] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 417.157116][T11333] [ 417.157182][ T3303] Memory cgroup out of memory: OOM victim 11287 (syz.2.1748) is already exiting. Skip killing the task [ 417.398717][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.409060][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.448004][T11331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.715062][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.724043][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.809687][ T3499] IPVS: starting estimator thread 0... [ 417.912302][T11353] IPVS: using max 2256 ests per chain, 112800 per kthread [ 418.092339][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 418.098518][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.661167][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.104629][T11371] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1771'. [ 419.143098][T11365] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1770: No space for directory leaf checksum. Please run e2fsck -D. [ 419.245642][T11365] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1770: checksumming directory block 0 [ 419.298707][T11373] 9p: Bad value for 'rfdno' [ 419.363107][T11365] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 419.478580][T11365] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1770: No space for directory leaf checksum. Please run e2fsck -D. [ 419.602209][T11365] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1770: checksumming directory block 0 [ 419.679850][T11365] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 419.691732][T11365] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1770: No space for directory leaf checksum. Please run e2fsck -D. [ 419.707356][T11365] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1770: checksumming directory block 0 [ 419.771260][T11365] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 419.787268][T11365] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1770: No space for directory leaf checksum. Please run e2fsck -D. [ 419.808352][T11365] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1770: checksumming directory block 0 [ 419.820589][T11365] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 419.829995][T11365] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 419.878558][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.887066][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.039899][T11392] loop8: detected capacity change from 0 to 164 [ 420.048677][T11392] netlink: 'syz.8.1779': attribute type 21 has an invalid length. [ 420.065683][T11392] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1779'. [ 420.432042][T11392] loop8: detected capacity change from 0 to 1024 [ 420.541401][T11392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.704014][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 420.704087][ T28] audit: type=1400 audit(1786507836.560:1529): avc: denied { write } for pid=11391 comm="syz.8.1779" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.803320][ T28] audit: type=1400 audit(1786507836.690:1530): avc: denied { write } for pid=11391 comm="syz.8.1779" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.888788][ T5597] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.051143][T11403] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.094677][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.273274][T11413] FAULT_INJECTION: forcing a failure. [ 421.273274][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 421.296922][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.1.1785 Not tainted syzkaller #0 PREEMPT(lazy) [ 421.296953][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.296971][T11413] Call Trace: [ 421.296979][T11413] [ 421.296989][T11413] __dump_stack+0x1d/0x30 [ 421.297022][T11413] dump_stack_lvl+0x95/0xd0 [ 421.297123][T11413] dump_stack+0x15/0x1b [ 421.297146][T11413] should_fail_ex+0x25e/0x270 [ 421.297180][T11413] should_failslab+0x8c/0xb0 [ 421.297210][T11413] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 421.297241][T11413] ? alloc_empty_file+0x70/0x1e0 [ 421.297313][T11413] ? alloc_empty_file+0x70/0x1e0 [ 421.297348][T11413] alloc_empty_file+0x70/0x1e0 [ 421.297379][T11413] path_openat+0x54/0x2000 [ 421.297432][T11413] ? _parse_integer+0x27/0x40 [ 421.297517][T11413] ? kstrtoull+0x111/0x140 [ 421.297554][T11413] ? kstrtouint+0x76/0xc0 [ 421.297643][T11413] do_file_open+0x16c/0x290 [ 421.297695][T11413] do_sys_openat2+0xa0/0x130 [ 421.297734][T11413] __x64_sys_openat+0xf2/0x120 [ 421.297818][T11413] x64_sys_call+0x1e39/0x3020 [ 421.297849][T11413] do_syscall_64+0x136/0x3c0 [ 421.297924][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.297947][T11413] RIP: 0033:0x7feb69e2e0d9 [ 421.297968][T11413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.297993][T11413] RSP: 002b:00007feb68887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.298075][T11413] RAX: ffffffffffffffda RBX: 00007feb6a0b5fa0 RCX: 00007feb69e2e0d9 [ 421.298095][T11413] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 421.298111][T11413] RBP: 00007feb68887090 R08: 0000000000000000 R09: 0000000000000000 [ 421.298124][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.298209][T11413] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 421.298235][T11413] [ 421.598270][T11421] FAULT_INJECTION: forcing a failure. [ 421.598270][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.620828][ T28] audit: type=1400 audit(1786507837.510:1531): avc: denied { write } for pid=11416 comm="syz.4.1787" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 421.646370][T11417] 06νžé [ 421.676135][T11421] CPU: 1 UID: 0 PID: 11421 Comm: syz.2.1789 Not tainted syzkaller #0 PREEMPT(lazy) [ 421.676173][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.676270][T11421] Call Trace: [ 421.676279][T11421] [ 421.676290][T11421] __dump_stack+0x1d/0x30 [ 421.676318][T11421] dump_stack_lvl+0x95/0xd0 [ 421.676342][T11421] dump_stack+0x15/0x1b [ 421.676404][T11421] should_fail_ex+0x25e/0x270 [ 421.676474][T11421] should_fail+0xb/0x20 [ 421.676509][T11421] should_fail_usercopy+0x1a/0x20 [ 421.676542][T11421] _copy_to_user+0x20/0xa0 [ 421.676568][T11421] simple_read_from_buffer+0xb5/0x130 [ 421.676648][T11421] proc_fail_nth_read+0x10e/0x150 [ 421.676673][T11421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.676710][T11421] vfs_read+0x18e/0x7c0 [ 421.676732][T11421] ? __rcu_read_unlock+0x4e/0x70 [ 421.676762][T11421] ? __fget_files+0x184/0x1c0 [ 421.676827][T11421] ? mutex_lock+0x57/0x90 [ 421.676858][T11421] ksys_read+0xdc/0x1a0 [ 421.676901][T11421] __x64_sys_read+0x40/0x50 [ 421.676921][T11421] x64_sys_call+0x2886/0x3020 [ 421.676948][T11421] do_syscall_64+0x136/0x3c0 [ 421.676989][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.677017][T11421] RIP: 0033:0x7fe393f3e90e [ 421.677063][T11421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.677096][T11421] RSP: 002b:00007fe3929d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.677124][T11421] RAX: ffffffffffffffda RBX: 00007fe3929d76c0 RCX: 00007fe393f3e90e [ 421.677144][T11421] RDX: 000000000000000f RSI: 00007fe3929d70a0 RDI: 0000000000000004 [ 421.677161][T11421] RBP: 00007fe3929d7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.677241][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.677254][T11421] R13: 00007fe394206038 R14: 00007fe394205fa0 R15: 00007fff2fea34f8 [ 421.677333][T11421] [ 421.930736][T11426] FAULT_INJECTION: forcing a failure. [ 421.930736][T11426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.960273][T11426] CPU: 0 UID: 0 PID: 11426 Comm: syz.1.1793 Not tainted syzkaller #0 PREEMPT(lazy) [ 421.960322][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.960339][T11426] Call Trace: [ 421.960348][T11426] [ 421.960359][T11426] __dump_stack+0x1d/0x30 [ 421.960390][T11426] dump_stack_lvl+0x95/0xd0 [ 421.960418][T11426] dump_stack+0x15/0x1b [ 421.960546][T11426] should_fail_ex+0x25e/0x270 [ 421.960584][T11426] should_fail+0xb/0x20 [ 421.960649][T11426] should_fail_usercopy+0x1a/0x20 [ 421.960766][T11426] _copy_to_user+0x20/0xa0 [ 421.960874][T11426] simple_read_from_buffer+0xb5/0x130 [ 421.960908][T11426] proc_fail_nth_read+0x10e/0x150 [ 421.961004][T11426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.961033][T11426] vfs_read+0x18e/0x7c0 [ 421.961056][T11426] ? __rcu_read_unlock+0x4e/0x70 [ 421.961090][T11426] ? __fget_files+0x184/0x1c0 [ 421.961162][T11426] ? mutex_lock+0x57/0x90 [ 421.961270][T11426] ksys_read+0xdc/0x1a0 [ 421.961296][T11426] __x64_sys_read+0x40/0x50 [ 421.961321][T11426] x64_sys_call+0x2886/0x3020 [ 421.961353][T11426] do_syscall_64+0x136/0x3c0 [ 421.961396][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.961425][T11426] RIP: 0033:0x7feb69dee90e [ 421.961448][T11426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.961499][T11426] RSP: 002b:00007feb68886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.961524][T11426] RAX: ffffffffffffffda RBX: 00007feb688876c0 RCX: 00007feb69dee90e [ 421.961543][T11426] RDX: 000000000000000f RSI: 00007feb688870a0 RDI: 0000000000000005 [ 421.961560][T11426] RBP: 00007feb68887090 R08: 0000000000000000 R09: 0000000000000000 [ 421.961703][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.961720][T11426] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 421.961754][T11426] [ 421.963322][T11428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.191057][T11428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.204933][T11433] loop8: detected capacity change from 0 to 164 [ 422.229101][T11433] netlink: 'syz.8.1792': attribute type 21 has an invalid length. [ 422.237592][T11432] netlink: 'syz.1.1794': attribute type 298 has an invalid length. [ 422.259190][T11433] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1792'. [ 422.337975][T11433] loop8: detected capacity change from 0 to 1024 [ 422.519153][T11430] xt_connbytes: Forcing CT accounting to be enabled [ 422.548081][T11433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.626168][ T28] audit: type=1400 audit(1786507838.510:1532): avc: denied { write } for pid=11431 comm="syz.8.1792" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.669139][ T28] audit: type=1400 audit(1786507838.560:1533): avc: denied { write } for pid=11431 comm="syz.8.1792" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.746612][T11427] syz.2.1791 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 422.791092][T11427] CPU: 0 UID: 0 PID: 11427 Comm: syz.2.1791 Not tainted syzkaller #0 PREEMPT(lazy) [ 422.791133][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.791177][T11427] Call Trace: [ 422.791187][T11427] [ 422.791199][T11427] __dump_stack+0x1d/0x30 [ 422.791305][T11427] dump_stack_lvl+0x95/0xd0 [ 422.791334][T11427] dump_stack+0x15/0x1b [ 422.791359][T11427] dump_header+0x80/0x240 [ 422.791382][T11427] oom_kill_process+0x295/0x350 [ 422.791526][T11427] out_of_memory+0x981/0xbc0 [ 422.791605][T11427] try_charge_memcg+0x621/0xa00 [ 422.791696][T11427] charge_memcg+0x6d/0x120 [ 422.791807][T11427] __mem_cgroup_charge+0x28/0xb0 [ 422.791852][T11427] shmem_get_folio_gfp+0x49f/0xd90 [ 422.791954][T11427] shmem_write_begin+0xfc/0x1f0 [ 422.791985][T11427] generic_perform_write+0x186/0x490 [ 422.792019][T11427] shmem_file_write_iter+0xc5/0xf0 [ 422.792127][T11427] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 422.792171][T11427] vfs_write+0x57d/0x990 [ 422.792205][T11427] ksys_write+0xdc/0x1a0 [ 422.792228][T11427] __x64_sys_write+0x40/0x50 [ 422.792281][T11427] x64_sys_call+0x27e1/0x3020 [ 422.792352][T11427] do_syscall_64+0x136/0x3c0 [ 422.792387][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.792410][T11427] RIP: 0033:0x7fe393f7e0d9 [ 422.792459][T11427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.792486][T11427] RSP: 002b:00007fe3929b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.792510][T11427] RAX: ffffffffffffffda RBX: 00007fe394206090 RCX: 00007fe393f7e0d9 [ 422.792525][T11427] RDX: 00000000ffffff6a RSI: 0000200000000000 RDI: 0000000000000003 [ 422.792613][T11427] RBP: 00007fe394015024 R08: 0000000000000000 R09: 0000000000000000 [ 422.792626][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.792639][T11427] R13: 00007fe394206128 R14: 00007fe394206090 R15: 00007fff2fea34f8 [ 422.792665][T11427] [ 423.002182][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 423.008273][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.042491][T11427] memory: usage 218280kB, limit 307200kB, failcnt 16177 [ 423.065530][T11427] memory+swap: usage 208188kB, limit 9007199254740988kB, failcnt 0 [ 423.096416][T11427] kmem: usage 152596kB, limit 9007199254740988kB, failcnt 0 [ 423.115697][T11427] Memory cgroup stats for /syz2: [ 423.115978][T11427] cache 0 [ 423.140481][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.184959][T11427] rss 0 [ 423.207108][T11427] shmem 0 [ 423.217702][T11427] mapped_file 0 [ 423.262230][T11427] dirty 0 [ 423.266697][T11427] writeback 0 [ 423.270696][T11427] workingset_refault_anon 1395 [ 423.281087][T11427] workingset_refault_file 1775 [ 423.296821][T11427] swap 14958592 [ 423.305715][T11427] swapcached 62750720 [ 423.313765][T11427] pgpgin 447801 [ 423.320232][T11427] pgpgout 447801 [ 423.338848][T11427] pgfault 399599 [ 423.362347][T11427] pgmajfault 916 [ 423.387427][T11427] inactive_anon 0 [ 423.391120][T11427] active_anon 0 [ 423.394705][T11427] inactive_file 0 [ 423.398397][T11427] active_file 0 [ 423.402007][T11427] unevictable 0 [ 423.405623][T11427] hierarchical_memory_limit 314572800 [ 423.411756][T11427] hierarchical_memsw_limit 9223372036854771712 [ 423.418312][T11427] total_cache 0 [ 423.421803][T11427] total_rss 0 [ 423.427612][T11427] total_shmem 0 [ 423.438858][T11427] total_mapped_file 0 [ 423.448753][T11427] total_dirty 0 [ 423.457433][T11427] total_writeback 0 [ 423.505312][T11427] total_workingset_refault_anon 1395 [ 423.521914][T11427] total_workingset_refault_file 1775 [ 423.539383][T11427] total_swap 14958592 [ 423.550873][T11427] total_swapcached 62750720 [ 423.626112][T11427] total_pgpgin 447801 [ 423.660763][T11427] total_pgpgout 447801 [ 423.695571][T11427] total_pgfault 399599 [ 423.737280][T11427] total_pgmajfault 916 [ 423.737550][T11427] total_inactive_anon 0 [ 423.737601][T11427] total_active_anon 0 [ 423.738055][T11427] total_inactive_file 0 [ 423.738087][T11427] total_active_file 0 [ 423.738120][T11427] total_unevictable 0 [ 423.738152][T11427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1791,pid=11423,uid=0 [ 423.738452][T11427] Memory cgroup out of memory: Killed process 11423 (syz.2.1791) total-vm:94320kB, anon-rss:1240kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 425.115862][T11468] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.178399][T11468] device-mapper: ioctl: name not supplied when creating device [ 425.255187][T11454] loop8: detected capacity change from 0 to 2048 [ 425.256121][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.256439][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.551814][ T28] audit: type=1400 audit(1786507841.440:1534): avc: denied { read write } for pid=11471 comm="syz.9.1805" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 425.584625][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1805'. [ 425.612297][ T28] audit: type=1400 audit(1786507841.440:1535): avc: denied { open } for pid=11471 comm="syz.9.1805" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 425.665404][T11476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.665521][T11476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.739516][ T5597] Bluetooth: hci0: Frame reassembly failed (-84) [ 425.873812][T11482] netlink: 'syz.9.1809': attribute type 21 has an invalid length. [ 425.892328][T11482] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1809'. [ 426.007184][T11483] Bluetooth: hci0: Frame reassembly failed (-84) [ 426.679123][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.727966][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.875460][ T28] audit: type=1400 audit(1786507842.770:1536): avc: denied { create } for pid=11501 comm="syz.9.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 426.985878][ T28] audit: type=1400 audit(1786507842.880:1537): avc: denied { write } for pid=11501 comm="syz.9.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.295306][T11508] loop8: detected capacity change from 0 to 256 [ 427.663483][ T28] audit: type=1400 audit(1786507843.550:1538): avc: denied { create } for pid=11510 comm="syz.8.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.715951][T11497] syz.1.1814 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 427.761939][T11511] netlink: 'syz.8.1819': attribute type 1 has an invalid length. [ 427.764883][ T4753] Bluetooth: hci0: command 0x1003 tx timeout [ 427.770237][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 427.779171][T11497] CPU: 0 UID: 0 PID: 11497 Comm: syz.1.1814 Not tainted syzkaller #0 PREEMPT(lazy) [ 427.779259][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.779373][T11497] Call Trace: [ 427.779395][T11497] [ 427.779428][T11497] __dump_stack+0x1d/0x30 [ 427.779512][T11497] dump_stack_lvl+0x95/0xd0 [ 427.779591][T11497] dump_stack+0x15/0x1b [ 427.779731][T11497] dump_header+0x80/0x240 [ 427.779818][T11497] oom_kill_process+0x295/0x350 [ 427.779933][T11497] out_of_memory+0x981/0xbc0 [ 427.780083][T11497] try_charge_memcg+0x621/0xa00 [ 427.780170][T11497] ? __rcu_read_unlock+0x4e/0x70 [ 427.780320][T11497] __memcg_kmem_charge_page+0x199/0x3a0 [ 427.780425][T11497] __alloc_frozen_pages_noprof+0x18a/0x350 [ 427.780458][T11497] alloc_pages_mpol+0xa9/0x1d0 [ 427.780573][T11497] alloc_pages_noprof+0x8f/0x140 [ 427.780708][T11497] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 427.780839][T11497] __kvmalloc_node_noprof+0x3a0/0x590 [ 427.780950][T11497] ? futex_hash_allocate+0x1a3/0x940 [ 427.781043][T11497] ? futex_hash_allocate+0x1a3/0x940 [ 427.781187][T11497] ? futex_hash_allocate+0x1a3/0x940 [ 427.781263][T11497] futex_hash_allocate+0x1a3/0x940 [ 427.781344][T11497] ? cap_task_prctl+0x13f/0x6b0 [ 427.781518][T11497] futex_hash_prctl+0xd8/0xf0 [ 427.781580][T11497] __se_sys_prctl+0x4f4/0x13b0 [ 427.781675][T11497] __x64_sys_prctl+0x67/0x80 [ 427.781776][T11497] x64_sys_call+0x2533/0x3020 [ 427.781900][T11497] do_syscall_64+0x136/0x3c0 [ 427.782088][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.782194][T11497] RIP: 0033:0x7feb69e2e0d9 [ 427.782255][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.782321][T11497] RSP: 002b:00007feb68887028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 427.782397][T11497] RAX: ffffffffffffffda RBX: 00007feb6a0b5fa0 RCX: 00007feb69e2e0d9 [ 427.782487][T11497] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 427.782600][T11497] RBP: 00007feb69ec5024 R08: 0000000000000000 R09: 0000000000000000 [ 427.782688][T11497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.782809][T11497] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 427.782851][T11497] [ 427.803104][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1819'. [ 427.806387][T11497] memory: usage 307200kB, limit 307200kB, failcnt 15037 [ 427.865336][ T28] audit: type=1400 audit(1786507843.750:1539): avc: denied { ioctl } for pid=11516 comm="syz.9.1821" path="socket:[29634]" dev="sockfs" ino=29634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.866451][T11497] memory+swap: usage 320156kB, limit 9007199254740988kB, failcnt 0 [ 427.900937][ T28] audit: type=1400 audit(1786507843.780:1540): avc: denied { connect } for pid=11516 comm="syz.9.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.903497][T11497] kmem: usage 295060kB, limit 9007199254740988kB, failcnt 0 [ 427.936100][ T28] audit: type=1400 audit(1786507843.790:1541): avc: denied { write } for pid=11516 comm="syz.9.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.937069][T11497] Memory cgroup stats for /syz1: [ 428.165804][T11497] cache 0 [ 428.200976][T11497] rss 0 [ 428.213696][T11497] shmem 0 [ 428.227241][T11497] mapped_file 0 [ 428.242803][T11497] dirty 0 [ 428.254689][T11497] writeback 0 [ 428.285582][T11497] workingset_refault_anon 1138 [ 428.290785][T11497] workingset_refault_file 8089 [ 428.295717][T11497] swap 16994304 [ 428.299224][T11497] swapcached 51798016 [ 428.303264][T11497] pgpgin 242882 [ 428.306806][T11497] pgpgout 242880 [ 428.310417][T11497] pgfault 179712 [ 428.314224][T11497] pgmajfault 752 [ 428.317795][T11497] inactive_anon 4096 [ 428.321728][T11497] active_anon 4096 [ 428.325509][T11497] inactive_file 0 [ 428.329189][T11497] active_file 0 [ 428.332891][T11497] unevictable 0 [ 428.336409][T11497] hierarchical_memory_limit 314572800 [ 428.341811][T11497] hierarchical_memsw_limit 9223372036854771712 [ 428.349747][T11497] total_cache 0 [ 428.353375][T11497] total_rss 0 [ 428.409784][T11497] total_shmem 0 [ 428.439687][T11526] loop8: detected capacity change from 0 to 2048 [ 428.462945][T11497] total_mapped_file 0 [ 428.484476][T11497] total_dirty 0 [ 428.539586][T11497] total_writeback 0 [ 428.579857][T11497] total_workingset_refault_anon 1138 [ 428.626612][T11497] total_workingset_refault_file 8089 [ 428.633052][T11497] total_swap 16994304 [ 428.637461][T11497] total_swapcached 51798016 [ 428.644362][T11497] total_pgpgin 242882 [ 428.648519][T11497] total_pgpgout 242880 [ 428.652611][T11497] total_pgfault 179714 [ 428.656723][T11497] total_pgmajfault 752 [ 428.660859][T11497] total_inactive_anon 4096 [ 428.665390][T11497] total_active_anon 4096 [ 428.669763][T11497] total_inactive_file 0 [ 428.673974][T11497] total_active_file 0 [ 428.678041][T11497] total_unevictable 0 [ 428.682217][T11497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1814,pid=11496,uid=0 [ 428.703358][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.712610][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.829321][T11497] Memory cgroup out of memory: Killed process 11496 (syz.1.1814) total-vm:94320kB, anon-rss:1236kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 428.896599][T11531] netlink: 'syz.2.1825': attribute type 21 has an invalid length. [ 428.945410][T11531] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1825'. [ 429.304783][ T28] audit: type=1400 audit(1786507845.200:1542): avc: denied { bind } for pid=11530 comm="syz.2.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.451725][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.461192][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.847506][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.070302][T11567] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.486884][T11561] syz.1.1830 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 431.520827][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 431.534408][T11575] loop8: detected capacity change from 0 to 256 [ 431.643705][T11569] Bluetooth: hci1: Frame reassembly failed (-84) [ 431.644304][T11561] CPU: 1 UID: 0 PID: 11561 Comm: syz.1.1830 Not tainted syzkaller #0 PREEMPT(lazy) [ 431.644389][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.644439][T11561] Call Trace: [ 431.644460][T11561] [ 431.644542][T11561] __dump_stack+0x1d/0x30 [ 431.644699][T11561] dump_stack_lvl+0x95/0xd0 [ 431.644772][T11561] dump_stack+0x15/0x1b [ 431.644857][T11561] dump_header+0x80/0x240 [ 431.644931][T11561] oom_kill_process+0x295/0x350 [ 431.645059][T11561] out_of_memory+0x981/0xbc0 [ 431.645267][T11561] try_charge_memcg+0x621/0xa00 [ 431.645384][T11561] __memcg_kmem_charge_page+0x199/0x3a0 [ 431.645487][T11561] __alloc_frozen_pages_noprof+0x18a/0x350 [ 431.645684][T11561] alloc_pages_mpol+0xa9/0x1d0 [ 431.645782][T11561] alloc_pages_noprof+0x8f/0x140 [ 431.645898][T11561] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 431.646038][T11561] __kvmalloc_node_noprof+0x3a0/0x590 [ 431.646160][T11561] ? futex_hash_allocate+0x1a3/0x940 [ 431.646243][T11561] ? futex_hash_allocate+0x1a3/0x940 [ 431.646315][T11561] ? futex_hash_allocate+0x1a3/0x940 [ 431.646450][T11561] futex_hash_allocate+0x1a3/0x940 [ 431.646525][T11561] ? cap_task_prctl+0x13f/0x6b0 [ 431.646658][T11561] futex_hash_prctl+0xd8/0xf0 [ 431.646771][T11561] __se_sys_prctl+0x4f4/0x13b0 [ 431.646852][T11561] __x64_sys_prctl+0x67/0x80 [ 431.646935][T11561] x64_sys_call+0x2533/0x3020 [ 431.647029][T11561] do_syscall_64+0x136/0x3c0 [ 431.647190][T11561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.647330][T11561] RIP: 0033:0x7feb69e2e0d9 [ 431.647377][T11561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.647434][T11561] RSP: 002b:00007feb68866028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 431.647528][T11561] RAX: ffffffffffffffda RBX: 00007feb6a0b6090 RCX: 00007feb69e2e0d9 [ 431.647579][T11561] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 431.647621][T11561] RBP: 00007feb69ec5024 R08: 0000000000000000 R09: 0000000000000000 [ 431.647665][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.647715][T11561] R13: 00007feb6a0b6128 R14: 00007feb6a0b6090 R15: 00007ffd0b8a51d8 [ 431.647847][T11561] [ 431.871961][T11561] memory: usage 241680kB, limit 307200kB, failcnt 15133 [ 431.878992][T11561] memory+swap: usage 241696kB, limit 9007199254740988kB, failcnt 0 [ 431.887048][T11561] kmem: usage 232160kB, limit 9007199254740988kB, failcnt 0 [ 431.897770][T11561] Memory cgroup stats for /syz1: [ 431.898032][T11561] cache 0 [ 431.906274][T11561] rss 9543680 [ 431.909626][T11561] shmem 0 [ 431.938039][T11561] mapped_file 0 [ 431.966729][T11561] dirty 0 [ 431.973477][T11561] writeback 0 [ 431.994170][T11561] workingset_refault_anon 2465 [ 432.009803][T11579] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 432.022053][T11561] workingset_refault_file 8089 [ 432.050205][T11561] swap 16384 [ 432.053815][T11579] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 432.078929][T11561] swapcached 57167872 [ 432.089700][T11561] pgpgin 247702 [ 432.105891][T11561] pgpgout 245372 [ 432.141897][T11561] pgfault 185144 [ 432.192075][T11561] pgmajfault 945 [ 432.225545][T11561] inactive_anon 0 [ 432.249832][T11561] active_anon 4096 [ 432.271291][T11561] inactive_file 0 [ 432.291210][T11561] active_file 0 [ 432.311109][T11561] unevictable 9539584 [ 432.340945][T11561] hierarchical_memory_limit 314572800 [ 432.371642][T11561] hierarchical_memsw_limit 9223372036854771712 [ 432.401784][T11561] total_cache 0 [ 432.420192][T11561] total_rss 9543680 [ 432.441698][T11561] total_shmem 0 [ 432.468009][T11561] total_mapped_file 0 [ 432.480697][T11561] total_dirty 0 [ 432.491759][T11561] total_writeback 0 [ 432.501689][T11561] total_workingset_refault_anon 2465 [ 432.517561][T11561] total_workingset_refault_file 8089 [ 432.534995][T11561] total_swap 16384 [ 432.546205][T11561] total_swapcached 57167872 [ 432.569156][T11561] total_pgpgin 247702 [ 432.581540][T11561] total_pgpgout 245372 [ 432.597813][T11561] total_pgfault 185146 [ 432.615020][T11561] total_pgmajfault 945 [ 432.625159][T11561] total_inactive_anon 0 [ 432.643641][T11561] total_active_anon 4096 [ 432.648002][T11561] total_inactive_file 0 [ 432.667352][T11561] total_active_file 0 [ 432.676624][T11561] total_unevictable 9539584 [ 432.688154][T11561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1830,pid=11552,uid=0 [ 432.714522][T11561] Memory cgroup out of memory: Killed process 11561 (syz.1.1830) total-vm:94320kB, anon-rss:12940kB, file-rss:62472kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 432.848749][T11585] netlink: 'syz.4.1837': attribute type 21 has an invalid length. [ 432.883602][ T6228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.889863][T11585] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1837'. [ 432.984924][T11587] netlink: 'syz.9.1838': attribute type 21 has an invalid length. [ 433.023709][T11587] netlink: 120 bytes leftover after parsing attributes in process `syz.9.1838'. [ 433.156498][T11590] FAULT_INJECTION: forcing a failure. [ 433.156498][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.181843][T11590] CPU: 1 UID: 0 PID: 11590 Comm: syz.1.1839 Not tainted syzkaller #0 PREEMPT(lazy) [ 433.181890][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.181904][T11590] Call Trace: [ 433.181911][T11590] [ 433.181919][T11590] __dump_stack+0x1d/0x30 [ 433.181962][T11590] dump_stack_lvl+0x95/0xd0 [ 433.182049][T11590] dump_stack+0x15/0x1b [ 433.182075][T11590] should_fail_ex+0x25e/0x270 [ 433.182114][T11590] should_fail+0xb/0x20 [ 433.182174][T11590] should_fail_usercopy+0x1a/0x20 [ 433.182212][T11590] _copy_to_user+0x20/0xa0 [ 433.182239][T11590] simple_read_from_buffer+0xb5/0x130 [ 433.182278][T11590] proc_fail_nth_read+0x10e/0x150 [ 433.182307][T11590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.182422][T11590] vfs_read+0x18e/0x7c0 [ 433.182463][T11590] ? __rcu_read_unlock+0x4e/0x70 [ 433.182497][T11590] ? __fget_files+0x184/0x1c0 [ 433.182530][T11590] ? mutex_lock+0x57/0x90 [ 433.182560][T11590] ksys_read+0xdc/0x1a0 [ 433.182668][T11590] __x64_sys_read+0x40/0x50 [ 433.182694][T11590] x64_sys_call+0x2886/0x3020 [ 433.182726][T11590] do_syscall_64+0x136/0x3c0 [ 433.182855][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.182958][T11590] RIP: 0033:0x7feb69dee90e [ 433.182979][T11590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.183006][T11590] RSP: 002b:00007feb68886fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.183032][T11590] RAX: ffffffffffffffda RBX: 00007feb688876c0 RCX: 00007feb69dee90e [ 433.183052][T11590] RDX: 000000000000000f RSI: 00007feb688870a0 RDI: 0000000000000004 [ 433.183093][T11590] RBP: 00007feb68887090 R08: 0000000000000000 R09: 0000000000000000 [ 433.183155][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.183175][T11590] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 433.183200][T11590] [ 433.497127][ T28] audit: type=1326 audit(1786507849.380:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.523295][ T7240] Bluetooth: hci1: command 0x1003 tx timeout [ 433.530018][ T4753] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 433.579389][ T28] audit: type=1326 audit(1786507849.380:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.604941][ T28] audit: type=1326 audit(1786507849.380:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.681929][ T28] audit: type=1326 audit(1786507849.380:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.707488][ T28] audit: type=1326 audit(1786507849.380:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.722351][T11593] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1841: No space for directory leaf checksum. Please run e2fsck -D. [ 433.732970][ T28] audit: type=1326 audit(1786507849.380:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.733026][ T28] audit: type=1326 audit(1786507849.380:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.800099][T11593] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1841: checksumming directory block 0 [ 433.820642][ T3384] IPVS: starting estimator thread 0... [ 433.828668][ T4054] Bluetooth: hci0: Frame reassembly failed (-84) [ 433.840007][T11601] Bluetooth: hci0: Frame reassembly failed (-84) [ 433.840021][T11593] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 433.871705][T11601] device-mapper: ioctl: name not supplied when creating device [ 433.885287][ T28] audit: type=1326 audit(1786507849.380:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.896820][T11593] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1841: No space for directory leaf checksum. Please run e2fsck -D. [ 433.926524][T11605] loop8: detected capacity change from 0 to 256 [ 433.927121][T11602] IPVS: using max 1632 ests per chain, 81600 per kthread [ 433.933921][ T28] audit: type=1326 audit(1786507849.380:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 433.965588][T11593] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1841: checksumming directory block 0 [ 433.983985][T11593] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 434.005893][T11593] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1841: No space for directory leaf checksum. Please run e2fsck -D. [ 434.022935][ T28] audit: type=1326 audit(1786507849.380:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11594 comm="syz.8.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad20c1e0d9 code=0x7ffc0000 [ 434.085287][T11593] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1841: checksumming directory block 0 [ 434.124457][T11593] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 434.134933][T11593] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.1.1841: No space for directory leaf checksum. Please run e2fsck -D. [ 434.152293][T11593] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.1.1841: checksumming directory block 0 [ 434.172041][T11593] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 434.181615][T11593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 434.567118][T11620] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 434.623903][T11620] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 434.839347][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.847942][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.010435][T11630] loop8: detected capacity change from 0 to 164 [ 435.094536][T11630] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 435.700376][T11623] veth3: entered promiscuous mode [ 435.705492][T11623] veth3: entered allmulticast mode [ 435.842200][ T4753] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 435.845275][ T7240] Bluetooth: hci0: command 0x1003 tx timeout [ 435.887392][T11637] loop8: detected capacity change from 0 to 164 [ 436.047732][T11637] netlink: 'syz.8.1856': attribute type 21 has an invalid length. [ 436.123469][T11637] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1856'. [ 436.291534][T11637] loop8: detected capacity change from 0 to 1024 [ 436.371235][T11637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.542565][T11639] syzkaller0: entered promiscuous mode [ 436.590932][T11639] syzkaller0: entered allmulticast mode [ 436.776932][T11650] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.1858: No space for directory leaf checksum. Please run e2fsck -D. [ 436.843823][T11650] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.1858: checksumming directory block 0 [ 436.856040][T11650] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 436.869499][T11650] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.1858: No space for directory leaf checksum. Please run e2fsck -D. [ 436.886888][T11650] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.1858: checksumming directory block 0 [ 436.901567][T11650] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 436.939510][T11650] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.1858: No space for directory leaf checksum. Please run e2fsck -D. [ 436.957452][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.971774][T11650] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.1858: checksumming directory block 0 [ 436.984214][T11650] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 436.994868][T11650] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.9.1858: No space for directory leaf checksum. Please run e2fsck -D. [ 437.010583][T11650] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.9.1858: checksumming directory block 0 [ 437.035628][T11650] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 437.057024][T11650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 437.198293][T11661] loop8: detected capacity change from 0 to 512 [ 437.240435][T11661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 437.393848][T11661] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1861: iget: bad i_size value: 38620345925642 [ 437.415094][T11661] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 437.418071][T11661] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1861: couldn't read orphan inode 15 (err -117) [ 437.427468][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 437.427537][ C0] EXT4-fs (loop8): initial error at time 1786507853: ext4_orphan_get:1399: inode 15 [ 437.428076][ C0] EXT4-fs (loop8): last error at time 1786507853: ext4_orphan_get:1399: inode 15 [ 437.487582][T11661] loop8: lost filesystem error report for type 5 error -117 [ 437.508379][T11661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.757767][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.824710][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.027395][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.074722][T11680] Bluetooth: hci0: Frame reassembly failed (-84) [ 438.096474][T11680] device-mapper: ioctl: name not supplied when creating device [ 438.107215][T11676] FAULT_INJECTION: forcing a failure. [ 438.107215][T11676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.120830][T11676] CPU: 1 UID: 0 PID: 11676 Comm: syz.8.1864 Not tainted syzkaller #0 PREEMPT(lazy) [ 438.120864][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.120877][T11676] Call Trace: [ 438.120884][T11676] [ 438.120892][T11676] __dump_stack+0x1d/0x30 [ 438.120956][T11676] dump_stack_lvl+0x95/0xd0 [ 438.120977][T11676] dump_stack+0x15/0x1b [ 438.120997][T11676] should_fail_ex+0x25e/0x270 [ 438.121030][T11676] should_fail+0xb/0x20 [ 438.121097][T11676] should_fail_usercopy+0x1a/0x20 [ 438.121186][T11676] _copy_from_iter+0xcc/0xe70 [ 438.121228][T11676] ? __alloc_skb+0x511/0x6f0 [ 438.121260][T11676] ? __alloc_skb+0x205/0x6f0 [ 438.121300][T11676] netlink_sendmsg+0x4a4/0x6f0 [ 438.121334][T11676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.121364][T11676] ____sys_sendmsg+0x532/0x580 [ 438.121396][T11676] ___sys_sendmsg+0x195/0x1e0 [ 438.121429][T11676] __x64_sys_sendmsg+0xd4/0x160 [ 438.121489][T11676] x64_sys_call+0x194c/0x3020 [ 438.121514][T11676] do_syscall_64+0x136/0x3c0 [ 438.121631][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.121692][T11676] RIP: 0033:0x7fad20c1e0d9 [ 438.121714][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.121759][T11676] RSP: 002b:00007fad1f677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.121786][T11676] RAX: ffffffffffffffda RBX: 00007fad20ea5fa0 RCX: 00007fad20c1e0d9 [ 438.121836][T11676] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 438.121853][T11676] RBP: 00007fad1f677090 R08: 0000000000000000 R09: 0000000000000000 [ 438.121866][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.121881][T11676] R13: 00007fad20ea6038 R14: 00007fad20ea5fa0 R15: 00007ffc4808e6a8 [ 438.121907][T11676] [ 438.389100][T11687] loop8: detected capacity change from 0 to 1764 [ 438.421428][T11689] netlink: 'syz.4.1871': attribute type 21 has an invalid length. [ 438.431839][T11689] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1871'. [ 438.615306][T11694] loop8: detected capacity change from 0 to 164 [ 438.627102][T11694] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 438.644097][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1875'. [ 438.663001][T11696] ip6gre1: entered promiscuous mode [ 438.673684][T11696] ip6gre1: entered allmulticast mode [ 438.761319][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 438.761351][ T28] audit: type=1400 audit(1786507854.650:1583): avc: denied { sys_module } for pid=11697 comm="syz.9.1874" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 438.869332][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1874'. [ 439.054189][T11715] loop8: detected capacity change from 0 to 256 [ 439.243632][T11718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=11718 comm=syz.1.1880 [ 439.257062][T11718] FAULT_INJECTION: forcing a failure. [ 439.257062][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.275467][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.1.1880 Not tainted syzkaller #0 PREEMPT(lazy) [ 439.275504][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.275601][T11718] Call Trace: [ 439.275616][T11718] [ 439.275626][T11718] __dump_stack+0x1d/0x30 [ 439.275651][T11718] dump_stack_lvl+0x95/0xd0 [ 439.275743][T11718] dump_stack+0x15/0x1b [ 439.275763][T11718] should_fail_ex+0x25e/0x270 [ 439.275795][T11718] should_fail+0xb/0x20 [ 439.275883][T11718] should_fail_usercopy+0x1a/0x20 [ 439.275926][T11718] _copy_from_iter+0xcc/0xe70 [ 439.276031][T11718] ? __alloc_skb+0x511/0x6f0 [ 439.276123][T11718] ? __alloc_skb+0x205/0x6f0 [ 439.276156][T11718] netlink_sendmsg+0x4a4/0x6f0 [ 439.276239][T11718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.276333][T11718] __sys_sendto+0x411/0x470 [ 439.276379][T11718] __x64_sys_sendto+0x76/0x90 [ 439.276463][T11718] x64_sys_call+0x2d35/0x3020 [ 439.276490][T11718] do_syscall_64+0x136/0x3c0 [ 439.276550][T11718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.276573][T11718] RIP: 0033:0x7feb69e2e0d9 [ 439.276594][T11718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.276627][T11718] RSP: 002b:00007feb68887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 439.276791][T11718] RAX: ffffffffffffffda RBX: 00007feb6a0b5fa0 RCX: 00007feb69e2e0d9 [ 439.276809][T11718] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000003 [ 439.276827][T11718] RBP: 00007feb68887090 R08: 0000000000000000 R09: 0000000000000000 [ 439.276845][T11718] R10: 0000000020000090 R11: 0000000000000246 R12: 0000000000000001 [ 439.276900][T11718] R13: 00007feb6a0b6038 R14: 00007feb6a0b5fa0 R15: 00007ffd0b8a51d8 [ 439.276920][T11718] [ 440.102520][T11730] loop8: detected capacity change from 0 to 1764 [ 440.186459][ T7240] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 440.394260][ T28] audit: type=1400 audit(1786507856.290:1584): avc: denied { mounton } for pid=11732 comm="syz.4.1887" path="/133/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 440.476090][T11745] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1889'. [ 440.530243][ T28] audit: type=1400 audit(1786507856.420:1585): avc: denied { getopt } for pid=11746 comm="syz.4.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 440.565635][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.589136][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.797300][ T4054] Bluetooth: hci0: Frame reassembly failed (-84) [ 440.815059][T11757] Bluetooth: hci0: Frame reassembly failed (-84) [ 440.837660][T11757] device-mapper: ioctl: name not supplied when creating device [ 441.413814][T11769] loop8: detected capacity change from 0 to 1764 [ 441.585607][T11773] FAULT_INJECTION: forcing a failure. [ 441.585607][T11773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.633540][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.8.1898 Not tainted syzkaller #0 PREEMPT(lazy) [ 441.633565][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.633577][T11773] Call Trace: [ 441.633584][T11773] [ 441.633592][T11773] __dump_stack+0x1d/0x30 [ 441.633621][T11773] dump_stack_lvl+0x95/0xd0 [ 441.633671][T11773] dump_stack+0x15/0x1b [ 441.633689][T11773] should_fail_ex+0x25e/0x270 [ 441.633721][T11773] should_fail+0xb/0x20 [ 441.633753][T11773] should_fail_usercopy+0x1a/0x20 [ 441.633840][T11773] _copy_from_iter+0xcc/0xe70 [ 441.633882][T11773] ? __alloc_skb+0x511/0x6f0 [ 441.633949][T11773] ? __alloc_skb+0x205/0x6f0 [ 441.633982][T11773] netlink_sendmsg+0x4a4/0x6f0 [ 441.634014][T11773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.634070][T11773] ____sys_sendmsg+0x532/0x580 [ 441.634099][T11773] ___sys_sendmsg+0x195/0x1e0 [ 441.634174][T11773] __x64_sys_sendmsg+0xd4/0x160 [ 441.634236][T11773] x64_sys_call+0x194c/0x3020 [ 441.634268][T11773] do_syscall_64+0x136/0x3c0 [ 441.634308][T11773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.634338][T11773] RIP: 0033:0x7fad20c1e0d9 [ 441.634366][T11773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.634390][T11773] RSP: 002b:00007fad1f677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.634417][T11773] RAX: ffffffffffffffda RBX: 00007fad20ea5fa0 RCX: 00007fad20c1e0d9 [ 441.634458][T11773] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 441.634471][T11773] RBP: 00007fad1f677090 R08: 0000000000000000 R09: 0000000000000000 [ 441.634535][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.634552][T11773] R13: 00007fad20ea6038 R14: 00007fad20ea5fa0 R15: 00007ffc4808e6a8 [ 441.634614][T11773] [ 441.639450][T11780] FAULT_INJECTION: forcing a failure. [ 441.639450][T11780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.788332][T11783] loop8: detected capacity change from 0 to 164 [ 441.844597][T11780] CPU: 0 UID: 0 PID: 11780 Comm: syz.9.1901 Not tainted syzkaller #0 PREEMPT(lazy) [ 441.844681][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.844694][T11780] Call Trace: [ 441.844701][T11780] [ 441.844710][T11780] __dump_stack+0x1d/0x30 [ 441.844789][T11780] dump_stack_lvl+0x95/0xd0 [ 441.844812][T11780] dump_stack+0x15/0x1b [ 441.844852][T11780] should_fail_ex+0x25e/0x270 [ 441.844890][T11780] should_fail+0xb/0x20 [ 441.844967][T11780] should_fail_usercopy+0x1a/0x20 [ 441.845060][T11780] _copy_from_iter+0xcc/0xe70 [ 441.845095][T11780] ? __alloc_skb+0x511/0x6f0 [ 441.845130][T11780] ? __alloc_skb+0x205/0x6f0 [ 441.845191][T11780] netlink_sendmsg+0x4a4/0x6f0 [ 441.845229][T11780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.845257][T11780] ____sys_sendmsg+0x532/0x580 [ 441.845345][T11780] ___sys_sendmsg+0x195/0x1e0 [ 441.845387][T11780] __x64_sys_sendmsg+0xd4/0x160 [ 441.845434][T11780] x64_sys_call+0x194c/0x3020 [ 441.845459][T11780] do_syscall_64+0x136/0x3c0 [ 441.845498][T11780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.845534][T11780] RIP: 0033:0x7fbc4cabe0d9 [ 441.845551][T11780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.845569][T11780] RSP: 002b:00007fbc4b517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.845598][T11780] RAX: ffffffffffffffda RBX: 00007fbc4cd45fa0 RCX: 00007fbc4cabe0d9 [ 441.845616][T11780] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 441.845644][T11780] RBP: 00007fbc4b517090 R08: 0000000000000000 R09: 0000000000000000 [ 441.845662][T11780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.845678][T11780] R13: 00007fbc4cd46038 R14: 00007fbc4cd45fa0 R15: 00007ffecf9283d8 [ 441.845705][T11780] [ 442.070892][T11783] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 442.135539][ T4054] Bluetooth: hci1: Frame reassembly failed (-84) [ 442.352319][T11800] Bluetooth: hci1: Frame reassembly failed (-84) [ 442.457891][T11799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.523081][T11799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.803577][ T4753] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 442.904424][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.931837][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.169963][T11802] loop8: detected capacity change from 0 to 512 [ 443.273392][T11802] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 443.298029][T11802] System zones: 0-2, 18-18, 34-34 [ 443.348923][T11802] EXT4-fs (loop8): 1 orphan inode deleted [ 443.390529][T11802] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.423646][T11802] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.472051][ T28] audit: type=1400 audit(1786507859.360:1586): avc: denied { write } for pid=11801 comm="syz.8.1908" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.177461][ T6228] Bluetooth: hci1: command 0x1003 tx timeout [ 444.183703][ T7240] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 444.210741][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.595369][ T28] audit: type=1400 audit(1786507860.490:1587): avc: denied { execute } for pid=11846 comm="syz.8.1926" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 444.673718][ T28] audit: type=1400 audit(1786507860.510:1588): avc: denied { bind } for pid=11846 comm="syz.8.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 444.814986][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.842321][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.986754][T11858] loop8: detected capacity change from 0 to 2048 [ 445.046034][T11858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 445.462218][T11857] ================================================================== [ 445.470390][T11857] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 445.480280][T11857] [ 445.482625][T11857] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 445.490722][T11857] tick_do_update_jiffies64+0x113/0x1c0 [ 445.496311][T11857] tick_nohz_handler+0x88/0x380 [ 445.501198][T11857] __hrtimer_run_queues+0x1f8/0x510 [ 445.506447][T11857] hrtimer_interrupt+0x257/0x810 [ 445.511433][T11857] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 445.517367][T11857] sysvec_apic_timer_interrupt+0x6f/0x80 [ 445.523042][T11857] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.529076][T11857] __rmqueue_pcplist+0x7d/0xb30 [ 445.533976][T11857] get_page_from_freelist+0x733/0x19c0 [ 445.539488][T11857] __alloc_frozen_pages_noprof+0x161/0x350 [ 445.545325][T11857] alloc_pages_mpol+0xa9/0x1d0 [ 445.550120][T11857] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 445.556219][T11857] migrate_pages_batch+0x33f/0x1f90 [ 445.561443][T11857] migrate_pages+0x1073/0x1890 [ 445.566230][T11857] __se_sys_mbind+0xc9c/0xdd0 [ 445.570936][T11857] __x64_sys_mbind+0x78/0x90 [ 445.575552][T11857] x64_sys_call+0x2b72/0x3020 [ 445.580260][T11857] do_syscall_64+0x136/0x3c0 [ 445.584883][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.590811][T11857] [ 445.593148][T11857] read to 0xffffffff86c07a00 of 8 bytes by task 11857 on cpu 1: [ 445.600800][T11857] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 445.607095][T11857] count_shadow_nodes+0x6a/0x250 [ 445.612066][T11857] do_shrink_slab+0x61/0x650 [ 445.616683][T11857] shrink_slab+0x53b/0x8e0 [ 445.621120][T11857] shrink_node+0x6b8/0x1e30 [ 445.625645][T11857] do_try_to_free_pages+0x408/0xc90 [ 445.630870][T11857] try_to_free_mem_cgroup_pages+0x201/0x420 [ 445.636812][T11857] try_charge_memcg+0x375/0xa00 [ 445.641697][T11857] __memcg_kmem_charge_page+0x199/0x3a0 [ 445.647283][T11857] __alloc_frozen_pages_noprof+0x18a/0x350 [ 445.653128][T11857] alloc_pages_bulk_noprof+0x4c3/0x550 [ 445.658618][T11857] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 445.664982][T11857] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 445.670926][T11857] __kvmalloc_node_noprof+0x3a0/0x590 [ 445.676327][T11857] futex_hash_allocate+0x1a3/0x940 [ 445.681458][T11857] futex_hash_prctl+0xd8/0xf0 [ 445.686158][T11857] __se_sys_prctl+0x4f4/0x13b0 [ 445.690944][T11857] __x64_sys_prctl+0x67/0x80 [ 445.695563][T11857] x64_sys_call+0x2533/0x3020 [ 445.700354][T11857] do_syscall_64+0x136/0x3c0 [ 445.704985][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.710906][T11857] [ 445.713242][T11857] value changed: 0x0000000100003891 -> 0x0000000100003892 [ 445.720377][T11857] [ 445.722711][T11857] Reported by Kernel Concurrency Sanitizer on: [ 445.728879][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.8.1929 Not tainted syzkaller #0 PREEMPT(lazy) [ 445.738275][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.748363][T11857] ================================================================== [ 445.795793][ T5597] Bluetooth: hci0: Frame reassembly failed (-84) [ 445.916772][T11857] syz.8.1929 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 445.930945][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.8.1929 Not tainted syzkaller #0 PREEMPT(lazy) [ 445.930973][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.931001][T11857] Call Trace: [ 445.931008][T11857] [ 445.931024][T11857] __dump_stack+0x1d/0x30 [ 445.931058][T11857] dump_stack_lvl+0x95/0xd0 [ 445.931142][T11857] dump_stack+0x15/0x1b [ 445.931161][T11857] dump_header+0x80/0x240 [ 445.931191][T11857] oom_kill_process+0x295/0x350 [ 445.931238][T11857] out_of_memory+0x981/0xbc0 [ 445.931339][T11857] try_charge_memcg+0x621/0xa00 [ 445.931367][T11857] ? __rcu_read_unlock+0x4e/0x70 [ 445.931412][T11857] __memcg_kmem_charge_page+0x199/0x3a0 [ 445.931460][T11857] __alloc_frozen_pages_noprof+0x18a/0x350 [ 445.931493][T11857] alloc_pages_mpol+0xa9/0x1d0 [ 445.931529][T11857] alloc_pages_noprof+0x8f/0x140 [ 445.931627][T11857] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 445.931680][T11857] __kvmalloc_node_noprof+0x3a0/0x590 [ 445.931730][T11857] ? futex_hash_allocate+0x1a3/0x940 [ 445.931813][T11857] ? futex_hash_allocate+0x1a3/0x940 [ 445.931844][T11857] ? futex_hash_allocate+0x1a3/0x940 [ 445.931870][T11857] futex_hash_allocate+0x1a3/0x940 [ 445.931894][T11857] ? cap_task_prctl+0x13f/0x6b0 [ 445.931993][T11857] futex_hash_prctl+0xd8/0xf0 [ 445.932033][T11857] __se_sys_prctl+0x4f4/0x13b0 [ 445.932151][T11857] __x64_sys_prctl+0x67/0x80 [ 445.932187][T11857] x64_sys_call+0x2533/0x3020 [ 445.932214][T11857] do_syscall_64+0x136/0x3c0 [ 445.932303][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.932327][T11857] RIP: 0033:0x7fad20c1e0d9 [ 445.932345][T11857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.932366][T11857] RSP: 002b:00007fad1f677028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 445.932466][T11857] RAX: ffffffffffffffda RBX: 00007fad20ea5fa0 RCX: 00007fad20c1e0d9 [ 445.932523][T11857] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 445.932538][T11857] RBP: 00007fad20cb5024 R08: 0000000000000000 R09: 0000000000000000 [ 445.932551][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.932564][T11857] R13: 00007fad20ea6038 R14: 00007fad20ea5fa0 R15: 00007ffc4808e6a8 [ 445.932585][T11857] [ 445.932593][T11857] memory: usage 307200kB, limit 307200kB, failcnt 6812 [ 446.218348][T11871] Bluetooth: hci0: Frame reassembly failed (-84) [ 446.288352][T11857] memory+swap: usage 237680kB, limit 9007199254740988kB, failcnt 0 [ 446.364372][T11857] kmem: usage 206444kB, limit 9007199254740988kB, failcnt 0 [ 446.440561][T11857] Memory cgroup stats for /syz8: [ 446.449473][T11857] cache 8192 [ 446.496459][T11857] rss 77824 [ 446.516053][T11857] shmem 0 [ 446.536173][T11857] mapped_file 0 [ 446.593735][T11857] dirty 0 [ 446.633386][T11857] writeback 0 [ 446.670165][T11857] workingset_refault_anon 1806 [ 446.676533][T11857] workingset_refault_file 2665 [ 446.681361][T11857] swap 1171456 [ 446.684836][T11857] swapcached 42459136 [ 446.688829][T11857] pgpgin 212097 [ 446.692423][T11857] pgpgout 212074 [ 446.696050][T11857] pgfault 139861 [ 446.699631][T11857] pgmajfault 639 [ 446.703260][T11857] inactive_anon 77824 [ 446.707594][T11857] active_anon 8192 [ 446.711355][T11857] inactive_file 0 [ 446.715258][T11857] active_file 8192 [ 446.719082][T11857] unevictable 0 [ 446.723029][T11857] hierarchical_memory_limit 314572800 [ 446.728446][T11857] hierarchical_memsw_limit 9223372036854771712 [ 446.744347][T11857] total_cache 8192 [ 446.752254][T11857] total_rss 77824 [ 446.760111][T11857] total_shmem 0 [ 446.768362][T11857] total_mapped_file 0 [ 446.779459][T11857] total_dirty 0 [ 446.784621][T11817] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 446.784737][T11857] total_writeback 0 [ 446.784772][T11857] total_workingset_refault_anon 1806 [ 446.784782][T11857] total_workingset_refault_file 2665 [ 446.814425][T11857] total_swap 1171456 [ 446.818505][T11857] total_swapcached 42459136 [ 446.823691][T11857] total_pgpgin 212097 [ 446.823938][ T28] audit: type=1400 audit(1786507862.720:1589): avc: denied { write } for pid=11856 comm="syz.8.1929" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.827721][T11857] total_pgpgout 212074 [ 446.827735][T11857] total_pgfault 139861 [ 446.858495][T11857] total_pgmajfault 639 [ 446.862930][T11857] total_inactive_anon 77824 [ 446.867591][T11857] total_active_anon 8192 [ 446.869547][ T28] audit: type=1400 audit(1786507862.720:1590): avc: denied { create } for pid=11856 comm="syz.8.1929" name="my_config" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 446.873274][T11857] total_inactive_file 0 [ 446.896924][T11857] total_active_file 8192 [ 446.901208][T11857] total_unevictable 0 [ 446.905270][T11857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1929,pid=11856,uid=0 [ 446.920069][T11857] Memory cgroup out of memory: Killed process 11856 (syz.8.1929) total-vm:94320kB, anon-rss:1380kB, file-rss:22356kB, shmem-rss:8kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 446.972450][ T8319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 447.842186][ T7240] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 447.845335][ T6228] Bluetooth: hci0: command 0x1003 tx timeout