last executing test programs: 16m32.449193011s ago: executing program 32 (id=2265): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="9e"], 0x2c}], 0x1}, 0x0) r1 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r1, 0x0, 0xb, 0x1) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m32.201563198s ago: executing program 33 (id=4456): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x200000}, 0x10003, 0x27be, 0x0, 0x9, 0x8, 0x8000, 0x4, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4300, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6ee1c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x13, 0x0, &(0x7f0000000000)=0x56) sendmsg$sock(r2, 0x0, 0x24008899) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8c8, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000000), 0x4) unshare(0x44040200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e24, @remote}, 0x10) 6m53.316033999s ago: executing program 34 (id=4550): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e2202000003080000000000003800000001000000000000000000000000c129f2fb9d44d3fadbd5b73deb851651", @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) shmat(r5, &(0x7f0000be5000/0x7000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000580)="b76ff3eab37f3eda77e506d820c7fb486b2d4bd598e512305d2c0460a671140a8174615e1bca9f1c6eee919f059018f6b64882520eeb0e75c945d2436a4534f8c4f92bd8796b608c979a3f962aed7b7193e758dd4957b6f021db36a73668d14fec74b639abe0098cc3684f8f61826730a4b781309254d8076c0616e315faca8cfc82fce65e2fdcd5adb900c33c0527f9302d7b8da4b0c7b985e53c", 0x9b, 0x8, &(0x7f0000000640)={0xa, 0x4e20, 0x68c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x1, 0x9484, 0x2001, 0x402, 0x0, 0xd, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 4m50.333959812s ago: executing program 35 (id=4925): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@orlov}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpid}, {@nogrpid}, {@noauto_da_alloc}, {}]}, 0x3, 0x592, &(0x7f0000001340)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) 4m24.692237657s ago: executing program 36 (id=4962): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6a040000) 3m26.411311638s ago: executing program 37 (id=5164): perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) keyctl$session_to_parent(0x12) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x5, 0xf, 0xae, 0x0, 0x7, 0x84018, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x8, 0xfff, 0x8, 0x7fffffff, 0xd, 0xffff, 0x0, 0x7, 0x0, 0x800}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'lo\x00', {0x803}, 0x88}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x403, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200, 0x12314}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xfffffe38, 0x4, 0x80c20001000001}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001"], 0x84}}, 0x200088c2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m51.439517406s ago: executing program 1 (id=5273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x401, 0x7ab8}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000003f01f00040000007f1a0000010000002b9d28745bbe98bacfe92f90e3fd191077c7be9f4dfc73ddcf338b3d83a8a9682c983969826e66ba49b8119f33f7ff2f53067d04ac9088af361772b6935c7483983670c03d9c2d52499b69fd599d5ab454f1e159b6f61536ec6fcfb78d20146be811449a0a7d4e7774", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, 0x0, 0x0, 0xffffffff00000000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000016af8c7b0a7ad13817067e01e5a11d210e33dd1e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 2m50.422702748s ago: executing program 1 (id=5277): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) io_uring_setup(0x3cf9, &(0x7f00000000c0)={0x0, 0xfc5a, 0x0, 0x1, 0xcf}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2m50.052617429s ago: executing program 1 (id=5280): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x14, 0x18, 0x9, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mount$9p_unix(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200d001, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d756e69782c6163636573733d3c79822fe205bedb64f65832b45413e7429e346d8fac547bcbc0b013d98970e7202df20173079492293b37206cb9cb01f09b669b5776f3c56104d2090a19ff57af13e39624f2810bd7d56107f5e57ef6", @ANYRESOCT=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 2m49.659535782s ago: executing program 1 (id=5282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000001580)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0xc7}}, {@data_err_ignore}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r2 = creat(&(0x7f0000000040)='./file1\x00', 0xd) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) fallocate(r1, 0x10, 0x3, 0x7c27) io_setup(0x1, &(0x7f00000004c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x800000000000002, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {0x0, r4}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000004cf4ff0000000000000000040000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000ffff00"/105], 0x68) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000008018010000646c6c2500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b70300000101000085000000060000001801000020696c2500000000002020207b07000000000000bfa100000000000007010000f8ffffffb702000008000000b703000087000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0xe, 0xff3, &(0x7f0000000cc0)=""/4083, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcbb}, 0x94) ftruncate(0xffffffffffffffff, 0x200000000000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000380)=0x3) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xffffffff) unshare(0x42000000) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5c8, &(0x7f0000000980)="$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") 2m44.193483743s ago: executing program 1 (id=5294): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd\xb4\xd9\x1b\xb1&\t^\xb6\xb7\xc2\xc1\xf7\x83\xad\xab?\xc2\r\f@&\xf1\xcci[5{\xc5\x17t\xd2w\x00\xac\x12\x0f\x8bM\x8eJ\x1fk\xd8\xe8\xa3\x0e\xda9\x82!Y\xd4\xbeP\xcaB\x8d\xd5/6\x81\xad\xfb+&\x87\x1b\x9f\x8bcsj@\xfc&0{L\x1f\xc8iszj\x84\xac\xc2VI\x16\xb5\xd6\x13\xae\xff\xad\xa5u\xd3Dy\xa1\x00\xa0\xd7\xfd\x8d\xd0\x85k\x19u&l5\xd2*ss\x1b\x12\x8cc|\xc6\xb52e\\\xeaB#w\x9b=\xfdF\xcb\xdbr\xfe\xfa\xb3\xad\x94J\"&\x17P\xf7=\x88Lf\xe5\\\x9agq\x9e\x17\x15L\xc7\xdco\xf4\xa4K\xb5\x06w\xa5\xe6\x9e%\xe5\xdc\xc8\xc9\xb8\xa9#\xe6\xcc\x9e\xb4\xc1\x9b\xeb\xf3\x1e\xa6?\x9f\xb5U\xae\xb3\x84\xf7\x05!z\x88\xc54-A\x10A\x8af\xc8\x82\xc9:0V\x89\xcb\xfag\xbe\xcaO[\xa9\xeb`\x026}\xff;\xe4:\'\xc1\x18\xbf\x03B\xc4N\xa0\xfd\xdbk\xa9p\xb9\x04\xfa\xa0\x13\xe5+\x95\xf5\xb1\xdc\x8b\xd2\xcbf\x84\xc6\xde!\x974\xe3\xc6\xa3Sa\x1eP\xf4\x9dd\x18gH\xf5E\xfb_\xdc0\x1d{iT\xf0o\x94') r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x440040) ioctl$RTC_UIE_ON(r1, 0x7003) socket$inet6_sctp(0xa, 0x801, 0x84) futex(&(0x7f0000004000)=0x2, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) unshare(0x6a040000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d910c02494751ca9d40b1bf85e95679386fb80e4025af8e8ed21bf15d4fdfe5c12"], 0x68) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 2m40.725134152s ago: executing program 1 (id=5305): r0 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r0, 0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000200)="a5", 0x1}], 0x1) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0xc00) 2m40.724906092s ago: executing program 38 (id=5305): r0 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r0, 0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000200)="a5", 0x1}], 0x1) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r8, &(0x7f0000001840), 0x3b, 0xc00) 2m40.409125912s ago: executing program 9 (id=5308): r0 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r0, 0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000200)="a5", 0x1}], 0x1) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m38.353882577s ago: executing program 9 (id=5318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000300)={[{@debug}, {@minixdf}, {@data_err_abort}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@nobh}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x494, &(0x7f0000000880)="$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") r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0x4, 0x5}, 0x0, 0x4, 0x0, 0x8, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) 2m38.159684473s ago: executing program 9 (id=5319): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_RATE={0x14, 0x6, {0x4f, 0x2, 0x1, 0xd0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 2m37.205991883s ago: executing program 9 (id=5320): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001200)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x100001, 0x4) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) flock(r2, 0x5) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x28001, 0x0) write$P9_RLERRORu(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$kcm(0x29, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x1c080, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40900c0}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000000103dc4dd0cf350d7f865b5fda410000000000000000000100000308001540000000000800154000c921"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8d1) sched_setscheduler(0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000300)={[{@nodioread_nolock}, {@bsdgroups}]}, 0x3, 0x467, &(0x7f0000000a40)="$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") 2m35.160763727s ago: executing program 9 (id=5328): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x1684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000027c0), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$key(0xf, 0x3, 0x2) preadv(r2, 0x0, 0x0, 0x4f, 0xfffffffe) preadv(r2, 0x0, 0x0, 0x101, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) 2m33.79330426s ago: executing program 9 (id=5334): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_RATE={0x14, 0x6, {0x4f, 0x2, 0x1, 0xd0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 2m32.864373629s ago: executing program 39 (id=5334): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_RATE={0x14, 0x6, {0x4f, 0x2, 0x1, 0xd0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 2m31.24142475s ago: executing program 4 (id=5346): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0x1a, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0x29, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014ef030000120800040043000000a8001600a400014020", 0x39}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x117bd3, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x32, 0x0, @local, @private1, [@dstopts={0x2c}]}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r2, @ANYBLOB="5a006708060005"], 0x24}}, 0x0) 2m30.401184746s ago: executing program 4 (id=5347): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x0) memfd_create(&(0x7f0000000540)=']*\x00', 0x2) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0xa1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r7, 0xfffffe01, 0x3}, &(0x7f00000000c0)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@remote}, &(0x7f0000000180)=0x14) r9 = geteuid() sendmsg$nl_route(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@can_newroute={0x168, 0x18, 0x205, 0x70bd2b, 0x25dfdbff, {}, [@CGW_MOD_UID={0x8, 0xe, r9}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4e, 0x32, 0x2e, 0x7, 0x4, "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", 0x1, "0d6c332d828d04028c80de30069aa2d8d93ea4e1"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x7f}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "27041a711feac28b"}, 0x4}}]}, 0x168}, 0x1, 0x0, 0x0, 0x60}, 0x0) fallocate(r0, 0xa, 0x400, 0x4ab) 2m30.210138942s ago: executing program 4 (id=5348): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 2m29.34274419s ago: executing program 4 (id=5355): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="48000000002002002400128009000100626f6e640000000014000280050047e57b6178fb4922adae01000300000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) socket$kcm(0x29, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000340)="c48341e7042b2bae7944d87cba331541feeb69a240ab9516de63c6bdf38d649bd15c411b1de68c358204cb739d4d01440e0099238f416f904aede80655d5109d82e9fe1a4274290fea771f4b458effc755bb6b85df482ecd79b937c53c4084fcc700cb709039352ddd94480efe4c0f8bd6f3591bce36843d30f8216909b55a10725d3ba48b83522318b8df601d949144d2ba6696b58eb1fc60413319f72e91d04a354c3cf26eeb533af9eb3a56b33b35409db0a850252dd40a5dec7b9585bb6fa74f190b3033bf115fb85b56ba5c21", &(0x7f0000000440)="dfb3db6a8217cd88bddf381da129d50e6704e09082a176390cd8bc93179d84ebe895e8bb86bea719e1219e076e7fa09bc27ab770905ec9c60ad946c2941d09609b4c919466f57e6544a34ec819664f10867f7c92bc84b03456d879fc5f7ee1d8e90a61f329602a320b3d897a896778b2bb3e791e57ae6e4ebbcbfbf1c0"}}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x300, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000000c0)=0xffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.409057902s ago: executing program 4 (id=5359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x5, 0x5, 0x8, 0x40, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f00000004c0)=""/245, &(0x7f00000006c0)="8e2d756eeb04dd71be85ed730c962db20b8fd7075f9b70e8b17cd0bae16d26f64d946f4cd2af912d3b338f8b6338d48868b95d2ac544e64e7e0b01eb0731d059699885894ee838e79c320c85b882d6b11e4d92a25c2a41ba4d458362b7ccee589d4cf3a5ba8e117b85213e76a748837718972fcc2c45646f76c1341d60c674e540ea88873181dffcf59802c64bee7edacbf1509f99ffa4c66629b73dac23c53348b28f1741b270467ad7513a80473100315169f73829863f3b52995b9ac7c37f0113672d7efc2459e3ad5fe53399d2d42e6e8288a0d8fa62dcf4822d52281e0b98d5", &(0x7f00000007c0)="4b24ed59d4b1fe13e322ba01ea7b6a5755f97984238e41c64f62f2bde5893956a3ce8c40be83abf105b61ce5dd3550672bde209bdf3e6aea37808da8a52ec1965b59ef5eb69bf91d827488", 0xff, r0, 0x4}, 0x38) 2m25.721310103s ago: executing program 4 (id=5363): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x94) 2m25.721218523s ago: executing program 40 (id=5363): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x94) 43.462395985s ago: executing program 3 (id=5728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0x3, "91abc12404cf378042f26c"}]}], {0x14}}, 0x58}}, 0x0) (fail_nth: 2) 43.316506359s ago: executing program 3 (id=5732): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@abort}]}, 0xf7, 0x491, &(0x7f00000005c0)="$eJzs3MtvVNUfAPDvnba8of3xQxQEHUUj8dHSgsrChRpNXGhiogtc1rYgMlBDayKk0WoMLg2Je+PSxL/AnRsjLoyJW01cGhKijQnFVc190WE6A21pO7bz+STTOec+5pzvvffMPfee3gmgY1XTP0nEjoj4NSJ68+ytC1Tzt9mZqZEbM1MjSczNvfFnki13fWZqpFy0XG97kTlciah8msTzycJyJy5cPDNcq42dz3JXtkScfW9g4sLFp06fHT41dmrs3NDx48eODj77zNDTKxJnGtf1/R+OH9j3yluXXxs5cfntK9+k1dp7MJ9fH8cd3WgSUBPVdKv9NZdpnPfoEuq+HuysSyfdbawIS9IVEenu6snaf290xfzO642XP2lr5YBVlZ6bNreePT0HbGBJtLsGQHuUJ/r0+rd8rVHX4z/h2gsRm4r07MzUyOzN+LujUkzvWcXyqxFxYvqfL9NXLPU+BADAMmR9myeb9f8qsTd7z8c6dhVjKH0R8b+I2B0R/4+IPRFxT0S27L0RcV++8lzvIsuvNuQX9n8qV5vWeYWk/b/n6vp+s3XxF299XUVuZxZ/T3LydG3sSLFNDkfP5jQ/eJsyvnvpl89bzavv/6WvtPyyL1hU4Gp3ww260eHJ4ZXaCNc+jtjf3Sz+5OZIQHoE7IuI/Uv76F1l4vTjXx9otdCd428uOypXYJxp7quIx/L9Px0N8deXNTDZcnxyYEvUxo4MlEfFQj/+fOn1VuUvN/6Vku7/bbce/w1L9P6d5OO1PVGrjZ2fWHoZl377rOU1zXKP/03Jm9mY9U/v5NM+GJ6cPD8YsSl5NcuX13TZ9KH5dct8uXwa/+FDzdv/7mKdNP77IyI9iA9GxAMR8WBR94ci4uGIOHSb+H948ZF3bxN/Ekm1rft/tOn3383jvy+pH69fRqLrzPffthoxX9z+PxbT2XdtLvv+u4PFVvAuNx8AAACsC5WI2BFJpT9PV3dEpdLfn/8P/57YVqmNT0w+cXL8/XOj+TMCfdFTKe909dbdDx1MpotPzPNDxb3icv7R4r7xF11bs3z/yHhttM2xQ6fbfmv7j7L9p/7oanftgFXneS3oXI3tv9KmegBrbzHnf9cCsDE1af9b21EPYO25/ofO1az9f9SQ1/+HjWlh+/+9yU/WARuR/j90riW3f3cHYcNw/oeOdDfP9S8/UT4ssPzP2bLoJ/w7JVH+4sVqlrU15qdEpe0hd1AibTFrW+j8b6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsZ/8GAAD//3GU5zM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) write$sndseq(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020081000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007c, 0x80001) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x8000, 0x9, 0x3ff, 0x24, 0xffffffffffffffff}) prlimit64(r4, 0x9, &(0x7f0000000080)={0x6, 0x8000}, 0x0) 42.204790025s ago: executing program 3 (id=5741): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x2f) ioctl$TIOCSBRK(r0, 0x5427) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='context']) 41.947478763s ago: executing program 3 (id=5746): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0x20002, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) socket$inet6_udp(0xa, 0x2, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x50, 0x43, 0x46, 0x50]}, 0x5f) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41.227031395s ago: executing program 3 (id=5751): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001e00218cb192dd0222"], 0x14}}, 0x4000040) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20000088) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340), 0x3}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 38.469193982s ago: executing program 3 (id=5759): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x7fffffff, 0x30}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003580)={r0, 0x7}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfb, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x1, @perf_config_ext={0x2000000000000002, 0x3}, 0x800, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0/file0\x00', 0x221008, &(0x7f0000000500)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}], [{@subj_role={'subj_role', 0x3d, ',--#\\,'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x100) 38.038269396s ago: executing program 41 (id=5759): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x7fffffff, 0x30}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000003580)={r0, 0x7}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfb, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x1, @perf_config_ext={0x2000000000000002, 0x3}, 0x800, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0/file0\x00', 0x221008, &(0x7f0000000500)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}], [{@subj_role={'subj_role', 0x3d, ',--#\\,'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x100) 29.657085848s ago: executing program 6 (id=5811): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f0000000000), 0x80800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e2202000003080000000000003800000001000000000000000000000000c129f2fb9d44d3fadbd5b73deb851651", @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) shmat(r5, &(0x7f0000be5000/0x7000)=nil, 0x3000) sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000640)={0xa, 0x4e20, 0x68c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x1, 0x9484, 0x2001, 0x402, 0x0, 0xd, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) 27.478963247s ago: executing program 6 (id=5817): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r0 = gettid() sched_getscheduler(r0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x19, 0x7, 0x8, 0xfb, 0x0, 0x1, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x18140c, 0x1, 0x6af, 0x8, 0x7, 0x6, 0x7, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xff, 0x40, 0x1, 0x1, 0x0, 0x40000008, 0x80000, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000001c0), 0x6}, 0x1f21, 0xc60, 0x0, 0x6, 0x3, 0x1, 0x9, 0x0, 0x8, 0x0, 0x867}, r0, 0x7, r1, 0x19) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)={@align=0xfffffffffffffff5, {0x1, 0x9, 0x1, 0x6}}, 0x7, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000000000000"], 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000980)={0x10001, 0x7fc, 0x0, 0x4, 0x3}, 0x43) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_RESET(r3, 0x5514) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000540)={0x3, 0x10100001ffffff, 0x1, 0x6}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 26.968703503s ago: executing program 6 (id=5826): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x1684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000027c0), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$key(0xf, 0x3, 0x2) preadv(r2, 0x0, 0x0, 0x4f, 0xfffffffe) preadv(r2, 0x0, 0x0, 0x101, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) 25.917779566s ago: executing program 6 (id=5827): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0xc2) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) setns(r1, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) 23.24701582s ago: executing program 6 (id=5830): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200010000001000fedbdf251c0000000c00350000000000000000000c0029"], 0x2c}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x2, 0x3, 0x3) close_range(r2, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0xed, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}], 0x20}}], 0x1, 0x40014) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}}], 0x2, 0x448c0) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1, &(0x7f00000001c0)=""/165, 0xa5}, 0x1ff}], 0x1, 0x63, &(0x7f00000002c0)={0x0, 0x3938700}) 22.201542403s ago: executing program 6 (id=5836): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffe2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001cdd00001c00000003000000000000000200000d000000000200"/55], &(0x7f0000000340)=""/149, 0x37, 0x95, 0x1}, 0x28) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffff, 0x8, 0x0) getresgid(0x0, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/13, 0xd) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000002840)=[0xa10c], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x9, 0x4, 0x0, 0x7fffffff, 0x1401c, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x8400, 0x8, 0x6, 0x3, 0x8, 0x7, 0x0, 0x0, 0x2, 0x0, 0x5a79}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='netdevsim0\x00') getuid() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = signalfd4(r4, &(0x7f0000000280)={[0x3]}, 0x8, 0x80800) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x80, 0xf7, 0x1e, 0x2, 0x0, 0x3, 0x44203, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x6, 0x6}, 0x8000, 0xfffffffffffffffb, 0x5, 0x8, 0x8, 0x200, 0x57, 0x0, 0xe, 0x0, 0x9}, r5, 0x10, r0, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000080)) 22.185247893s ago: executing program 42 (id=5836): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffe2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001cdd00001c00000003000000000000000200000d000000000200"/55], &(0x7f0000000340)=""/149, 0x37, 0x95, 0x1}, 0x28) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f0000000080)=0xffffffffffffffff, 0x8, 0x0) getresgid(0x0, 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/13, 0xd) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000002840)=[0xa10c], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r3 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x9, 0x4, 0x0, 0x7fffffff, 0x1401c, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x8400, 0x8, 0x6, 0x3, 0x8, 0x7, 0x0, 0x0, 0x2, 0x0, 0x5a79}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='netdevsim0\x00') getuid() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = signalfd4(r4, &(0x7f0000000280)={[0x3]}, 0x8, 0x80800) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x80, 0xf7, 0x1e, 0x2, 0x0, 0x3, 0x44203, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x6, 0x6}, 0x8000, 0xfffffffffffffffb, 0x5, 0x8, 0x8, 0x200, 0x57, 0x0, 0xe, 0x0, 0x9}, r5, 0x10, r0, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000080)) 18.526313058s ago: executing program 7 (id=5858): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x1684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000027c0), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$key(0xf, 0x3, 0x2) preadv(r2, 0x0, 0x0, 0x4f, 0xfffffffe) preadv(r2, 0x0, 0x0, 0x101, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sched_getscheduler(r3) 18.350344263s ago: executing program 7 (id=5861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}], {0x14}}, 0x54}}, 0x0) (fail_nth: 2) 18.245494327s ago: executing program 7 (id=5863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800"], 0xfc}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001100)={0x0, 0x6, 0x8bf, 0x1}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x9}, 0x8) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz8ENwjAMBVAnpaVdiDm4MAgwQDkxDIsxBighRGIAhJDeO1hxYn8pwU+liBjeh4j5cd5vXxe1rXX62DiVsjte12iP903dX9roGEsa1j6e5ymVnNz6yxg9Px9uX/waAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyNZwAAAP//eTUHPA==") 15.017625499s ago: executing program 8 (id=5870): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x1684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000027c0), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$key(0xf, 0x3, 0x2) preadv(r2, 0x0, 0x0, 0x4f, 0xfffffffe) preadv(r2, 0x0, 0x0, 0x101, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sched_getscheduler(r3) 14.423163717s ago: executing program 8 (id=5873): syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x42) 14.422954357s ago: executing program 2 (id=5874): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8001, 0x8000}, 0x1112, 0x2, 0x0, 0x2, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() setfsgid(0xee01) 14.225194403s ago: executing program 2 (id=5876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r4], 0x2, 0x2bc, &(0x7f00000015c0)="$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") bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) capset(0x0, &(0x7f00000000c0)) socket$unix(0x1, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 14.222893824s ago: executing program 8 (id=5877): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_RATE={0x14, 0x6, {0x4f, 0x2, 0x1, 0xd0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 10.121759972s ago: executing program 2 (id=5879): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x170, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 11) 9.685046036s ago: executing program 2 (id=5881): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_RATE={0x14, 0x6, {0x4f, 0x2, 0x1, 0xd0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 7.818159524s ago: executing program 7 (id=5885): mmap(&(0x7f0000967000/0x2000)=nil, 0x2000, 0x1000001, 0x13, 0xffffffffffffffff, 0x74721000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xd, @loopback, 0xc0e}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000340)="99d08883dd24f8fb330286c261c9dda1613e62ccf93077", 0x17}, {0x0}, {0x0}], 0x3}}], 0x1, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x1000, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x5b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) rmdir(&(0x7f0000000000)='./file0\x00') 6.36139181s ago: executing program 5 (id=5895): r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000010000000000000003000000850000000f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) fchdir(r1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x110) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fc00000000000, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$kcm(0x2, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") listen(r4, 0x802) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r5, &(0x7f00000001c0)={0x2, 0x1, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$eJzs3M9vVNUeAPDvnU4L5cdrH4/3niBKFY0osaUFlYULMZq40MTEDS5rWxAp1LTVCCFaXeDSkLg3Lk38C1zpxqgrE7a4NyTEsAE1JmPuzL3TaecH0zLtWObzSWbmnHtv55wv95yZc+5hbgA9ayR9SiJ2RcT1iBiqZFceMFJ5uXPr8tTvty5PJVEqvfFbUj7u9q3LU/mh+d/tzDNLK7fXWrh46dzk7OzMfJYfWzz/7tjCxUtPnz0/eWbmzMyFiRMnjh8bf+7ZiWeaV76//TjTOt3e/+HcgX2vvHn1talTV9/68eskj39FHO+3/6atjTTY1pcnHu9UKf8Qu8vPg+XnpJhvLXSvQrQlbZDFrCtdj6Hoi+rJi6F4+ZOuVg7YUKVSqbSt6d7h7IhMkr3WbgO2sKTt3tyv38N9JfuiTyKWptI5cO18vhfcPFmZAKVx38kelT3F6uy1vzq/7bx0tnVq6Y8v0kcsX4cY2KDiAADi25OV13zstzz+KxRrj3shWxsajoh/R8SeiPhPROyNiP9GxP8i4v8R8UDN3zRa91lt9SJJ/fizcGNdgbXp5pGI57O1rZXjv+raxXBflttdjr8/OX12duZoRPwrIg5H/7Y0P96ijO9euvZZlqwb143UjP/SR1p+PhbM6nGjuOoC3fTk4uS9xp27+XHE/mKj+JPqSkB6HvdFxP6D6yvj7FNfHWi27+7xt1BcX31qlb6MeKJy/pdiVfy5pPX65Nj2mJ05Opa3ino//Xzl9Wbl31P8HZCe/x0N2381/uGkdr12Ye1lXPnl06Zzyjbb/4p+k7b/gWRlV/pgcnFxfjxiIHm1nB8of2Kl26P+uInl49P4Dx9q3P/3xPK/xIMRkTbihyLi4Yg4mNX9kYh4NCIOtYj/hxcfe2f98W+sNP7pu5//t5+snv+miXxtu25X37nvvynvyU/ZcIv4k2hw/o+XU4ezLe18/rWs6fy9tGYAAADYegoRsSuSwmg1XSiMjlb+v/ze2FGYnVtYPHJ67r0L05XfCAxHfyG/0jVUvR4aS+PZtD6/PjqxKn8su278ed9gOT86NTc73e3gocftbNL/U7/2dbt2wIbrwDoasEWtt/+XSqWPOlwVYJP5/ofepf9D72rQ/wdX5ZvfIwDY0ooNMjUT+7+WfycM3G+ajf+vbXI9gM1n/g+9S/+H3qX/Q0/KfglfjLZ+Lb9BifTzp+kxfRHRrYo1SZRK2+vvcrAZiYEOvuGu1XdJGFrb+0RhjYUmtW1s+xru0VCXiG43gDUm/sxutrkJZaVdaX6weW9qP9HtTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DsAAP//wc7YrA==") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000040000000000600000018250000", @ANYRES32=r6, @ANYBLOB="000000009600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 4.884230306s ago: executing program 0 (id=5896): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) getegid() recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {0x0}], 0x6}, 0x5}], 0x1, 0x2000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x41, &(0x7f0000000840)={[], [], 0x3d}, 0x65, 0x533, &(0x7f0000000880)="$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") fchdir(r0) 3.19284533s ago: executing program 0 (id=5897): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002380)={0x184, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xf0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x20000007, 0x40004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1220, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x5c5000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000100)=r3) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000300)=r3) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)=""/225, 0xe1) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}}, 0x20000034) recvmmsg(r4, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/125, 0x7d}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000640)}], 0x5, &(0x7f0000000840)=""/182, 0xb6}, 0x6}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/33, 0x21}, {&(0x7f0000001cc0)=""/71, 0x47}], 0x4, &(0x7f0000001d80)=""/174, 0xae}, 0x3}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/9, 0x9}, {&(0x7f0000001f00)=""/93, 0x5d}, {&(0x7f0000001f80)=""/145, 0x91}, {&(0x7f0000002040)=""/253, 0xfd}, {&(0x7f0000002140)=""/88, 0x58}], 0x5, &(0x7f0000002240)=""/125, 0x7d}, 0x2}], 0x3, 0x2000, &(0x7f0000003700)) 3.19263583s ago: executing program 5 (id=5898): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8001, 0x8000}, 0x1112, 0x2, 0x0, 0x2, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() setfsgid(0xee01) 3.153085801s ago: executing program 8 (id=5899): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x124, 0x10000, 0x9, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010318000000000000000c0000000c000000020000000000000000000004000000000000a7dc25d3e4469e93ec6c43bf3617bba4dea2b4aeec8aa9ad74f6d030352182b55d19673c72c8a74ab5650956d1f59398856da6cf8a80af96fd316d805ae7f791975c58dc5f5ccd05e5df267d4c555602ebbb60d5"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="26a24fa97889de1c7eb992ebd93fc644bf4cf5983c20bf4e38e5cf03d5a4fedfb7291c50fb4e9b097d1ac5ecf6a8bb1184c3442a0ef216e774e8b26f64d6ffe225addafe95dffa1d24906f1a090a1491d9f9bbe9055351600f708536688551a482652d0072ba7c655444b523c7060391f20dfb7da903d36ac7b0b5bf8dc7207bbf59"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x402, &(0x7f0000000480)=ANY=[@ANYBLOB="0a006f6cf4a9a28da0bac27e3d62696e0e000008"]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) ioctl$TUNGETDEVNETNS(r5, 0xff03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000380), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580)={'vcan0', 0x32, 0x36}, 0x8) getpid() 3.075146774s ago: executing program 5 (id=5900): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (fail_nth: 13) 2.733195364s ago: executing program 0 (id=5901): r0 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r0, 0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000200)="a5", 0x1}], 0x1) 2.668043966s ago: executing program 5 (id=5902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000080) r2 = socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0xc00c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000"], 0x0, 0x52}, 0x28) syz_open_dev$evdev(0x0, 0x4, 0x181000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) write$cgroup_subtree(r2, 0x0, 0xfe33) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 2.432181904s ago: executing program 0 (id=5903): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x1684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000027c0), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$key(0xf, 0x3, 0x2) preadv(r2, 0x0, 0x0, 0x4f, 0xfffffffe) preadv(r2, 0x0, 0x0, 0x101, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sched_getscheduler(r3) 2.414605404s ago: executing program 2 (id=5904): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r3, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x440b0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x8100, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffcc6, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) 1.616036909s ago: executing program 8 (id=5905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)={0x50, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@random_vendor={0xdd, 0x22, "f9b4597add28936ffa2cbf97172dff9dbe453d6e84dd9c8dfcdf7fb2b90606be8de7"}]}]}, 0x50}}, 0x10) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x40}}, 0x4000010) 1.611231739s ago: executing program 2 (id=5906): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f0000000000), 0x80800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e2202000003080000000000003800000001000000000000000000000000c129f2fb9d44d3fadbd5b73deb851651", @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4) shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) shmat(r5, &(0x7f0000be5000/0x7000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000580)="b76ff3eab37f3eda77e506d820c7fb486b2d4bd598e512305d2c0460a671140a8174615e1bca9f1c6eee919f059018f6b64882520eeb0e75c945d2436a4534f8c4f92bd8796b608c979a3f962aed", 0x4e, 0x8, &(0x7f0000000640)={0xa, 0x4e20, 0x68c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x1, 0x9484, 0x2001, 0x402, 0x0, 0xd, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) 1.59195994s ago: executing program 0 (id=5907): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400"/69], 0x68) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 1.514782382s ago: executing program 5 (id=5908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x7}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) fsync(r1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00070000000000000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000950000000000ea36", @ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r5 = getpid() setpgid(0xffffffffffffffff, r5) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xbc7f, @empty, 0x5cff1c5c}}, 0x0, 0x0, 0x103d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r7 = socket$kcm(0x23, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r7, 0x800) accept4(r7, 0x0, 0x0, 0x80000) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) ppoll(&(0x7f00000000c0)=[{r6, 0x4}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, r10, &(0x7f0000000440)={0xa, 0x2, 0x60, 0x7, 0xd, 0x1, 0xff, 0x3, 0xe28}) chroot(&(0x7f0000000580)='./file0/../file0\x00') 1.442556254s ago: executing program 8 (id=5909): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_RATE={0x14, 0x6, {0x4f, 0x2, 0x1, 0xd0}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 1.439315955s ago: executing program 7 (id=5910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pidfd_send_signal(0xffffffffffffffff, 0x40, &(0x7f0000000240)={0xe, 0x6, 0x8001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.061774936s ago: executing program 7 (id=5911): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2040000, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x4, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x44201, 0x0) fallocate(r2, 0x17, 0x254, 0x1250) setsockopt$inet6_group_source_req(r2, 0x29, 0x1, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e22, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000880)={0x1, {{0xa, 0x4e21, 0x8, @empty}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {{0xa, 0x4e23, 0x81, @loopback, 0x6}}]}, 0x190) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 14.425249ms ago: executing program 5 (id=5912): syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 0s ago: executing program 0 (id=5913): r0 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r0, 0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x1}, 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000200)="a5", 0x1}], 0x1) kernel console output (not intermixed with test programs): nge from 0 to 512 [ 1517.513700][T26461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1517.539505][T26464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1517.557743][T26461] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.588074][ T28] audit: type=1400 audit(1782166738.452:4839): avc: denied { write } for pid=26462 comm="syz.3.5686" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1517.665161][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.678691][ T28] audit: type=1400 audit(1782166738.482:4840): avc: denied { write } for pid=26460 comm="syz.2.5685" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1517.723153][ T28] audit: type=1400 audit(1782166738.492:4841): avc: denied { write } for pid=26460 comm="syz.2.5685" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1517.771317][ T28] audit: type=1400 audit(1782166738.522:4842): avc: denied { write } for pid=26462 comm="syz.3.5686" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1517.825481][T20630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.878092][T23463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.497607][ T28] audit: type=1400 audit(1782166739.362:4843): avc: denied { create } for pid=26476 comm="syz.2.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1519.007590][T26493] tmpfs: Unknown parameter 'contextilter' [ 1519.038517][T26492] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.5694' resets device [ 1519.089036][T20525] udevd[20525]: inotify_add_watch(7, /dev/loop7p165, 10) failed: No such file or directory [ 1519.105763][T20526] udevd[20526]: inotify_add_watch(7, /dev/loop7p173, 10) failed: No such file or directory [ 1519.127997][T20528] udevd[20528]: inotify_add_watch(7, /dev/loop7p166, 10) failed: No such file or directory [ 1519.142966][T26492] loop3: detected capacity change from 0 to 512 [ 1519.152893][T20529] udevd[20529]: inotify_add_watch(7, /dev/loop7p163, 10) failed: No such file or directory [ 1519.171176][T20522] udevd[20522]: inotify_add_watch(7, /dev/loop7p164, 10) failed: No such file or directory [ 1519.184472][T20202] udevd[20202]: inotify_add_watch(7, /dev/loop7p162, 10) failed: No such file or directory [ 1519.198219][T20523] udevd[20523]: inotify_add_watch(7, /dev/loop7p171, 10) failed: No such file or directory [ 1519.212424][T26492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1519.221329][T20531] udevd[20531]: inotify_add_watch(7, /dev/loop7p168, 10) failed: No such file or directory [ 1519.237782][T20525] udevd[20525]: inotify_add_watch(7, /dev/loop7p174, 10) failed: No such file or directory [ 1519.249633][T20235] udevd[20235]: inotify_add_watch(7, /dev/loop7p169, 10) failed: No such file or directory [ 1519.277488][T26492] EXT4-fs: Ignoring removed mblk_io_submit option [ 1519.336798][T26492] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1519.390291][T26492] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1519.399268][T26492] EXT4-fs (loop3): 1 truncate cleaned up [ 1519.405431][T26492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1519.469942][ T28] audit: type=1400 audit(1782166739.362:4844): avc: denied { connect } for pid=26476 comm="syz.2.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1519.489985][ T28] audit: type=1400 audit(1782166739.362:4845): avc: denied { write } for pid=26476 comm="syz.2.5691" path="socket:[84251]" dev="sockfs" ino=84251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1520.126026][T26505] FAULT_INJECTION: forcing a failure. [ 1520.126026][T26505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.139136][T26505] CPU: 0 UID: 0 PID: 26505 Comm: syz.6.5697 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1520.139239][T26505] Tainted: [W]=WARN [ 1520.139246][T26505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1520.139261][T26505] Call Trace: [ 1520.139268][T26505] [ 1520.139276][T26505] __dump_stack+0x1d/0x30 [ 1520.139387][T26505] dump_stack_lvl+0x95/0xd0 [ 1520.139412][T26505] dump_stack+0x15/0x1b [ 1520.139432][T26505] should_fail_ex+0x25e/0x270 [ 1520.139462][T26505] should_fail+0xb/0x20 [ 1520.139549][T26505] should_fail_usercopy+0x1a/0x20 [ 1520.139650][T26505] _copy_to_user+0x20/0xa0 [ 1520.139690][T26505] put_user_ifreq+0x57/0xa0 [ 1520.139756][T26505] inet_ioctl+0x353/0x3a0 [ 1520.139804][T26505] packet_ioctl+0x248/0x280 [ 1520.139829][T26505] sock_do_ioctl+0x73/0x230 [ 1520.139923][T26505] sock_ioctl+0x439/0x610 [ 1520.139949][T26505] ? mutex_lock+0x57/0x90 [ 1520.139981][T26505] ? __pfx_sock_ioctl+0x10/0x10 [ 1520.140014][T26505] __se_sys_ioctl+0xce/0x140 [ 1520.140076][T26505] __x64_sys_ioctl+0x43/0x50 [ 1520.140120][T26505] x64_sys_call+0x1563/0x3020 [ 1520.140144][T26505] do_syscall_64+0x136/0x3c0 [ 1520.140168][T26505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.140251][T26505] RIP: 0033:0x7f0185bbce59 [ 1520.140403][T26505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.140428][T26505] RSP: 002b:00007f01845d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.140455][T26505] RAX: ffffffffffffffda RBX: 00007f0185e36180 RCX: 00007f0185bbce59 [ 1520.140479][T26505] RDX: 00002000000000c0 RSI: 0000000000008915 RDI: 0000000000000003 [ 1520.140494][T26505] RBP: 00007f01845d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.140507][T26505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.140520][T26505] R13: 00007f0185e36218 R14: 00007f0185e36180 R15: 00007ffeb816f7b8 [ 1520.140609][T26505] [ 1520.221415][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1520.557190][T26508] loop2: detected capacity change from 0 to 256 [ 1520.651157][T23463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.910594][T26529] tmpfs: Bad value for 'context' [ 1522.360998][T26562] syzkaller0: entered promiscuous mode [ 1522.366528][T26562] syzkaller0: entered allmulticast mode [ 1523.128540][T26558] loop2: detected capacity change from 0 to 512 [ 1523.139354][T26558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1523.146193][T26558] EXT4-fs: Ignoring removed mblk_io_submit option [ 1523.421051][T26558] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1523.443721][T26558] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1523.554079][T26558] EXT4-fs (loop2): 1 truncate cleaned up [ 1523.649862][T26558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.763616][T26580] tmpfs: Bad value for 'context' [ 1523.838328][T26584] loop7: detected capacity change from 0 to 256 [ 1523.991239][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.002983][T26587] FAULT_INJECTION: forcing a failure. [ 1524.002983][T26587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.207948][T26587] CPU: 0 UID: 0 PID: 26587 Comm: syz.3.5720 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1524.207981][T26587] Tainted: [W]=WARN [ 1524.207990][T26587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1524.208019][T26587] Call Trace: [ 1524.208031][T26587] [ 1524.208040][T26587] __dump_stack+0x1d/0x30 [ 1524.208066][T26587] dump_stack_lvl+0x95/0xd0 [ 1524.208087][T26587] dump_stack+0x15/0x1b [ 1524.208106][T26587] should_fail_ex+0x25e/0x270 [ 1524.208147][T26587] should_fail+0xb/0x20 [ 1524.208176][T26587] should_fail_usercopy+0x1a/0x20 [ 1524.208205][T26587] _copy_from_iter+0xcc/0xe70 [ 1524.208333][T26587] ? should_failslab+0x8c/0xb0 [ 1524.208355][T26587] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 1524.208379][T26587] ? bio_alloc_bioset+0x20d/0x640 [ 1524.208485][T26587] ? bio_alloc_bioset+0x20d/0x640 [ 1524.208519][T26587] copy_page_from_iter+0x15d/0x1f0 [ 1524.208558][T26587] blk_rq_map_user_iov+0xaab/0xfa0 [ 1524.208594][T26587] blk_rq_map_user_io+0x1a4/0x280 [ 1524.208621][T26587] ? alloc_pages_mpol+0xd9/0x1d0 [ 1524.208660][T26587] ? alloc_pages_noprof+0xa8/0x140 [ 1524.208698][T26587] ? sg_build_indirect+0x39a/0x450 [ 1524.208768][T26587] sg_common_write+0xaef/0xc10 [ 1524.208802][T26587] ? should_fail_ex+0xd9/0x270 [ 1524.208831][T26587] sg_write+0x6ff/0x7a0 [ 1524.208874][T26587] ? __pfx_sg_write+0x10/0x10 [ 1524.209007][T26587] vfs_write+0x252/0x990 [ 1524.209057][T26587] ? __fget_files+0x184/0x1c0 [ 1524.209096][T26587] ksys_write+0xdc/0x1a0 [ 1524.209116][T26587] __x64_sys_write+0x40/0x50 [ 1524.209137][T26587] x64_sys_call+0x27e1/0x3020 [ 1524.209241][T26587] do_syscall_64+0x136/0x3c0 [ 1524.209266][T26587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.209291][T26587] RIP: 0033:0x7efdd137ce59 [ 1524.209309][T26587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.209329][T26587] RSP: 002b:00007efdcfdae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1524.209349][T26587] RAX: ffffffffffffffda RBX: 00007efdd15f6090 RCX: 00007efdd137ce59 [ 1524.209365][T26587] RDX: 000000000000fe33 RSI: 0000200000000080 RDI: 0000000000000005 [ 1524.209395][T26587] RBP: 00007efdcfdae090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.209413][T26587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1524.209430][T26587] R13: 00007efdd15f6128 R14: 00007efdd15f6090 R15: 00007ffcf0a9c0a8 [ 1524.209457][T26587] [ 1525.230486][T26606] loop3: detected capacity change from 0 to 512 [ 1525.261826][T26606] EXT4-fs: Ignoring removed bh option [ 1525.284011][T26606] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1525.297304][T26606] EXT4-fs (loop3): 1 truncate cleaned up [ 1525.303501][T26606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1525.369035][T23463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.381645][T26616] tmpfs: Bad value for 'context' [ 1525.512595][T26622] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.5731' resets device [ 1525.522886][T26624] loop3: detected capacity change from 0 to 1024 [ 1525.541702][T26622] loop7: detected capacity change from 0 to 512 [ 1525.571274][T26624] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1525.590859][T26622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1525.632307][T26624] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1525.642074][T26622] EXT4-fs: Ignoring removed mblk_io_submit option [ 1525.790749][T26622] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1525.800640][T26624] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5732: Failed to acquire dquot type 0 [ 1525.816750][T26622] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1525.825092][T26624] loop3: lost filesystem error report for type 5 error -5 [ 1525.825639][T26624] EXT4-fs (loop3): 1 truncate cleaned up [ 1525.832921][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1525.832939][ C0] EXT4-fs (loop3): initial error at time 1782166746: ext4_acquire_dquot:7041 [ 1525.832967][ C0] EXT4-fs (loop3): last error at time 1782166746: ext4_acquire_dquot:7041 [ 1525.871005][T26622] EXT4-fs (loop7): 1 truncate cleaned up [ 1525.877183][T26622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.907161][T26624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.920960][T20630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.954098][ T28] audit: type=1400 audit(1782166746.822:4846): avc: denied { write } for pid=26623 comm="syz.3.5732" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1525.976899][T26624] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1526.001003][T26624] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1526.034796][T26624] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.5732: Failed to acquire dquot type 0 [ 1526.051233][ T28] audit: type=1400 audit(1782166746.922:4847): avc: denied { write } for pid=26641 comm="syz.7.5736" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1526.074818][T26642] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1526.085304][T26642] loop7: detected capacity change from 0 to 512 [ 1526.091901][T26642] EXT4-fs: inline encryption not supported [ 1526.151054][T26642] EXT4-fs: Mount option(s) incompatible with ext2 [ 1526.589719][T23463] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.641705][T26652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32792 sclass=netlink_route_socket pid=26652 comm=syz.0.5740 [ 1526.660112][T26658] tmpfs: Unknown parameter 'contextilter' [ 1526.925065][T26667] loop7: detected capacity change from 0 to 256 [ 1527.062119][T26671] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.5745' resets device [ 1527.397775][T26665] loop3: detected capacity change from 0 to 4096 [ 1527.436168][T26665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1527.566869][T23463] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 1528.025920][T26695] loop2: detected capacity change from 0 to 512 [ 1528.039655][T23463] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 1528.105226][T26689] syz.7.5753 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1528.119532][T26689] CPU: 0 UID: 0 PID: 26689 Comm: syz.7.5753 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1528.119578][T26689] Tainted: [W]=WARN [ 1528.119585][T26689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1528.119599][T26689] Call Trace: [ 1528.119607][T26689] [ 1528.119694][T26689] __dump_stack+0x1d/0x30 [ 1528.119729][T26689] dump_stack_lvl+0x95/0xd0 [ 1528.119759][T26689] dump_stack+0x15/0x1b [ 1528.119781][T26689] dump_header+0x80/0x240 [ 1528.119841][T26689] oom_kill_process+0x295/0x350 [ 1528.119883][T26689] out_of_memory+0x981/0xbc0 [ 1528.119932][T26689] try_charge_memcg+0x621/0xa00 [ 1528.119968][T26689] ? __rcu_read_unlock+0x4e/0x70 [ 1528.120012][T26689] __memcg_kmem_charge_page+0x199/0x3a0 [ 1528.120080][T26689] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1528.120120][T26689] alloc_pages_mpol+0xa9/0x1d0 [ 1528.120151][T26689] alloc_pages_noprof+0x8f/0x140 [ 1528.120187][T26689] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1528.120293][T26689] __kvmalloc_node_noprof+0x3a0/0x590 [ 1528.120330][T26689] ? futex_hash_allocate+0x192/0x920 [ 1528.120444][T26689] ? futex_hash_allocate+0x192/0x920 [ 1528.120551][T26689] ? futex_hash_allocate+0x192/0x920 [ 1528.120577][T26689] futex_hash_allocate+0x192/0x920 [ 1528.120599][T26689] ? cap_task_prctl+0x13f/0x6b0 [ 1528.120648][T26689] futex_hash_prctl+0xd8/0xf0 [ 1528.120708][T26689] __se_sys_prctl+0x4f4/0x13b0 [ 1528.120738][T26689] __x64_sys_prctl+0x67/0x80 [ 1528.120793][T26689] x64_sys_call+0x2533/0x3020 [ 1528.120827][T26689] do_syscall_64+0x136/0x3c0 [ 1528.120927][T26689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.120949][T26689] RIP: 0033:0x7f0b54acce59 [ 1528.120966][T26689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.120988][T26689] RSP: 002b:00007f0b53527028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1528.121083][T26689] RAX: ffffffffffffffda RBX: 00007f0b54d45fa0 RCX: 00007f0b54acce59 [ 1528.121104][T26689] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1528.121119][T26689] RBP: 00007f0b54b62e6f R08: 0000000000000000 R09: 0000000000000000 [ 1528.121133][T26689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.121174][T26689] R13: 00007f0b54d46038 R14: 00007f0b54d45fa0 R15: 00007ffe21e12008 [ 1528.121200][T26689] [ 1528.121210][T26689] memory: usage 307200kB, limit 307200kB, failcnt 2055 [ 1528.371877][T26689] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1528.379805][T26689] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1528.387131][T26689] Memory cgroup stats for /syz7: [ 1528.387446][T26689] cache 0 [ 1528.395347][T26689] rss 0 [ 1528.398126][T26689] shmem 0 [ 1528.401139][T26689] mapped_file 0 [ 1528.404616][T26689] dirty 0 [ 1528.407577][T26689] writeback 0 [ 1528.410882][T26689] workingset_refault_anon 1580 [ 1528.415740][T26689] workingset_refault_file 0 [ 1528.420335][T26689] swap 196608 [ 1528.423639][T26689] swapcached 32886784 [ 1528.427640][T26689] pgpgin 276668 [ 1528.431111][T26689] pgpgout 276668 [ 1528.434695][T26689] pgfault 335310 [ 1528.439392][T26689] pgmajfault 488 [ 1528.443675][T26689] inactive_anon 0 [ 1528.448180][T26689] active_anon 0 [ 1528.452570][T26689] inactive_file 0 [ 1528.456951][T26689] active_file 0 [ 1528.461261][T26689] unevictable 0 [ 1528.466140][T26689] hierarchical_memory_limit 314572800 [ 1528.473342][T26689] hierarchical_memsw_limit 9223372036854771712 [ 1528.480410][T26689] total_cache 0 [ 1528.484560][T26689] total_rss 0 [ 1528.488911][T26689] total_shmem 0 [ 1528.492769][T26689] total_mapped_file 0 [ 1528.497191][T26689] total_dirty 0 [ 1528.501449][T26689] total_writeback 0 [ 1528.505883][T26689] total_workingset_refault_anon 1580 [ 1528.512021][T26689] total_workingset_refault_file 0 [ 1528.517799][T26689] total_swap 196608 [ 1528.521696][T26689] total_swapcached 32886784 [ 1528.526209][T26689] total_pgpgin 276668 [ 1528.530208][T26689] total_pgpgout 276668 [ 1528.534354][T26689] total_pgfault 335310 [ 1528.538434][T26689] total_pgmajfault 488 [ 1528.542521][T26689] total_inactive_anon 0 [ 1528.546684][T26689] total_active_anon 0 [ 1528.550724][T26689] total_inactive_file 0 [ 1528.554904][T26689] total_active_file 0 [ 1528.558922][T26689] total_unevictable 0 [ 1528.562922][T26689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.5753,pid=26688,uid=0 [ 1528.577935][T26689] Memory cgroup out of memory: Killed process 26688 (syz.7.5753) total-vm:96084kB, anon-rss:1228kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1528.721334][T26695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.763254][T26695] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.877457][ T28] audit: type=1400 audit(1782166749.692:4848): avc: denied { write } for pid=26686 comm="syz.2.5752" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1530.260618][T26710] syz.0.5756 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1530.520166][ T28] audit: type=1400 audit(1782166751.212:4849): avc: denied { recv } for pid=26706 comm="syz.6.5757" saddr=10.128.0.163 src=49366 daddr=10.128.0.221 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1530.547104][T26710] CPU: 0 UID: 0 PID: 26710 Comm: syz.0.5756 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1530.547152][T26710] Tainted: [W]=WARN [ 1530.547163][T26710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1530.547229][T26710] Call Trace: [ 1530.547236][T26710] [ 1530.547260][T26710] __dump_stack+0x1d/0x30 [ 1530.547290][T26710] dump_stack_lvl+0x95/0xd0 [ 1530.547320][T26710] dump_stack+0x15/0x1b [ 1530.547347][T26710] dump_header+0x80/0x240 [ 1530.547376][T26710] oom_kill_process+0x295/0x350 [ 1530.547498][T26710] out_of_memory+0x981/0xbc0 [ 1530.547537][T26710] try_charge_memcg+0x621/0xa00 [ 1530.547580][T26710] charge_memcg+0x6d/0x120 [ 1530.547644][T26710] __mem_cgroup_charge+0x28/0xb0 [ 1530.547702][T26710] handle_mm_fault+0x1041/0x2da0 [ 1530.547735][T26710] ? _raw_spin_lock+0x52/0xa0 [ 1530.547778][T26710] __get_user_pages+0x129c/0x1f10 [ 1530.547950][T26710] __mm_populate+0x242/0x390 [ 1530.547995][T26710] do_mlock+0x44d/0x510 [ 1530.548033][T26710] __x64_sys_mlock+0x36/0x50 [ 1530.548059][T26710] x64_sys_call+0x1ab3/0x3020 [ 1530.548157][T26710] do_syscall_64+0x136/0x3c0 [ 1530.548190][T26710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.548248][T26710] RIP: 0033:0x7f217e3bce59 [ 1530.548269][T26710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.548295][T26710] RSP: 002b:00007f217cdcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1530.548323][T26710] RAX: ffffffffffffffda RBX: 00007f217e636180 RCX: 00007f217e3bce59 [ 1530.548343][T26710] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 1530.548361][T26710] RBP: 00007f217e452e6f R08: 0000000000000000 R09: 0000000000000000 [ 1530.548378][T26710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1530.548407][T26710] R13: 00007f217e636218 R14: 00007f217e636180 R15: 00007ffdfd3a3ad8 [ 1530.548435][T26710] [ 1530.997768][T26710] memory: usage 307200kB, limit 307200kB, failcnt 6965 [ 1531.030503][T26710] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 1531.079522][T26710] kmem: usage 305704kB, limit 9007199254740988kB, failcnt 0 [ 1531.107645][T26710] Memory cgroup stats for /syz0: [ 1531.108076][T26710] cache 0 [ 1531.116044][T26710] rss 1531904 [ 1531.119624][T26710] shmem 0 [ 1531.122607][T26710] mapped_file 0 [ 1531.126085][T26710] dirty 0 [ 1531.129329][T26710] writeback 0 [ 1531.132641][T26710] workingset_refault_anon 3580 [ 1531.137429][T26710] workingset_refault_file 2747 [ 1531.142536][T26710] swap 372736 [ 1531.145888][T26710] swapcached 50688000 [ 1531.153244][T26710] pgpgin 1056722 [ 1531.156877][T26710] pgpgout 1056348 [ 1531.160816][T26710] pgfault 1137546 [ 1531.164517][T26710] pgmajfault 1421 [ 1531.169417][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.190005][T26710] inactive_anon 0 [ 1531.195995][T26710] active_anon 0 [ 1531.211787][T26710] inactive_file 0 [ 1531.215549][T26710] active_file 0 [ 1531.219756][T26721] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.5758' resets device [ 1531.229156][T26710] unevictable 1531904 [ 1531.233189][T26710] hierarchical_memory_limit 314572800 [ 1531.241865][T26721] loop2: detected capacity change from 0 to 512 [ 1531.248371][T26710] hierarchical_memsw_limit 9223372036854771712 [ 1531.254875][T26710] total_cache 0 [ 1531.258916][T26721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1531.285907][T26710] total_rss 1531904 [ 1531.296519][T26721] EXT4-fs: Ignoring removed mblk_io_submit option [ 1531.303421][T26710] total_shmem 0 [ 1531.306929][T26710] total_mapped_file 0 [ 1531.312520][T26721] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1531.320876][T26710] total_dirty 0 [ 1531.324482][T26721] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1531.332604][T26710] total_writeback 0 [ 1531.336864][T26710] total_workingset_refault_anon 3580 [ 1531.342958][T26721] EXT4-fs (loop2): 1 truncate cleaned up [ 1531.348797][T26710] total_workingset_refault_file 2747 [ 1531.354644][T26721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1531.367273][T26710] total_swap 372736 [ 1531.372181][T26710] total_swapcached 50688000 [ 1531.376785][T26710] total_pgpgin 1056722 [ 1531.388035][T26710] total_pgpgout 1056348 [ 1531.395225][T26710] total_pgfault 1137546 [ 1531.403851][T26710] total_pgmajfault 1421 [ 1531.408527][T26710] total_inactive_anon 0 [ 1531.412797][T26710] total_active_anon 0 [ 1531.416847][T26710] total_inactive_file 0 [ 1531.421395][T26710] total_active_file 0 [ 1531.425417][T26710] total_unevictable 1531904 [ 1531.430576][T26710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5756,pid=26702,uid=0 [ 1531.445968][T26710] Memory cgroup out of memory: Killed process 26702 (syz.0.5756) total-vm:94300kB, anon-rss:2728kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1531.673965][T24323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1531.686013][T24323] CPU: 0 UID: 0 PID: 24323 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1531.686057][T24323] Tainted: [W]=WARN [ 1531.686067][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1531.686103][T24323] Call Trace: [ 1531.686111][T24323] [ 1531.686119][T24323] __dump_stack+0x1d/0x30 [ 1531.686152][T24323] dump_stack_lvl+0x95/0xd0 [ 1531.686180][T24323] dump_stack+0x15/0x1b [ 1531.686240][T24323] dump_header+0x80/0x240 [ 1531.686309][T24323] oom_kill_process+0x295/0x350 [ 1531.686349][T24323] out_of_memory+0x981/0xbc0 [ 1531.686385][T24323] try_charge_memcg+0x621/0xa00 [ 1531.686483][T24323] charge_memcg+0x6d/0x120 [ 1531.686599][T24323] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1531.686644][T24323] swap_cache_alloc_folio+0x47b/0x5e0 [ 1531.686685][T24323] swap_cluster_readahead+0x2b1/0x460 [ 1531.686755][T24323] swapin_readahead+0xd8/0x8a0 [ 1531.686798][T24323] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1531.686906][T24323] ? hrtimer_start_range_ns+0x108/0x120 [ 1531.686942][T24323] ? __rcu_read_unlock+0x4e/0x70 [ 1531.687033][T24323] ? swap_cache_get_folio+0x1f7/0x200 [ 1531.687083][T24323] do_swap_page+0x2a2/0x1ec0 [ 1531.687121][T24323] ? __schedule+0x799/0xd10 [ 1531.687149][T24323] ? __rcu_read_lock+0x36/0x50 [ 1531.687219][T24323] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1531.687255][T24323] handle_mm_fault+0xb3c/0x2da0 [ 1531.687309][T24323] do_user_addr_fault+0x634/0x1060 [ 1531.687450][T24323] ? trace_page_fault_user+0x1f/0xa0 [ 1531.687485][T24323] exc_page_fault+0x62/0xa0 [ 1531.687554][T24323] asm_exc_page_fault+0x26/0x30 [ 1531.687575][T24323] RIP: 0033:0x7f217e377fd7 [ 1531.687596][T24323] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1531.687621][T24323] RSP: 002b:00007ffdfd3a3dd0 EFLAGS: 00010202 [ 1531.687644][T24323] RAX: 0000000000000000 RBX: 000055556b2ce500 RCX: 00007f217e377fd7 [ 1531.687662][T24323] RDX: 00007ffdfd3a3e10 RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.687678][T24323] RBP: 00007ffdfd3a3e7c R08: 0000000000000000 R09: 0000000000000000 [ 1531.687758][T24323] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1531.687771][T24323] R13: 00000000000927c0 R14: 00000000001755aa R15: 00007ffdfd3a3ed0 [ 1531.687855][T24323] [ 1531.922048][T24323] memory: usage 307196kB, limit 307200kB, failcnt 7502 [ 1531.930224][T24323] memory+swap: usage 307548kB, limit 9007199254740988kB, failcnt 0 [ 1531.938551][T24323] kmem: usage 305656kB, limit 9007199254740988kB, failcnt 0 [ 1531.958216][T24323] Memory cgroup stats for /syz0: [ 1531.958555][T24323] cache 0 [ 1531.969539][T24323] rss 1544192 [ 1531.978199][T24323] shmem 0 [ 1531.981190][T24323] mapped_file 0 [ 1531.984670][T24323] dirty 0 [ 1531.987627][T24323] writeback 0 [ 1532.004045][ T28] audit: type=1400 audit(1782166752.872:4850): avc: denied { write } for pid=26725 comm="syz.7.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1532.027430][T26726] IPVS: set_ctl: invalid protocol: 33 172.20.20.13:20003 [ 1532.036420][T24323] workingset_refault_anon 3584 [ 1532.043265][T24323] workingset_refault_file 2747 [ 1532.048270][T24323] swap 360448 [ 1532.052663][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.062868][T24323] swapcached 50704384 [ 1532.073023][T24323] pgpgin 1056726 [ 1532.079896][T24323] pgpgout 1056349 [ 1532.097898][T24323] pgfault 1137556 [ 1532.103273][ T5943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.120797][T26730] loop6: detected capacity change from 0 to 512 [ 1532.161497][T26730] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1532.183733][T26736] loop7: detected capacity change from 0 to 256 [ 1532.198727][ T5943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.217771][T24323] pgmajfault 1425 [ 1532.219224][T26730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.233089][T24323] inactive_anon 8192 [ 1532.258127][T24323] active_anon 4096 [ 1532.262326][T24323] inactive_file 0 [ 1532.266011][T24323] active_file 0 [ 1532.281313][T26730] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.295279][T24323] unevictable 1531904 [ 1532.306809][T24323] hierarchical_memory_limit 314572800 [ 1532.331898][T26742] loop2: detected capacity change from 0 to 512 [ 1532.348663][T24323] hierarchical_memsw_limit 9223372036854771712 [ 1532.355229][ T5943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.371004][ T28] audit: type=1400 audit(1782166753.242:4851): avc: denied { write } for pid=26728 comm="syz.6.5764" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1532.390822][T26742] EXT4-fs: Ignoring removed oldalloc option [ 1532.399677][T24323] total_cache 0 [ 1532.403377][T24323] total_rss 1544192 [ 1532.407254][T24323] total_shmem 0 [ 1532.410795][T24323] total_mapped_file 0 [ 1532.414906][T24323] total_dirty 0 [ 1532.418453][T24323] total_writeback 0 [ 1532.422081][T26730] netlink: 'syz.6.5764': attribute type 6 has an invalid length. [ 1532.422339][T24323] total_workingset_refault_anon 3584 [ 1532.435469][T24323] total_workingset_refault_file 2747 [ 1532.441013][T24323] total_swap 360448 [ 1532.444939][T24323] total_swapcached 50704384 [ 1532.450609][T24323] total_pgpgin 1056726 [ 1532.459208][T24323] total_pgpgout 1056349 [ 1532.463448][T24323] total_pgfault 1137556 [ 1532.467649][T24323] total_pgmajfault 1425 [ 1532.470516][T26742] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.5765: corrupted in-inode xattr: invalid ea_ino [ 1532.472298][T24323] total_inactive_anon 8192 [ 1532.485939][T26730] EXT4-fs (loop6): shut down requested (1) [ 1532.489949][T24323] total_active_anon 4096 [ 1532.499898][T24323] total_inactive_file 0 [ 1532.506968][T24323] total_active_file 0 [ 1532.511068][T24323] total_unevictable 1531904 [ 1532.515697][T24323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5413,pid=25169,uid=0 [ 1532.521383][T26730] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 1532.530858][T24323] Memory cgroup out of memory: Killed process 25169 (syz.0.5413) total-vm:93964kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1532.539728][ T28] audit: type=1400 audit(1782166753.382:4852): avc: denied { write } for pid=26728 comm="syz.6.5764" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1532.557584][T26742] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1532.587978][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1532.601924][T26730] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 1532.603647][ C0] EXT4-fs (loop2): initial error at time 1782166753: ext4_iget_extra_inode:5180: inode 15 [ 1532.622392][ C0] EXT4-fs (loop2): last error at time 1782166753: ext4_iget_extra_inode:5180: inode 15 [ 1532.632276][T26730] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 1532.642888][T26742] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.5765: couldn't read orphan inode 15 (err -117) [ 1532.654921][T26742] loop2: lost filesystem error report for type 5 error -117 [ 1532.656731][T26742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.657506][ T5943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.696707][ T28] audit: type=1400 audit(1782166753.562:4853): avc: denied { write } for pid=26734 comm="syz.2.5765" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1532.728559][T24542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.734122][T26737] can: request_module (can-proto-0) failed. [ 1532.801034][T26756] loop6: detected capacity change from 0 to 8192 [ 1532.828193][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.843858][T26715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.851016][T26715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.858253][T26715] bridge_slave_0: entered allmulticast mode [ 1532.864903][T26715] bridge_slave_0: entered promiscuous mode [ 1532.872377][T26715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.879474][T26715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.886765][T26715] bridge_slave_1: entered allmulticast mode [ 1532.893442][T26715] bridge_slave_1: entered promiscuous mode [ 1532.908755][T26763] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.5770' resets device [ 1532.918603][T26715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.930352][T26715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.938820][T26756] loop6: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 1532.953209][T26715] team0: Port device team_slave_0 added [ 1533.053491][T26756] loop6: p3 start 524032 is beyond EOD, truncated [ 1533.077371][T26768] 9pnet_fd: Insufficient options for proto=fd [ 1533.104417][T26715] team0: Port device team_slave_1 added [ 1533.132548][T26715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1533.155542][T26715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.215644][T26715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.302191][T26715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.312259][T26715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.338654][T26715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1533.351141][T26775] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5773'. [ 1533.416443][ T5943] bridge_slave_1: left allmulticast mode [ 1533.422201][ T5943] bridge_slave_1: left promiscuous mode [ 1533.427956][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.463806][ T5943] bridge_slave_0: left allmulticast mode [ 1533.473918][ T5943] bridge_slave_0: left promiscuous mode [ 1533.489416][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.696117][T26780] FAULT_INJECTION: forcing a failure. [ 1533.696117][T26780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1533.735489][T26780] CPU: 1 UID: 0 PID: 26780 Comm: syz.7.5775 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1533.735604][T26780] Tainted: [W]=WARN [ 1533.735613][T26780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1533.735627][T26780] Call Trace: [ 1533.735635][T26780] [ 1533.735644][T26780] __dump_stack+0x1d/0x30 [ 1533.735672][T26780] dump_stack_lvl+0x95/0xd0 [ 1533.735813][T26780] dump_stack+0x15/0x1b [ 1533.735837][T26780] should_fail_ex+0x25e/0x270 [ 1533.735874][T26780] should_fail+0xb/0x20 [ 1533.735923][T26780] should_fail_usercopy+0x1a/0x20 [ 1533.735957][T26780] _copy_from_user+0x1c/0xb0 [ 1533.736003][T26780] bpf_test_init+0xb9/0x130 [ 1533.736035][T26780] bpf_prog_test_run_flow_dissector+0x12c/0x360 [ 1533.736084][T26780] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1533.736212][T26780] bpf_prog_test_run+0x208/0x340 [ 1533.736253][T26780] __sys_bpf+0x8da/0xc30 [ 1533.736298][T26780] ? vfs_write+0x830/0x990 [ 1533.736344][T26780] __x64_sys_bpf+0x69/0x80 [ 1533.736428][T26780] x64_sys_call+0x10cb/0x3020 [ 1533.736517][T26780] do_syscall_64+0x136/0x3c0 [ 1533.736550][T26780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.736574][T26780] RIP: 0033:0x7f0b54acce59 [ 1533.736591][T26780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1533.736615][T26780] RSP: 002b:00007f0b53527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1533.736679][T26780] RAX: ffffffffffffffda RBX: 00007f0b54d45fa0 RCX: 00007f0b54acce59 [ 1533.736695][T26780] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1533.736713][T26780] RBP: 00007f0b53527090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.736731][T26780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.736749][T26780] R13: 00007f0b54d46038 R14: 00007f0b54d45fa0 R15: 00007ffe21e12008 [ 1533.736800][T26780] [ 1533.991398][T26788] FAULT_INJECTION: forcing a failure. [ 1533.991398][T26788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.004668][T26788] CPU: 1 UID: 0 PID: 26788 Comm: syz.6.5778 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1534.004710][T26788] Tainted: [W]=WARN [ 1534.004719][T26788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1534.004815][T26788] Call Trace: [ 1534.004825][T26788] [ 1534.004835][T26788] __dump_stack+0x1d/0x30 [ 1534.004860][T26788] dump_stack_lvl+0x95/0xd0 [ 1534.004911][T26788] dump_stack+0x15/0x1b [ 1534.004935][T26788] should_fail_ex+0x25e/0x270 [ 1534.004991][T26788] should_fail+0xb/0x20 [ 1534.005019][T26788] should_fail_usercopy+0x1a/0x20 [ 1534.005092][T26788] _copy_to_user+0x20/0xa0 [ 1534.005157][T26788] simple_read_from_buffer+0xb5/0x130 [ 1534.005192][T26788] proc_fail_nth_read+0x10e/0x150 [ 1534.005217][T26788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.005238][T26788] vfs_read+0x18e/0x7c0 [ 1534.005312][T26788] ? __rcu_read_unlock+0x4e/0x70 [ 1534.005347][T26788] ? __fget_files+0x184/0x1c0 [ 1534.005432][T26788] ? mutex_lock+0x57/0x90 [ 1534.005464][T26788] ksys_read+0xdc/0x1a0 [ 1534.005487][T26788] __x64_sys_read+0x40/0x50 [ 1534.005511][T26788] x64_sys_call+0x2886/0x3020 [ 1534.005608][T26788] do_syscall_64+0x136/0x3c0 [ 1534.005636][T26788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.005665][T26788] RIP: 0033:0x7f0185b7d68e [ 1534.005687][T26788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1534.005757][T26788] RSP: 002b:00007f0184616fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1534.005813][T26788] RAX: ffffffffffffffda RBX: 00007f01846176c0 RCX: 00007f0185b7d68e [ 1534.005841][T26788] RDX: 000000000000000f RSI: 00007f01846170a0 RDI: 0000000000000003 [ 1534.005855][T26788] RBP: 00007f0184617090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.005868][T26788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.005882][T26788] R13: 00007f0185e36038 R14: 00007f0185e35fa0 R15: 00007ffeb816f7b8 [ 1534.005906][T26788] [ 1534.290199][T26795] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.5780' resets device [ 1534.331783][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1534.342790][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.354235][ T5943] bond0 (unregistering): Released all slaves [ 1534.403270][T26715] hsr_slave_0: entered promiscuous mode [ 1534.436726][T26715] hsr_slave_1: entered promiscuous mode [ 1534.480656][ T5943] hsr_slave_0: left promiscuous mode [ 1534.496738][ T5943] hsr_slave_1: left promiscuous mode [ 1534.505427][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1534.524988][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1534.613048][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1534.629590][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.654333][ T5943] veth1_macvtap: left promiscuous mode [ 1534.664808][ T5943] veth0_macvtap: left promiscuous mode [ 1534.678463][ T5943] veth1_vlan: left promiscuous mode [ 1534.688825][ T5943] veth0_vlan: left promiscuous mode [ 1534.801016][T20525] udevd[20525]: inotify_add_watch(7, /dev/loop6p32, 10) failed: No such file or directory [ 1534.804615][T20522] udevd[20522]: inotify_add_watch(7, /dev/loop6p31, 10) failed: No such file or directory [ 1534.822223][T20521] udevd[20521]: inotify_add_watch(7, /dev/loop6p30, 10) failed: No such file or directory [ 1534.833660][T20526] udevd[20526]: inotify_add_watch(7, /dev/loop6p38, 10) failed: No such file or directory [ 1534.849766][T20528] udevd[20528]: inotify_add_watch(7, /dev/loop6p34, 10) failed: No such file or directory [ 1534.857455][T20530] udevd[20530]: inotify_add_watch(7, /dev/loop6p36, 10) failed: No such file or directory [ 1534.871515][T20523] udevd[20523]: inotify_add_watch(7, /dev/loop6p33, 10) failed: No such file or directory [ 1534.883204][T20527] udevd[20527]: inotify_add_watch(7, /dev/loop6p35, 10) failed: No such file or directory [ 1534.895293][T20528] udevd[20528]: inotify_add_watch(7, /dev/loop6p43, 10) failed: No such file or directory [ 1534.895492][T20235] udevd[20235]: inotify_add_watch(7, /dev/loop6p39, 10) failed: No such file or directory [ 1534.924903][T26812] loop6: detected capacity change from 0 to 256 [ 1535.157309][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 1535.332307][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 1535.639741][T26807] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1535.647361][T26807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1535.771738][T26837] tmpfs: Bad value for 'context' [ 1535.877837][T26834] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.5790' resets device [ 1535.925486][ T28] audit: type=1400 audit(1782166756.782:4854): avc: denied { write } for pid=26823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1535.969097][ T28] audit: type=1400 audit(1782166756.832:4855): avc: denied { write } for pid=26848 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.015800][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1536.136995][ T28] audit: type=1400 audit(1782166757.002:4856): avc: denied { write } for pid=26859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.184615][ T28] audit: type=1400 audit(1782166757.052:4857): avc: denied { write } for pid=26872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.223061][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1536.381733][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1536.393622][ T28] audit: type=1400 audit(1782166757.212:4858): avc: denied { write } for pid=26875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.420195][ T28] audit: type=1400 audit(1782166757.212:4859): avc: denied { write } for pid=26889 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.525270][T26715] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1536.541709][T26715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1536.563755][T26715] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1536.583873][T26715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1536.597539][T26715] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1536.618996][T26715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1536.743735][T26715] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1536.811291][T26715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1536.951280][T26918] loop6: detected capacity change from 0 to 256 [ 1537.114750][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1537.216610][T26715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.229786][T26715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.240116][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.247218][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.003340][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.010497][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.065397][T26940] tmpfs: Bad value for 'context' [ 1538.374848][T26946] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.5804' resets device [ 1538.402512][T26946] loop2: detected capacity change from 0 to 512 [ 1538.431063][T26946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1538.460473][T26946] EXT4-fs: Ignoring removed mblk_io_submit option [ 1538.480450][T26946] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1538.528027][T26946] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1538.557366][T26946] EXT4-fs (loop2): 1 truncate cleaned up [ 1538.563763][T26946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.606286][T26963] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1538.623926][T26715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.644710][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1538.644730][ T28] audit: type=1400 audit(1782166759.482:4862): avc: denied { write } for pid=26923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.735522][T26962] pimreg: entered allmulticast mode [ 1538.768607][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.830277][T26962] veth1_to_bond: entered allmulticast mode [ 1538.885828][ T28] audit: type=1400 audit(1782166759.632:4863): avc: denied { write } for pid=26969 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.918196][T26961] veth1_to_bond: left allmulticast mode [ 1538.957494][T26961] pimreg: left allmulticast mode [ 1538.999141][T26990] 9pnet_fd: Insufficient options for proto=fd [ 1539.034899][T26990] loop7: detected capacity change from 0 to 512 [ 1539.062934][ T28] audit: type=1400 audit(1782166759.922:4864): avc: denied { audit_read } for pid=26983 comm="syz.6.5809" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1539.154433][T26990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.171318][T26990] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.190475][T26715] veth0_vlan: entered promiscuous mode [ 1539.211833][ T28] audit: type=1400 audit(1782166760.082:4865): avc: denied { write } for pid=26987 comm="syz.7.5810" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1539.289388][ T28] audit: type=1400 audit(1782166760.112:4866): avc: denied { write } for pid=26976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1539.337825][T26715] veth1_vlan: entered promiscuous mode [ 1539.353423][T26715] veth0_macvtap: entered promiscuous mode [ 1539.361100][T26715] veth1_macvtap: entered promiscuous mode [ 1539.371665][T26715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.380599][T26715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.413660][ T28] audit: type=1400 audit(1782166760.122:4867): avc: denied { write } for pid=26987 comm="syz.7.5810" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1539.933992][T27029] loop2: detected capacity change from 0 to 256 [ 1540.172863][ T28] audit: type=1400 audit(1782166760.272:4868): avc: denied { write } for pid=27014 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1540.208382][ T5941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.225182][ T5941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.250649][ T5941] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.276350][ T5941] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.294595][ T28] audit: type=1400 audit(1782166761.162:4869): avc: denied { write } for pid=27019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1540.366390][T20630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.000328][T27043] loop8: detected capacity change from 0 to 256 [ 1541.260865][ T28] audit: type=1400 audit(1782166762.132:4870): avc: denied { write } for pid=27040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.470098][T27048] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.5817' resets device [ 1541.493529][T27048] loop6: detected capacity change from 0 to 512 [ 1541.548707][T27048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1541.574157][T27055] loop7: detected capacity change from 0 to 512 [ 1541.584047][T27057] sg_write: data in/out 811008/132 bytes for SCSI command 0x20-- guessing data in; [ 1541.584047][T27057] program syz.0.5820 not setting count and/or reply_len properly [ 1541.599687][T27060] netlink: 'syz.2.5821': attribute type 49 has an invalid length. [ 1541.615596][T27048] EXT4-fs: Ignoring removed mblk_io_submit option [ 1541.621069][T27057] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1541.644009][T27055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.656597][T27055] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.688325][T27048] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1541.696884][T27048] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1541.707790][T27048] EXT4-fs (loop6): 1 truncate cleaned up [ 1541.726234][T27048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.744804][T27048] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.5817: lblock 0 mapped to illegal pblock 4 (length 1) [ 1541.761207][T27048] EXT4-fs (loop6): Remounting filesystem read-only [ 1541.791220][ T28] audit: type=1400 audit(1782166762.612:4871): avc: denied { write } for pid=27053 comm="syz.7.5818" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1541.827690][T24542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.863866][T27117] loop6: detected capacity change from 0 to 256 [ 1543.888787][T27117] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1544.196737][T27118] loop8: detected capacity change from 0 to 512 [ 1544.858705][T27118] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1545.184490][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1545.184510][ T28] audit: type=1400 audit(1782166766.052:4876): avc: denied { write } for pid=27120 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.529413][T24542] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 1545.544020][T27118] EXT4-fs (loop8): 1 truncate cleaned up [ 1545.561266][T27118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1545.574982][T24542] FAT-fs (loop6): Filesystem has been set read-only [ 1545.603380][T24542] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 1545.648426][ T28] audit: type=1400 audit(1782166766.512:4877): avc: denied { write } for pid=27115 comm="syz.8.5828" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1545.681561][T27118] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1545.685845][ T28] audit: type=1400 audit(1782166766.532:4878): avc: denied { write } for pid=27115 comm="syz.8.5828" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1545.758260][T27118] EXT4-fs (loop8): Remounting filesystem read-only [ 1545.795716][T26715] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.814367][T27133] syzkaller0: entered promiscuous mode [ 1545.834686][ T28] audit: type=1400 audit(1782166766.692:4879): avc: denied { write } for pid=27126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.869590][T27133] syzkaller0: entered allmulticast mode [ 1545.935255][ T28] audit: type=1400 audit(1782166766.802:4880): avc: denied { write } for pid=27144 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.963567][T20630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.043407][T13198] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.154445][T13198] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.327502][T13198] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.377256][ T28] audit: type=1400 audit(1782166767.242:4881): avc: denied { write } for pid=27148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.424248][T27157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.432743][T27157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.442760][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5835'. [ 1546.494767][ T28] audit: type=1400 audit(1782166767.362:4882): avc: denied { write } for pid=27169 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.623404][T13198] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.779598][T13198] bridge_slave_1: left allmulticast mode [ 1546.790840][T27190] loop2: detected capacity change from 0 to 512 [ 1546.795757][T13198] bridge_slave_1: left promiscuous mode [ 1546.817861][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.827956][T27190] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1546.836060][T27190] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1546.845276][ T28] audit: type=1400 audit(1782166767.712:4883): avc: denied { write } for pid=27173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.869652][T27190] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5841: invalid indirect mapped block 11 (level 0) [ 1546.894726][T13198] bridge_slave_0: left allmulticast mode [ 1546.908059][T13198] bridge_slave_0: left promiscuous mode [ 1546.918296][T27190] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1546.921304][T27190] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5841: attempt to clear invalid blocks 1024 len 1 [ 1546.931004][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1546.931235][ C0] EXT4-fs (loop2): initial error at time 1782166767: ext4_free_branches:1023: inode 13 [ 1546.931344][ C0] EXT4-fs (loop2): last error at time 1782166767: ext4_free_branches:1023: inode 13 [ 1546.991901][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.005430][T27190] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1547.019529][ T28] audit: type=1400 audit(1782166767.872:4884): avc: denied { write } for pid=27199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.026832][T27190] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1547.077782][T27190] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5841: invalid indirect mapped block 1819239214 (level 0) [ 1547.091865][T27190] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1547.092061][T27190] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5841: invalid indirect mapped block 33554432 (level 2) [ 1547.114945][T27190] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1547.115906][T27190] EXT4-fs (loop2): 1 truncate cleaned up [ 1547.220188][T27190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1547.232679][T13198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.248626][T13198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.262102][ T28] audit: type=1400 audit(1782166768.132:4885): avc: denied { write } for pid=27204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.286526][T13198] bond0 (unregistering): Released all slaves [ 1547.300479][T27224] ip6_vti0: entered promiscuous mode [ 1547.674600][T13198] hsr_slave_0: left promiscuous mode [ 1547.681176][T13198] hsr_slave_1: left promiscuous mode [ 1547.686953][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1547.694384][T13198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.703221][T27241] loop7: detected capacity change from 0 to 128 [ 1547.708739][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1547.725518][T13198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.735031][T24757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.764012][T13198] veth1_macvtap: left promiscuous mode [ 1547.769492][T27241] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1547.773697][T13198] veth0_macvtap: left promiscuous mode [ 1547.790700][T13198] veth1_vlan: left promiscuous mode [ 1547.796100][T13198] veth0_vlan: left promiscuous mode [ 1547.807310][T27241] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.913453][T13198] team0 (unregistering): Port device team_slave_1 removed [ 1547.946975][T13198] team0 (unregistering): Port device team_slave_0 removed [ 1548.071280][T20630] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1548.530899][T27269] xt_hashlimit: size too large, truncated to 1048576 [ 1548.537711][T27269] xt_hashlimit: max too large, truncated to 1048576 [ 1548.779715][T27172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.859082][T27172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.940032][T27172] bridge_slave_0: entered allmulticast mode [ 1549.164942][T27172] bridge_slave_0: entered promiscuous mode [ 1549.202375][T27172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.251667][T27172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.292845][T27172] bridge_slave_1: entered allmulticast mode [ 1549.331157][T27172] bridge_slave_1: entered promiscuous mode [ 1549.394582][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5856'. [ 1549.455285][T27172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.504831][T27172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.606332][T27309] loop8: detected capacity change from 0 to 512 [ 1549.622417][T27172] team0: Port device team_slave_0 added [ 1549.652544][T27172] team0: Port device team_slave_1 added [ 1549.705862][T27309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1549.767178][T27172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.779513][T27309] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1549.810303][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.953141][T27172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.974956][T27172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.000440][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.103763][T27172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.213705][T27172] hsr_slave_0: entered promiscuous mode [ 1550.238770][T27172] hsr_slave_1: entered promiscuous mode [ 1550.268937][T27172] debugfs: 'hsr0' already exists in 'hsr' [ 1550.274754][T27172] Cannot create hsr debugfs directory [ 1550.336589][T26715] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.484222][T27362] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5863'. [ 1550.514617][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 1550.514637][ T28] audit: type=1400 audit(1782166771.382:4956): avc: denied { write } for pid=27339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.560107][T27362] sctp: [Deprecated]: syz.7.5863 (pid 27362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1550.560107][T27362] Use struct sctp_sack_info instead [ 1550.628034][ T28] audit: type=1400 audit(1782166771.482:4957): avc: denied { write } for pid=27366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.698988][T27364] loop7: detected capacity change from 0 to 8192 [ 1550.711203][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1550.768367][T27377] 9pnet_fd: Insufficient options for proto=fd [ 1550.829019][ T28] audit: type=1400 audit(1782166771.642:4958): avc: denied { write } for pid=27374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.869656][ T28] audit: type=1400 audit(1782166771.702:4959): avc: denied { write } for pid=27387 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.898465][T27364] loop7: p1 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 1550.898892][T27364] loop7: p1 start 16777216 is beyond EOD, [ 1551.004237][T27172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1551.022434][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1551.032017][T27172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1551.041934][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1551.058148][T27172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1551.065680][T27364] truncated [ 1551.066542][T27377] loop8: detected capacity change from 0 to 512 [ 1551.073618][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1551.083066][T27364] loop7: p5 start 16777216 is beyond EOD, truncated [ 1551.094041][T27364] loop7: p6 start 16777216 is beyond EOD, truncated [ 1551.102028][T27172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1551.110355][T27364] loop7: p7 start 16777216 is beyond EOD, truncated [ 1551.117301][T27364] loop7: p8 start 16777216 is beyond EOD, truncated [ 1551.126469][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1551.134985][T27377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.135255][T27364] loop7: p9 start 16777216 is beyond EOD, truncated [ 1551.148990][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1551.155546][T27364] loop7: p10 start 16777216 is beyond EOD, truncated [ 1551.168366][T27364] loop7: p11 start 16777216 is beyond EOD, truncated [ 1551.175183][T27364] loop7: p12 start 16777216 is beyond EOD, truncated [ 1551.182187][T27364] loop7: p13 start 16777216 is beyond EOD, truncated [ 1551.189079][T27364] loop7: p14 start 16777216 is beyond EOD, truncated [ 1551.195869][T27364] loop7: p15 start 16777216 is beyond EOD, truncated [ 1551.197722][T27377] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1551.202906][T27364] loop7: p16 start 16777216 is beyond EOD, truncated [ 1551.220289][T27364] loop7: p17 start 16777216 is beyond EOD, truncated [ 1551.227244][T27364] loop7: p18 start 16777216 is beyond EOD, truncated [ 1551.234517][T27364] loop7: p19 start 16777216 is beyond EOD, truncated [ 1551.241525][T27364] loop7: p20 start 16777216 is beyond EOD, truncated [ 1551.248872][T27364] loop7: p21 start 16777216 is beyond EOD, truncated [ 1551.255832][T27364] loop7: p22 start 16777216 is beyond EOD, truncated [ 1551.268149][T27364] loop7: p23 start 16777216 is beyond EOD, truncated [ 1551.276907][T27364] loop7: p24 start 16777216 is beyond EOD, truncated [ 1551.297588][ T28] audit: type=1400 audit(1782166772.162:4960): avc: denied { write } for pid=27375 comm="syz.8.5864" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1551.319287][T27172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.336836][T27364] loop7: p25 start 16777216 is beyond EOD, truncated [ 1551.369243][T27364] loop7: p26 start 16777216 is beyond EOD, truncated [ 1551.390992][ T28] audit: type=1400 audit(1782166772.192:4961): avc: denied { write } for pid=27375 comm="syz.8.5864" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1551.413361][T27364] loop7: p27 start 16777216 is beyond EOD, truncated [ 1551.434647][T27364] loop7: p28 start 16777216 is beyond EOD, truncated [ 1551.455955][T27364] loop7: p29 start 16777216 is beyond EOD, truncated [ 1551.489582][T27364] loop7: p30 start 16777216 is beyond EOD, truncated [ 1551.497379][T27172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.510594][T27364] loop7: p31 start 16777216 is beyond EOD, truncated [ 1551.521139][T27364] loop7: p32 start 16777216 is beyond EOD, truncated [ 1551.521669][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.527888][T27364] loop7: p33 start 16777216 is beyond EOD, truncated [ 1551.527914][T27364] loop7: p34 start 16777216 is beyond EOD, [ 1551.535007][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.601420][T27364] truncated [ 1551.604956][T27364] loop7: p35 start 16777216 is beyond EOD, truncated [ 1551.624996][T27364] loop7: p36 start 16777216 is beyond EOD, truncated [ 1551.632131][T27364] loop7: p37 start 16777216 is beyond EOD, truncated [ 1551.638966][T27364] loop7: p38 start 16777216 is beyond EOD, truncated [ 1551.645837][T27364] loop7: p39 start 16777216 is beyond EOD, truncated [ 1551.652559][T27364] loop7: p40 start 16777216 is beyond EOD, truncated [ 1551.659431][T27364] loop7: p41 start 16777216 is beyond EOD, truncated [ 1551.666184][T27364] loop7: p42 start 16777216 is beyond EOD, truncated [ 1551.739580][T27364] loop7: p43 start 16777216 is beyond EOD, truncated [ 1551.779960][T27364] loop7: p44 start 16777216 is beyond EOD, truncated [ 1551.823215][T27364] loop7: p45 start 16777216 is beyond EOD, truncated [ 1551.861420][T27364] loop7: p46 start 16777216 is beyond EOD, truncated [ 1551.897857][T27364] loop7: p47 start 16777216 is beyond EOD, truncated [ 1551.942006][T27364] loop7: p48 start 16777216 is beyond EOD, truncated [ 1551.980774][T27364] loop7: p49 start 16777216 is beyond EOD, truncated [ 1552.026918][T27364] loop7: p50 start 16777216 is beyond EOD, truncated [ 1552.065367][T27364] loop7: p51 start 16777216 is beyond EOD, truncated [ 1552.099006][T27364] loop7: p52 start 16777216 is beyond EOD, truncated [ 1552.143329][T27364] loop7: p53 start 16777216 is beyond EOD, truncated [ 1552.214586][T27364] loop7: p54 start 16777216 is beyond EOD, truncated [ 1552.238923][T27364] loop7: p55 start 16777216 is beyond EOD, truncated [ 1552.272757][T27364] loop7: p56 start 16777216 is beyond EOD, truncated [ 1552.285024][T27364] loop7: p57 start 16777216 is beyond EOD, truncated [ 1552.309494][T27364] loop7: p58 start 16777216 is beyond EOD, truncated [ 1552.328257][T27364] loop7: p59 start 16777216 is beyond EOD, truncated [ 1552.348226][T26715] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.360505][T27364] loop7: p60 start 16777216 is beyond EOD, truncated [ 1552.374580][T27364] loop7: p61 start 16777216 is beyond EOD, truncated [ 1552.389574][T27364] loop7: p62 start 16777216 is beyond EOD, truncated [ 1552.407852][T27364] loop7: p63 start 16777216 is beyond EOD, truncated [ 1552.421012][T27364] loop7: p64 start 16777216 is beyond EOD, truncated [ 1552.437094][T27364] loop7: p65 start 16777216 is beyond EOD, truncated [ 1552.446928][T27364] loop7: p66 start 16777216 is beyond EOD, truncated [ 1552.457788][T27364] loop7: p67 start 16777216 is beyond EOD, truncated [ 1552.464827][T27364] loop7: p68 start 16777216 is beyond EOD, truncated [ 1552.472021][T27364] loop7: p69 start 16777216 is beyond EOD, truncated [ 1552.479114][T27364] loop7: p70 start 16777216 is beyond EOD, truncated [ 1552.485968][T27364] loop7: p71 start 16777216 is beyond EOD, truncated [ 1552.492998][T27364] loop7: p72 start 16777216 is beyond EOD, truncated [ 1552.500518][T27364] loop7: p73 start 16777216 is beyond EOD, truncated [ 1552.507268][T27364] loop7: p74 start 16777216 is beyond EOD, truncated [ 1552.516614][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.523840][T13198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.688132][T27364] loop7: p75 start 16777216 is beyond EOD, truncated [ 1553.387188][T27364] loop7: p76 start 16777216 is beyond EOD, truncated [ 1553.466955][T27364] loop7: p77 start 16777216 is beyond EOD, truncated [ 1553.486687][T27364] loop7: p78 start 16777216 is beyond EOD, truncated [ 1553.493698][T27364] loop7: p79 start 16777216 is beyond EOD, truncated [ 1553.500613][T27364] loop7: p80 start 16777216 is beyond EOD, truncated [ 1553.507450][T27364] loop7: p81 start 16777216 is beyond EOD, truncated [ 1553.514236][T27364] loop7: p82 start 16777216 is beyond EOD, truncated [ 1553.521139][T27364] loop7: p83 start 16777216 is beyond EOD, truncated [ 1553.528432][T27364] loop7: p84 start 16777216 is beyond EOD, truncated [ 1553.535300][T27364] loop7: p85 start 16777216 is beyond EOD, truncated [ 1553.542286][T27364] loop7: p86 start 16777216 is beyond EOD, truncated [ 1553.678208][T27364] loop7: p87 start 16777216 is beyond EOD, truncated [ 1553.698696][T27364] loop7: p88 start 16777216 is beyond EOD, truncated [ 1553.732948][T27364] loop7: p89 start 16777216 is beyond EOD, truncated [ 1553.757070][T27364] loop7: p90 start 16777216 is beyond EOD, truncated [ 1553.764338][T27364] loop7: p91 start 16777216 is beyond EOD, truncated [ 1553.771798][T27364] loop7: p92 start 16777216 is beyond EOD, truncated [ 1553.778917][T27364] loop7: p93 start 16777216 is beyond EOD, truncated [ 1553.785688][T27364] loop7: p94 start 16777216 is beyond EOD, truncated [ 1553.792453][T27364] loop7: p95 start 16777216 is beyond EOD, truncated [ 1553.799279][T27364] loop7: p96 start 16777216 is beyond EOD, truncated [ 1553.806033][T27364] loop7: p97 start 16777216 is beyond EOD, truncated [ 1553.812889][T27364] loop7: p98 start 16777216 is beyond EOD, truncated [ 1553.819750][T27364] loop7: p99 start 16777216 is beyond EOD, truncated [ 1553.826507][T27364] loop7: p100 start 16777216 is beyond EOD, truncated [ 1553.833422][T27364] loop7: p101 start 16777216 is beyond EOD, truncated [ 1553.837710][ T28] audit: type=1400 audit(1782166774.702:4962): avc: denied { write } for pid=27401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1553.858212][T27364] loop7: p102 start 16777216 is beyond EOD, truncated [ 1553.886948][T27364] loop7: p103 start 16777216 is beyond EOD, truncated [ 1553.908024][T27364] loop7: p104 start 16777216 is beyond EOD, truncated [ 1553.916898][T27364] loop7: p105 start 16777216 is beyond EOD, truncated [ 1553.938032][T27364] loop7: p106 start 16777216 is beyond EOD, truncated [ 1553.951878][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1553.984200][T27364] loop7: p107 start 16777216 is beyond EOD, truncated [ 1554.003077][T27364] loop7: p108 start 16777216 is beyond EOD, truncated [ 1554.010154][ T28] audit: type=1400 audit(1782166774.782:4963): avc: denied { write } for pid=27437 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1554.030158][T27442] FAULT_INJECTION: forcing a failure. [ 1554.030158][T27442] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.046960][T27364] loop7: p109 start 16777216 is beyond EOD, truncated [ 1554.048322][T27442] CPU: 0 UID: 0 PID: 27442 Comm: syz.2.5871 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1554.048471][T27442] Tainted: [W]=WARN [ 1554.048497][T27442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1554.048562][T27442] Call Trace: [ 1554.048595][T27442] [ 1554.048637][T27442] __dump_stack+0x1d/0x30 [ 1554.048825][T27442] dump_stack_lvl+0x95/0xd0 [ 1554.048916][T27442] dump_stack+0x15/0x1b [ 1554.048989][T27442] should_fail_ex+0x25e/0x270 [ 1554.049048][T27442] should_failslab+0x8c/0xb0 [ 1554.049134][T27442] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 1554.049258][T27442] ? audit_log_start+0x34c/0x730 [ 1554.049375][T27442] ? audit_log_start+0x34c/0x730 [ 1554.049498][T27442] audit_log_start+0x34c/0x730 [ 1554.049684][T27442] audit_seccomp+0x49/0x110 [ 1554.049863][T27442] __seccomp_filter+0x905/0x1370 [ 1554.049976][T27442] ? __se_sys_futex+0x2f6/0x370 [ 1554.050092][T27442] ? xfd_validate_state+0x45/0xf0 [ 1554.050210][T27442] __secure_computing+0x7d/0x150 [ 1554.050361][T27442] do_syscall_64+0xd4/0x3c0 [ 1554.050468][T27442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.050562][T27442] RIP: 0033:0x7f536141d68e [ 1554.050624][T27442] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1554.050696][T27442] RSP: 002b:00007f535feaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1554.050824][T27442] RAX: ffffffffffffffda RBX: 00007f535feaf6c0 RCX: 00007f536141d68e [ 1554.050918][T27442] RDX: 000000000000000f RSI: 00007f535feaf0a0 RDI: 0000000000000003 [ 1554.050977][T27442] RBP: 00007f535feaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.051027][T27442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.051172][T27442] R13: 00007f53616d6038 R14: 00007f53616d5fa0 R15: 00007ffffe79b488 [ 1554.051245][T27442] [ 1554.055294][T27442] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1554.064813][T27364] loop7: p110 start 16777216 is beyond EOD, truncated [ 1554.064843][T27364] loop7: p111 start 16777216 is beyond EOD, [ 1554.091292][T27442] audit: out of memory in audit_log_start [ 1554.094005][T27364] truncated [ 1554.094016][T27364] loop7: p112 start 16777216 is beyond EOD, truncated [ 1554.319319][T27364] loop7: p113 start 16777216 is beyond EOD, truncated [ 1554.326230][T27364] loop7: p114 start 16777216 is beyond EOD, truncated [ 1554.358981][T27364] loop7: p115 start 16777216 is beyond EOD, truncated [ 1554.377413][T27364] loop7: p116 start 16777216 is beyond EOD, truncated [ 1554.396683][T27364] loop7: p117 start 16777216 is beyond EOD, truncated [ 1554.420334][T27364] loop7: p118 start 16777216 is beyond EOD, truncated [ 1554.427303][T27364] loop7: p119 start 16777216 is beyond EOD, truncated [ 1554.434495][T27364] loop7: p120 start 16777216 is beyond EOD, truncated [ 1554.438001][T27172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.443534][T27364] loop7: p121 start 16777216 is beyond EOD, truncated [ 1554.455576][T27364] loop7: p122 start 16777216 is beyond EOD, truncated [ 1554.462674][T27364] loop7: p123 start 16777216 is beyond EOD, truncated [ 1554.469772][T27364] loop7: p124 start 16777216 is beyond EOD, truncated [ 1554.476612][T27364] loop7: p125 start 16777216 is beyond EOD, truncated [ 1554.507112][T27364] loop7: p126 start 16777216 is beyond EOD, truncated [ 1554.530119][T27471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5875'. [ 1554.552874][T27364] loop7: p127 start 16777216 is beyond EOD, truncated [ 1554.574956][T27364] loop7: p128 start 16777216 is beyond EOD, truncated [ 1554.591419][T27364] loop7: p129 start 16777216 is beyond EOD, truncated [ 1554.598646][T27364] loop7: p130 start 16777216 is beyond EOD, truncated [ 1554.605468][T27364] loop7: p131 start 16777216 is beyond EOD, truncated [ 1554.612535][T27364] loop7: p132 start 16777216 is beyond EOD, truncated [ 1554.619504][T27364] loop7: p133 start 16777216 is beyond EOD, truncated [ 1554.626544][T27364] loop7: p134 start 16777216 is beyond EOD, truncated [ 1554.633569][T27364] loop7: p135 start 16777216 is beyond EOD, truncated [ 1554.640639][T27364] loop7: p136 start 16777216 is beyond EOD, truncated [ 1554.647464][T27364] loop7: p137 start 16777216 is beyond EOD, truncated [ 1554.654537][T27364] loop7: p138 start 16777216 is beyond EOD, truncated [ 1554.765818][T27364] loop7: p139 start 16777216 is beyond EOD, truncated [ 1554.772901][T27364] loop7: p140 start 16777216 is beyond EOD, truncated [ 1554.782696][T27364] loop7: p141 start 16777216 is beyond EOD, truncated [ 1554.789729][T27364] loop7: p142 start 16777216 is beyond EOD, truncated [ 1554.829730][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1554.849269][T27364] loop7: p143 start 16777216 is beyond EOD, truncated [ 1555.441421][T27491] loop2: detected capacity change from 0 to 256 [ 1555.798316][T27364] loop7: p144 start 16777216 is beyond EOD, truncated [ 1555.816409][T27364] loop7: p145 start 16777216 is beyond EOD, truncated [ 1555.969639][T27364] loop7: p146 start 16777216 is beyond EOD, truncated [ 1555.980441][T27364] loop7: p147 start 16777216 is beyond EOD, truncated [ 1556.002425][T27364] loop7: p148 start 16777216 is beyond EOD, truncated [ 1556.808149][T27364] loop7: p149 start 16777216 is beyond EOD, truncated [ 1556.819432][T27364] loop7: p150 start 16777216 is beyond EOD, truncated [ 1556.827583][T27364] loop7: p151 start 16777216 is beyond EOD, truncated [ 1556.834573][T27364] loop7: p152 start 16777216 is beyond EOD, truncated [ 1556.841738][T27364] loop7: p153 start 16777216 is beyond EOD, truncated [ 1556.858106][T27491] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1557.038124][T27364] loop7: p154 start 16777216 is beyond EOD, truncated [ 1557.057720][T27364] loop7: p155 start 16777216 is beyond EOD, truncated [ 1557.064876][T27364] loop7: p156 start 16777216 is beyond EOD, truncated [ 1557.799309][T27364] loop7: p157 start 16777216 is beyond EOD, truncated [ 1557.806166][T27364] loop7: p158 start 16777216 is beyond EOD, truncated [ 1557.813284][T27364] loop7: p159 start 16777216 is beyond EOD, truncated [ 1557.820264][T27364] loop7: p160 start 16777216 is beyond EOD, truncated [ 1557.827109][T27364] loop7: p161 start 16777216 is beyond EOD, truncated [ 1557.834071][T27364] loop7: p162 start 16777216 is beyond EOD, truncated [ 1557.841054][T27364] loop7: p163 start 16777216 is beyond EOD, truncated [ 1557.847863][T27364] loop7: p164 start 16777216 is beyond EOD, truncated [ 1558.058119][T27364] loop7: p165 start 16777216 is beyond EOD, truncated [ 1558.073469][T27364] loop7: p166 start 16777216 is beyond EOD, truncated [ 1558.607431][T27364] loop7: p167 start 16777216 is beyond EOD, truncated [ 1558.643697][T27364] loop7: p168 start 16777216 is beyond EOD, truncated [ 1558.699500][T27364] loop7: p169 start 16777216 is beyond EOD, truncated [ 1558.717094][T27511] FAULT_INJECTION: forcing a failure. [ 1558.717094][T27511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1558.739530][T27364] loop7: p170 start 16777216 is beyond EOD, truncated [ 1558.746378][T27364] loop7: p171 start 16777216 is beyond EOD, truncated [ 1558.753533][T27364] loop7: p172 start 16777216 is beyond EOD, truncated [ 1558.760404][T27364] loop7: p173 start 16777216 is beyond EOD, truncated [ 1558.767221][T27364] loop7: p174 start 16777216 is beyond EOD, truncated [ 1558.774227][T27364] loop7: p175 start 16777216 is beyond EOD, truncated [ 1558.781106][T27364] loop7: p176 start 16777216 is beyond EOD, truncated [ 1558.788001][T27364] loop7: p177 start 16777216 is beyond EOD, truncated [ 1558.794846][T27364] loop7: p178 start 16777216 is beyond EOD, truncated [ 1558.799968][T27511] CPU: 1 UID: 0 PID: 27511 Comm: syz.2.5879 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1558.800085][T27511] Tainted: [W]=WARN [ 1558.800108][T27511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1558.800195][T27511] Call Trace: [ 1558.800217][T27511] [ 1558.800248][T27511] __dump_stack+0x1d/0x30 [ 1558.800415][T27511] dump_stack_lvl+0x95/0xd0 [ 1558.800480][T27511] dump_stack+0x15/0x1b [ 1558.800576][T27511] should_fail_ex+0x25e/0x270 [ 1558.800679][T27511] should_fail+0xb/0x20 [ 1558.800790][T27511] should_fail_usercopy+0x1a/0x20 [ 1558.800879][T27511] _copy_to_iter+0x37f/0xea0 [ 1558.800992][T27511] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 1558.801116][T27511] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1558.801197][T27511] __skb_datagram_iter+0xc6/0x680 [ 1558.801265][T27511] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1558.801396][T27511] skb_copy_datagram_iter+0x3f/0xf0 [ 1558.801477][T27511] netlink_recvmsg+0x1a8/0x550 [ 1558.801661][T27511] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1558.801699][T27511] sock_recvmsg+0xf5/0x120 [ 1558.801734][T27511] ____sys_recvmsg+0xf5/0x280 [ 1558.801906][T27511] ___sys_recvmsg+0x11f/0x3a0 [ 1558.802001][T27511] do_recvmmsg+0x1e5/0x560 [ 1558.802080][T27511] ? get_timespec64+0xd2/0x100 [ 1558.802182][T27511] __x64_sys_recvmmsg+0xfb/0x170 [ 1558.802275][T27511] x64_sys_call+0x80f/0x3020 [ 1558.802360][T27511] do_syscall_64+0x136/0x3c0 [ 1558.802442][T27511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.802607][T27511] RIP: 0033:0x7f536145ce59 [ 1558.802662][T27511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.802724][T27511] RSP: 002b:00007f535feaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1558.802849][T27511] RAX: ffffffffffffffda RBX: 00007f53616d5fa0 RCX: 00007f536145ce59 [ 1558.802949][T27511] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1558.803006][T27511] RBP: 00007f535feaf090 R08: 0000200000003700 R09: 0000000000000000 [ 1558.803043][T27511] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 1558.803079][T27511] R13: 00007f53616d6038 R14: 00007f53616d5fa0 R15: 00007ffffe79b488 [ 1558.803191][T27511] [ 1558.856003][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1558.856106][ T28] audit: type=1400 audit(1782166779.722:4981): avc: denied { write } for pid=27489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.014274][T27364] loop7: p179 start 16777216 is beyond EOD, [ 1559.076409][T27172] veth0_vlan: entered promiscuous mode [ 1559.095193][T27172] veth1_vlan: entered promiscuous mode [ 1559.107713][T27364] truncated [ 1559.117832][T27172] veth0_macvtap: entered promiscuous mode [ 1559.126224][T27364] loop7: p180 start 16777216 is beyond EOD, truncated [ 1559.139297][ T28] audit: type=1400 audit(1782166780.002:4982): avc: denied { write } for pid=27521 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.148427][T27364] loop7: p181 start 16777216 is beyond EOD, truncated [ 1559.168192][T27364] loop7: p182 start 16777216 is beyond EOD, truncated [ 1559.175072][T27364] loop7: p183 start 16777216 is beyond EOD, truncated [ 1559.181982][T27364] loop7: p184 start 16777216 is beyond EOD, truncated [ 1559.188900][T27364] loop7: p185 start 16777216 is beyond EOD, truncated [ 1559.195698][T27364] loop7: p186 start 16777216 is beyond EOD, truncated [ 1559.202523][T27364] loop7: p187 start 16777216 is beyond EOD, truncated [ 1559.209348][T27364] loop7: p188 start 16777216 is beyond EOD, truncated [ 1559.216178][T27364] loop7: p189 start 16777216 is beyond EOD, truncated [ 1559.223029][T27364] loop7: p190 start 16777216 is beyond EOD, truncated [ 1559.229867][T27364] loop7: p191 start 16777216 is beyond EOD, truncated [ 1559.236780][T27364] loop7: p192 start 16777216 is beyond EOD, truncated [ 1559.256048][T27172] veth1_macvtap: entered promiscuous mode [ 1559.267136][T27172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.300532][T27172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.315100][T13198] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.331596][T27364] loop7: p193 start 16777216 is beyond EOD, truncated [ 1559.338508][T27364] loop7: p194 start 16777216 is beyond EOD, truncated [ 1559.345324][T27364] loop7: p195 start 16777216 is beyond EOD, truncated [ 1559.352137][T27364] loop7: p196 start 16777216 is beyond EOD, truncated [ 1559.355508][T13198] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.358933][T27364] loop7: p197 start 16777216 is beyond EOD, truncated [ 1559.358995][T27364] loop7: p198 start 16777216 is beyond EOD, truncated [ 1559.359012][T27364] loop7: p199 start 16777216 is beyond EOD, truncated [ 1559.359030][T27364] loop7: p200 start 16777216 is beyond EOD, truncated [ 1559.394908][T27364] loop7: p201 start 16777216 is beyond EOD, truncated [ 1559.401717][T27364] loop7: p202 start 16777216 is beyond EOD, truncated [ 1559.408517][T27364] loop7: p203 start 16777216 is beyond EOD, truncated [ 1559.415328][T27364] loop7: p204 start 16777216 is beyond EOD, truncated [ 1559.420914][T13198] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.473042][T27364] loop7: p205 start 16777216 is beyond EOD, truncated [ 1559.483797][T13198] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.485062][T27364] loop7: p206 start 16777216 is beyond EOD, truncated [ 1559.512010][T27364] loop7: p207 start 16777216 is beyond EOD, truncated [ 1559.523590][T27364] loop7: p208 start 16777216 is beyond EOD, truncated [ 1559.539212][T27364] loop7: p209 start 16777216 is beyond EOD, truncated [ 1559.564510][T27364] loop7: p210 start 16777216 is beyond EOD, truncated [ 1559.588714][T27364] loop7: p211 start 16777216 is beyond EOD, truncated [ 1559.607000][T27364] loop7: p212 start 16777216 is beyond EOD, truncated [ 1559.624555][T27364] loop7: p213 start 16777216 is beyond EOD, truncated [ 1559.638086][ T28] audit: type=1400 audit(1782166780.502:4983): avc: denied { write } for pid=27527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.646791][T27364] loop7: p214 start 16777216 is beyond EOD, truncated [ 1559.719741][T27364] loop7: p215 start 16777216 is beyond EOD, truncated [ 1559.727450][ T28] audit: type=1400 audit(1782166780.582:4984): avc: denied { write } for pid=27543 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.738114][T27364] loop7: p216 start 16777216 is beyond EOD, truncated [ 1559.808004][T27364] loop7: p217 start 16777216 is beyond EOD, truncated [ 1559.831256][T27364] loop7: p218 start 16777216 is beyond EOD, truncated [ 1559.855671][T27364] loop7: p219 start 16777216 is beyond EOD, truncated [ 1559.881666][T27364] loop7: p220 start 16777216 is beyond EOD, truncated [ 1559.905482][T27364] loop7: p221 start 16777216 is beyond EOD, truncated [ 1559.932619][T27364] loop7: p222 start 16777216 is beyond EOD, truncated [ 1559.958697][T27364] loop7: p223 start 16777216 is beyond EOD, truncated [ 1559.972752][ T28] audit: type=1400 audit(1782166780.842:4985): avc: denied { write } for pid=27546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.003422][T27364] loop7: p224 start 16777216 is beyond EOD, truncated [ 1560.029460][T27364] loop7: p225 start 16777216 is beyond EOD, truncated [ 1560.058028][T27364] loop7: p226 start 16777216 is beyond EOD, truncated [ 1560.064905][T27364] loop7: p227 start 16777216 is beyond EOD, truncated [ 1560.071708][T27364] loop7: p228 start 16777216 is beyond EOD, truncated [ 1560.078667][T27364] loop7: p229 start 16777216 is beyond EOD, truncated [ 1560.128255][T27364] loop7: p230 start 16777216 is beyond EOD, truncated [ 1560.135107][T27364] loop7: p231 start 16777216 is beyond EOD, truncated [ 1560.157991][T27364] loop7: p232 start 16777216 is beyond EOD, truncated [ 1560.164887][ T28] audit: type=1400 audit(1782166781.032:4986): avc: denied { write } for pid=27560 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1560.188540][T27364] loop7: p233 start 16777216 is beyond EOD, truncated [ 1560.218023][T27364] loop7: p234 start 16777216 is beyond EOD, truncated [ 1560.233976][T27364] loop7: p235 start 16777216 is beyond EOD, truncated [ 1560.258372][T27364] loop7: p236 start 16777216 is beyond EOD, truncated [ 1560.278097][T27364] loop7: p237 start 16777216 is beyond EOD, truncated [ 1560.288504][T27364] loop7: p238 start 16777216 is beyond EOD, truncated [ 1560.295351][T27364] loop7: p239 start 16777216 is beyond EOD, truncated [ 1560.302154][T27364] loop7: p240 start 16777216 is beyond EOD, truncated [ 1560.308967][T27364] loop7: p241 start 16777216 is beyond EOD, truncated [ 1560.315829][T27364] loop7: p242 start 16777216 is beyond EOD, truncated [ 1560.322674][T27364] loop7: p243 start 16777216 is beyond EOD, truncated [ 1560.329469][T27364] loop7: p244 start 16777216 is beyond EOD, truncated [ 1560.336343][T27364] loop7: p245 start 16777216 is beyond EOD, truncated [ 1560.343163][T27364] loop7: p246 start 16777216 is beyond EOD, truncated [ 1560.349989][T27364] loop7: p247 start 16777216 is beyond EOD, truncated [ 1560.356941][T27364] loop7: p248 start 16777216 is beyond EOD, truncated [ 1560.363963][T27364] loop7: p249 start 16777216 is beyond EOD, truncated [ 1560.370787][T27364] loop7: p250 start 16777216 is beyond EOD, truncated [ 1560.377665][T27364] loop7: p251 start 16777216 is beyond EOD, truncated [ 1560.384467][T27364] loop7: p252 start 16777216 is beyond EOD, truncated [ 1560.398089][T27569] FAULT_INJECTION: forcing a failure. [ 1560.398089][T27569] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.437557][T27569] CPU: 1 UID: 0 PID: 27569 Comm: syz.0.5884 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1560.437596][T27569] Tainted: [W]=WARN [ 1560.437606][T27569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1560.437624][T27569] Call Trace: [ 1560.437673][T27569] [ 1560.437694][T27569] __dump_stack+0x1d/0x30 [ 1560.437780][T27569] dump_stack_lvl+0x95/0xd0 [ 1560.437806][T27569] dump_stack+0x15/0x1b [ 1560.437850][T27569] should_fail_ex+0x25e/0x270 [ 1560.437885][T27569] ? __hw_addr_create+0x3f/0x140 [ 1560.438063][T27569] should_failslab+0x8c/0xb0 [ 1560.438091][T27569] __kmalloc_cache_noprof+0x7b/0x3d0 [ 1560.438197][T27569] ? __hw_addr_create+0x3f/0x140 [ 1560.438238][T27569] ? _raw_spin_unlock_irq+0x9/0x30 [ 1560.438313][T27569] __hw_addr_create+0x3f/0x140 [ 1560.438353][T27569] ? __hw_addr_add_ex+0x13c/0x310 [ 1560.438395][T27569] __hw_addr_add_ex+0x157/0x310 [ 1560.438461][T27569] ? __pfx_vlan_setup+0x10/0x10 [ 1560.438562][T27569] dev_addr_init+0xb1/0x120 [ 1560.438607][T27569] alloc_netdev_mqs+0x1cc/0xa60 [ 1560.438638][T27569] rtnl_create_link+0x239/0x720 [ 1560.438758][T27569] rtnl_newlink_create+0x175/0x650 [ 1560.438815][T27569] ? security_capable+0x7b/0x90 [ 1560.438901][T27569] ? netlink_ns_capable+0x86/0xa0 [ 1560.438935][T27569] rtnl_newlink+0x1181/0x1400 [ 1560.439029][T27569] ? cred_has_capability+0x84/0x2a0 [ 1560.439087][T27569] ? kcsan_setup_watchpoint+0x3e8/0x450 [ 1560.439126][T27569] ? __rcu_read_unlock+0x4e/0x70 [ 1560.439161][T27569] ? avc_has_perm_noaudit+0xa3/0x120 [ 1560.439245][T27569] ? cred_has_capability+0x224/0x2a0 [ 1560.439291][T27569] ? selinux_capable+0x31/0x40 [ 1560.439333][T27569] ? security_capable+0x7b/0x90 [ 1560.439402][T27569] ? ns_capable+0x80/0xb0 [ 1560.439464][T27569] ? __pfx_rtnl_newlink+0x10/0x10 [ 1560.439537][T27569] rtnetlink_rcv_msg+0x64b/0x720 [ 1560.439587][T27569] netlink_rcv_skb+0x11e/0x220 [ 1560.439625][T27569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1560.439675][T27569] rtnetlink_rcv+0x1c/0x30 [ 1560.439708][T27569] netlink_unicast+0x5a7/0x680 [ 1560.439746][T27569] netlink_sendmsg+0x5be/0x6f0 [ 1560.439783][T27569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.439885][T27569] ____sys_sendmsg+0x532/0x580 [ 1560.439919][T27569] ___sys_sendmsg+0x195/0x1e0 [ 1560.439965][T27569] __x64_sys_sendmsg+0xd4/0x160 [ 1560.439993][T27569] x64_sys_call+0x194c/0x3020 [ 1560.440081][T27569] do_syscall_64+0x136/0x3c0 [ 1560.440225][T27569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.440255][T27569] RIP: 0033:0x7f217e3bce59 [ 1560.440285][T27569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.440320][T27569] RSP: 002b:00007f217ce0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1560.440341][T27569] RAX: ffffffffffffffda RBX: 00007f217e635fa0 RCX: 00007f217e3bce59 [ 1560.440364][T27569] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1560.440378][T27569] RBP: 00007f217ce0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.440395][T27569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.440409][T27569] R13: 00007f217e636038 R14: 00007f217e635fa0 R15: 00007ffdfd3a3ad8 [ 1560.440429][T27569] [ 1560.768721][T27364] loop7: p253 start 16777216 is beyond EOD, truncated [ 1560.776052][T27542] ALSA: seq fatal error: cannot create timer (-22) [ 1560.776945][T27364] loop7: p254 start 16777216 is beyond EOD, truncated [ 1560.808036][T27364] loop7: p255 start 16777216 is beyond EOD, truncated [ 1560.855472][ T2980] loop7: p1 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 1560.855745][ T2980] loop7: p1 start 16777216 is beyond EOD, [ 1561.033675][ T28] audit: type=1400 audit(1782166781.892:4987): avc: denied { write } for pid=27564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.101842][ T2980] truncated [ 1561.141015][ T2980] loop7: p5 start 16777216 is beyond EOD, truncated [ 1561.168106][ T2980] loop7: p6 start 16777216 is beyond EOD, truncated [ 1561.174807][ T2980] loop7: p7 start 16777216 is beyond EOD, truncated [ 1561.181432][ T2980] loop7: p8 start 16777216 is beyond EOD, truncated [ 1561.188047][ T2980] loop7: p9 start 16777216 is beyond EOD, truncated [ 1561.194659][ T2980] loop7: p10 start 16777216 is beyond EOD, truncated [ 1561.201399][ T2980] loop7: p11 start 16777216 is beyond EOD, truncated [ 1561.208106][ T2980] loop7: p12 start 16777216 is beyond EOD, truncated [ 1561.214813][ T2980] loop7: p13 start 16777216 is beyond EOD, truncated [ 1561.221549][ T2980] loop7: p14 start 16777216 is beyond EOD, truncated [ 1561.228249][ T2980] loop7: p15 start 16777216 is beyond EOD, truncated [ 1561.234952][ T2980] loop7: p16 start 16777216 is beyond EOD, truncated [ 1561.241662][ T2980] loop7: p17 start 16777216 is beyond EOD, truncated [ 1561.248369][ T2980] loop7: p18 start 16777216 is beyond EOD, truncated [ 1561.255072][ T2980] loop7: p19 start 16777216 is beyond EOD, truncated [ 1561.261852][ T2980] loop7: p20 start 16777216 is beyond EOD, truncated [ 1561.275104][ T28] audit: type=1400 audit(1782166782.142:4988): avc: denied { write } for pid=27586 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.416532][ T2980] loop7: p21 start 16777216 is beyond EOD, truncated [ 1561.423446][ T2980] loop7: p22 start 16777216 is beyond EOD, truncated [ 1561.430334][ T2980] loop7: p23 start 16777216 is beyond EOD, truncated [ 1561.437402][ T2980] loop7: p24 start 16777216 is beyond EOD, truncated [ 1561.444459][ T2980] loop7: p25 start 16777216 is beyond EOD, truncated [ 1561.452537][ T2980] loop7: p26 start 16777216 is beyond EOD, truncated [ 1561.459754][ T2980] loop7: p27 start 16777216 is beyond EOD, truncated [ 1561.486943][ T2980] loop7: p28 start 16777216 is beyond EOD, truncated [ 1561.530745][ T2980] loop7: p29 start 16777216 is beyond EOD, truncated [ 1561.548760][ T2980] loop7: p30 start 16777216 is beyond EOD, truncated [ 1561.659007][ T2980] loop7: p31 start 16777216 is beyond EOD, truncated [ 1561.674715][ T28] audit: type=1400 audit(1782166782.542:4989): avc: denied { write } for pid=27590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.698044][ T2980] loop7: p32 start 16777216 is beyond EOD, truncated [ 1561.706044][ T2980] loop7: p33 start 16777216 is beyond EOD, truncated [ 1561.713104][ T2980] loop7: p34 start 16777216 is beyond EOD, truncated [ 1561.719998][ T2980] loop7: p35 start 16777216 is beyond EOD, truncated [ 1561.726983][ T2980] loop7: p36 start 16777216 is beyond EOD, truncated [ 1561.733767][ T2980] loop7: p37 start 16777216 is beyond EOD, truncated [ 1561.748711][ T2980] loop7: p38 start 16777216 is beyond EOD, truncated [ 1561.755539][ T2980] loop7: p39 start 16777216 is beyond EOD, truncated [ 1561.762666][ T2980] loop7: p40 start 16777216 is beyond EOD, truncated [ 1561.769567][ T2980] loop7: p41 start 16777216 is beyond EOD, truncated [ 1561.776421][ T2980] loop7: p42 start 16777216 is beyond EOD, truncated [ 1561.785484][ T2980] loop7: p43 start 16777216 is beyond EOD, truncated [ 1561.792614][ T2980] loop7: p44 start 16777216 is beyond EOD, truncated [ 1561.801047][ T2980] loop7: p45 start 16777216 is beyond EOD, truncated [ 1561.832634][ T2980] loop7: p46 start 16777216 is beyond EOD, truncated [ 1561.839566][ T28] audit: type=1400 audit(1782166782.712:4990): avc: denied { write } for pid=27612 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.868447][ T2980] loop7: p47 start 16777216 is beyond EOD, truncated [ 1561.886927][ T2980] loop7: p48 start 16777216 is beyond EOD, truncated [ 1561.898031][ T2980] loop7: p49 start 16777216 is beyond EOD, truncated [ 1562.016189][ T2980] loop7: p50 start 16777216 is beyond EOD, truncated [ 1562.023245][ T2980] loop7: p51 start 16777216 is beyond EOD, truncated [ 1562.030189][ T2980] loop7: p52 start 16777216 is beyond EOD, truncated [ 1562.036981][ T2980] loop7: p53 start 16777216 is beyond EOD, truncated [ 1562.044003][ T2980] loop7: p54 start 16777216 is beyond EOD, truncated [ 1562.050900][ T2980] loop7: p55 start 16777216 is beyond EOD, truncated [ 1562.057626][ T2980] loop7: p56 start 16777216 is beyond EOD, truncated [ 1562.064576][ T2980] loop7: p57 start 16777216 is beyond EOD, truncated [ 1562.071490][ T2980] loop7: p58 start 16777216 is beyond EOD, truncated [ 1562.097203][T27628] 9p: Bad value for 'wfdno' [ 1562.102979][ T2980] loop7: p59 start 16777216 is beyond EOD, truncated [ 1562.109945][ T2980] loop7: p60 start 16777216 is beyond EOD, truncated [ 1562.116663][ T2980] loop7: p61 start 16777216 is beyond EOD, truncated [ 1562.123502][ T2980] loop7: p62 start 16777216 is beyond EOD, truncated [ 1562.130421][ T2980] loop7: p63 start 16777216 is beyond EOD, truncated [ 1562.137190][ T2980] loop7: p64 start 16777216 is beyond EOD, truncated [ 1562.623839][T27636] loop5: detected capacity change from 0 to 128 [ 1562.923469][T27636] loop5: detected capacity change from 0 to 512 [ 1563.091185][ T2980] loop7: p65 start 16777216 is beyond EOD, truncated [ 1563.098017][ T2980] loop7: p66 start 16777216 is beyond EOD, truncated [ 1563.104731][ T2980] loop7: p67 start 16777216 is beyond EOD, truncated [ 1563.111450][ T2980] loop7: p68 start 16777216 is beyond EOD, truncated [ 1563.118211][ T2980] loop7: p69 start 16777216 is beyond EOD, truncated [ 1563.125049][ T2980] loop7: p70 start 16777216 is beyond EOD, truncated [ 1563.131996][ T2980] loop7: p71 start 16777216 is beyond EOD, truncated [ 1563.899149][ T2980] loop7: p72 start 16777216 is beyond EOD, truncated [ 1563.905922][ T2980] loop7: p73 start 16777216 is beyond EOD, truncated [ 1563.912731][ T2980] loop7: p74 start 16777216 is beyond EOD, truncated [ 1563.919486][ T2980] loop7: p75 start 16777216 is beyond EOD, truncated [ 1563.926254][ T2980] loop7: p76 start 16777216 is beyond EOD, truncated [ 1563.929745][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1563.929803][ T28] audit: type=1400 audit(1782166784.792:5001): avc: denied { write } for pid=27652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.933340][ T2980] loop7: p77 start 16777216 is beyond EOD, [ 1564.004569][ T28] audit: type=1400 audit(1782166784.872:5002): avc: denied { write } for pid=27665 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.011122][ T2980] truncated [ 1564.080790][ T2980] loop7: p78 start 16777216 is beyond EOD, truncated [ 1564.100764][ T2980] loop7: p79 start 16777216 is beyond EOD, truncated [ 1564.121568][ T2980] loop7: p80 start 16777216 is beyond EOD, truncated [ 1564.134492][ T2980] loop7: p81 start 16777216 is beyond EOD, truncated [ 1564.149428][ T2980] loop7: p82 start 16777216 is beyond EOD, truncated [ 1564.165059][ T2980] loop7: p83 start 16777216 is beyond EOD, truncated [ 1564.183477][ T2980] loop7: p84 start 16777216 is beyond EOD, truncated [ 1564.203278][ T2980] loop7: p85 start 16777216 is beyond EOD, truncated [ 1564.220702][ T2980] loop7: p86 start 16777216 is beyond EOD, truncated [ 1564.237835][ T2980] loop7: p87 start 16777216 is beyond EOD, truncated [ 1564.259130][ T2980] loop7: p88 start 16777216 is beyond EOD, truncated [ 1564.278870][ T2980] loop7: p89 start 16777216 is beyond EOD, truncated [ 1564.288821][ T28] audit: type=1400 audit(1782166785.162:5003): avc: denied { write } for pid=27667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.297324][ T2980] loop7: p90 start 16777216 is beyond EOD, truncated [ 1564.362588][ T28] audit: type=1400 audit(1782166785.222:5004): avc: denied { write } for pid=27678 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.384541][ T2980] loop7: p91 start 16777216 is beyond EOD, truncated [ 1564.384568][ T2980] loop7: p92 start 16777216 is beyond EOD, truncated [ 1564.384589][ T2980] loop7: p93 start 16777216 is beyond EOD, truncated [ 1564.425015][ T2980] loop7: p94 start 16777216 is beyond EOD, truncated [ 1564.443274][ T2980] loop7: p95 start 16777216 is beyond EOD, truncated [ 1564.463601][ T2980] loop7: p96 start 16777216 is beyond EOD, truncated [ 1564.481645][ T2980] loop7: p97 start 16777216 is beyond EOD, truncated [ 1564.501127][ T2980] loop7: p98 start 16777216 is beyond EOD, truncated [ 1564.525479][ T2980] loop7: p99 start 16777216 is beyond EOD, truncated [ 1564.532487][ T2980] loop7: p100 start 16777216 is beyond EOD, truncated [ 1564.539503][ T2980] loop7: p101 start 16777216 is beyond EOD, truncated [ 1564.547325][ T2980] loop7: p102 start 16777216 is beyond EOD, truncated [ 1564.558034][ T2980] loop7: p103 start 16777216 is beyond EOD, truncated [ 1564.569636][ T2980] loop7: p104 start 16777216 is beyond EOD, truncated [ 1564.579523][ T2980] loop7: p105 start 16777216 is beyond EOD, truncated [ 1564.589625][ T2980] loop7: p106 start 16777216 is beyond EOD, truncated [ 1564.604245][ T2980] loop7: p107 start 16777216 is beyond EOD, truncated [ 1564.619348][ T2980] loop7: p108 start 16777216 is beyond EOD, truncated [ 1564.627407][ T2980] loop7: p109 start 16777216 is beyond EOD, truncated [ 1564.634504][ T2980] loop7: p110 start 16777216 is beyond EOD, truncated [ 1564.648086][ T2980] loop7: p111 start 16777216 is beyond EOD, truncated [ 1564.660653][ T2980] loop7: p112 start 16777216 is beyond EOD, truncated [ 1564.667555][ T2980] loop7: p113 start 16777216 is beyond EOD, truncated [ 1564.674713][ T2980] loop7: p114 start 16777216 is beyond EOD, truncated [ 1564.684040][ T28] audit: type=1400 audit(1782166785.552:5005): avc: denied { write } for pid=27680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.692971][ T2980] loop7: p115 start 16777216 is beyond EOD, truncated [ 1564.743637][ T2980] loop7: p116 start 16777216 is beyond EOD, truncated [ 1564.753936][ T2980] loop7: p117 start 16777216 is beyond EOD, truncated [ 1564.755743][ T28] audit: type=1400 audit(1782166785.592:5006): avc: denied { write } for pid=27691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.771244][ T2980] loop7: p118 start 16777216 is beyond EOD, truncated [ 1564.811152][ T2980] loop7: p119 start 16777216 is beyond EOD, truncated [ 1564.826213][ T2980] loop7: p120 start 16777216 is beyond EOD, truncated [ 1564.840222][ T2980] loop7: p121 start 16777216 is beyond EOD, truncated [ 1564.855047][ T2980] loop7: p122 start 16777216 is beyond EOD, truncated [ 1564.870098][ T2980] loop7: p123 start 16777216 is beyond EOD, truncated [ 1564.878558][ T2980] loop7: p124 start 16777216 is beyond EOD, truncated [ 1564.889933][ T2980] loop7: p125 start 16777216 is beyond EOD, truncated [ 1564.907207][ T2980] loop7: p126 start 16777216 is beyond EOD, truncated [ 1564.917396][ T28] audit: type=1400 audit(1782166785.782:5007): avc: denied { write } for pid=27693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.920877][ T2980] loop7: p127 start 16777216 is beyond EOD, truncated [ 1564.978720][ T28] audit: type=1400 audit(1782166785.832:5008): avc: denied { write } for pid=27704 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.988464][ T2980] loop7: p128 start 16777216 is beyond EOD, truncated [ 1565.021673][ T2980] loop7: p129 start 16777216 is beyond EOD, truncated [ 1565.034965][ T2980] loop7: p130 start 16777216 is beyond EOD, truncated [ 1565.046915][ T2980] loop7: p131 start 16777216 is beyond EOD, truncated [ 1565.061819][ T2980] loop7: p132 start 16777216 is beyond EOD, truncated [ 1565.075572][ T2980] loop7: p133 start 16777216 is beyond EOD, truncated [ 1565.090216][ T2980] loop7: p134 start 16777216 is beyond EOD, truncated [ 1565.101735][ T2980] loop7: p135 start 16777216 is beyond EOD, truncated [ 1565.114642][ T2980] loop7: p136 start 16777216 is beyond EOD, truncated [ 1565.128207][ T2980] loop7: p137 start 16777216 is beyond EOD, truncated [ 1565.135085][ T2980] loop7: p138 start 16777216 is beyond EOD, truncated [ 1565.146774][ T28] audit: type=1400 audit(1782166786.012:5009): avc: denied { write } for pid=27706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1565.153566][ T2980] loop7: p139 start 16777216 is beyond EOD, [ 1565.202421][ T28] audit: type=1400 audit(1782166786.062:5010): avc: denied { write } for pid=27717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1565.218899][ T2980] truncated [ 1565.234260][ T2980] loop7: p140 start 16777216 is beyond EOD, truncated [ 1565.242132][ T2980] loop7: p141 start 16777216 is beyond EOD, truncated [ 1565.258398][ T2980] loop7: p142 start 16777216 is beyond EOD, truncated [ 1565.265511][ T2980] loop7: p143 start 16777216 is beyond EOD, truncated [ 1565.278051][ T2980] loop7: p144 start 16777216 is beyond EOD, truncated [ 1565.288349][ T2980] loop7: p145 start 16777216 is beyond EOD, truncated [ 1565.306729][ T2980] loop7: p146 start 16777216 is beyond EOD, truncated [ 1565.315183][ T2980] loop7: p147 start 16777216 is beyond EOD, truncated [ 1565.331169][ T2980] loop7: p148 start 16777216 is beyond EOD, truncated [ 1565.351033][ T2980] loop7: p149 start 16777216 is beyond EOD, truncated [ 1565.362759][ T2980] loop7: p150 start 16777216 is beyond EOD, truncated [ 1565.376222][ T2980] loop7: p151 start 16777216 is beyond EOD, truncated [ 1565.390917][ T2980] loop7: p152 start 16777216 is beyond EOD, truncated [ 1565.408154][ T2980] loop7: p153 start 16777216 is beyond EOD, truncated [ 1565.420393][ T2980] loop7: p154 start 16777216 is beyond EOD, truncated [ 1565.436070][ T2980] loop7: p155 start 16777216 is beyond EOD, truncated [ 1565.449457][ T2980] loop7: p156 start 16777216 is beyond EOD, truncated [ 1565.467912][ T2980] loop7: p157 start 16777216 is beyond EOD, truncated [ 1565.478114][ T2980] loop7: p158 start 16777216 is beyond EOD, truncated [ 1565.485347][ T2980] loop7: p159 start 16777216 is beyond EOD, truncated [ 1565.494757][ T2980] loop7: p160 start 16777216 is beyond EOD, truncated [ 1565.502166][ T2980] loop7: p161 start 16777216 is beyond EOD, truncated [ 1565.513599][ T2980] loop7: p162 start 16777216 is beyond EOD, truncated [ 1565.520919][ T2980] loop7: p163 start 16777216 is beyond EOD, truncated [ 1565.528450][ T2980] loop7: p164 start 16777216 is beyond EOD, truncated [ 1565.547869][ T2980] loop7: p165 start 16777216 is beyond EOD, truncated [ 1565.555663][ T2980] loop7: p166 start 16777216 is beyond EOD, truncated [ 1565.590499][ T2980] loop7: p167 start 16777216 is beyond EOD, truncated [ 1565.597752][T27724] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 1565.618642][T27724] SELinux: failed to load policy [ 1565.624460][ T2980] loop7: p168 start 16777216 is beyond EOD, truncated [ 1565.631793][ T2980] loop7: p169 start 16777216 is beyond EOD, truncated [ 1565.639344][ T2980] loop7: p170 start 16777216 is beyond EOD, truncated [ 1565.650478][ T2980] loop7: p171 start 16777216 is beyond EOD, truncated [ 1565.657585][ T2980] loop7: p172 start 16777216 is beyond EOD, truncated [ 1565.664924][ T2980] loop7: p173 start 16777216 is beyond EOD, truncated [ 1565.685567][ T2980] loop7: p174 start 16777216 is beyond EOD, truncated [ 1565.693484][ T2980] loop7: p175 start 16777216 is beyond EOD, truncated [ 1565.701708][ T2980] loop7: p176 start 16777216 is beyond EOD, truncated [ 1565.719855][ T2980] loop7: p177 start 16777216 is beyond EOD, truncated [ 1565.726705][ T2980] loop7: p178 start 16777216 is beyond EOD, truncated [ 1565.734618][ T2980] loop7: p179 start 16777216 is beyond EOD, truncated [ 1565.741997][ T2980] loop7: p180 start 16777216 is beyond EOD, truncated [ 1565.748996][ T2980] loop7: p181 start 16777216 is beyond EOD, truncated [ 1565.766131][T27733] FAULT_INJECTION: forcing a failure. [ 1565.766131][T27733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1565.787681][ T2980] loop7: p182 start 16777216 is beyond EOD, truncated [ 1565.795853][ T2980] loop7: p183 start 16777216 is beyond EOD, truncated [ 1565.802818][T27733] CPU: 0 UID: 0 PID: 27733 Comm: syz.5.5900 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1565.802858][T27733] Tainted: [W]=WARN [ 1565.802868][T27733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1565.802884][T27733] Call Trace: [ 1565.802891][T27733] [ 1565.802899][T27733] __dump_stack+0x1d/0x30 [ 1565.802939][T27733] dump_stack_lvl+0x95/0xd0 [ 1565.803109][T27733] dump_stack+0x15/0x1b [ 1565.803147][T27733] should_fail_ex+0x25e/0x270 [ 1565.803181][T27733] should_fail_alloc_page+0xf2/0x100 [ 1565.803212][T27733] __alloc_frozen_pages_noprof+0x108/0x350 [ 1565.803267][T27733] alloc_pages_mpol+0xa9/0x1d0 [ 1565.803296][T27733] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 1565.803365][T27733] handle_mm_fault+0x1020/0x2da0 [ 1565.803430][T27733] ? _raw_spin_lock+0x52/0xa0 [ 1565.803472][T27733] __get_user_pages+0x129c/0x1f10 [ 1565.803521][T27733] __gup_longterm_locked+0x905/0xe30 [ 1565.803609][T27733] ? security_ptrace_access_check+0x61/0x70 [ 1565.803693][T27733] ? __ptrace_may_access+0x288/0x330 [ 1565.803767][T27733] pin_user_pages_remote+0x7e/0xb0 [ 1565.803810][T27733] process_vm_rw+0x49b/0x9c0 [ 1565.803853][T27733] __x64_sys_process_vm_writev+0x78/0x90 [ 1565.803945][T27733] x64_sys_call+0x1592/0x3020 [ 1565.803973][T27733] do_syscall_64+0x136/0x3c0 [ 1565.804010][T27733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.804046][T27733] RIP: 0033:0x7fa9a581ce59 [ 1565.804063][T27733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.804089][T27733] RSP: 002b:00007fa9a426f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1565.804116][T27733] RAX: ffffffffffffffda RBX: 00007fa9a5a95fa0 RCX: 00007fa9a581ce59 [ 1565.804146][T27733] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000019 [ 1565.804160][T27733] RBP: 00007fa9a426f090 R08: 0000000000000001 R09: 0000000000000000 [ 1565.804173][T27733] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000002 [ 1565.804187][T27733] R13: 00007fa9a5a96038 R14: 00007fa9a5a95fa0 R15: 00007ffea21ea998 [ 1565.804277][T27733] [ 1565.804301][ T2980] loop7: p184 start 16777216 is beyond EOD, truncated [ 1566.032859][ T2980] loop7: p185 start 16777216 is beyond EOD, truncated [ 1566.158383][ T2980] loop7: p186 start 16777216 is beyond EOD, truncated [ 1566.165233][ T2980] loop7: p187 start 16777216 is beyond EOD, truncated [ 1566.172064][ T2980] loop7: p188 start 16777216 is beyond EOD, truncated [ 1566.178890][ T2980] loop7: p189 start 16777216 is beyond EOD, truncated [ 1566.185715][ T2980] loop7: p190 start 16777216 is beyond EOD, truncated [ 1566.192504][ T2980] loop7: p191 start 16777216 is beyond EOD, truncated [ 1566.199369][ T2980] loop7: p192 start 16777216 is beyond EOD, truncated [ 1566.206271][ T2980] loop7: p193 start 16777216 is beyond EOD, truncated [ 1566.213057][ T2980] loop7: p194 start 16777216 is beyond EOD, truncated [ 1566.219842][ T2980] loop7: p195 start 16777216 is beyond EOD, truncated [ 1566.226629][ T2980] loop7: p196 start 16777216 is beyond EOD, truncated [ 1566.233463][ T2980] loop7: p197 start 16777216 is beyond EOD, truncated [ 1566.240258][ T2980] loop7: p198 start 16777216 is beyond EOD, truncated [ 1566.247055][ T2980] loop7: p199 start 16777216 is beyond EOD, truncated [ 1566.253891][ T2980] loop7: p200 start 16777216 is beyond EOD, truncated [ 1566.314677][ T2980] loop7: p201 start 16777216 is beyond EOD, truncated [ 1566.321619][ T2980] loop7: p202 start 16777216 is beyond EOD, truncated [ 1566.328448][ T2980] loop7: p203 start 16777216 is beyond EOD, truncated [ 1566.335323][ T2980] loop7: p204 start 16777216 is beyond EOD, truncated [ 1566.342220][ T2980] loop7: p205 start 16777216 is beyond EOD, truncated [ 1566.349504][ T2980] loop7: p206 start 16777216 is beyond EOD, truncated [ 1566.356619][ T2980] loop7: p207 start 16777216 is beyond EOD, truncated [ 1566.363798][ T2980] loop7: p208 start 16777216 is beyond EOD, truncated [ 1566.407494][ T2980] loop7: p209 start 16777216 is beyond EOD, truncated [ 1566.414514][ T2980] loop7: p210 start 16777216 is beyond EOD, truncated [ 1566.425481][ T2980] loop7: p211 start 16777216 is beyond EOD, truncated [ 1566.432411][ T2980] loop7: p212 start 16777216 is beyond EOD, truncated [ 1566.447187][ T2980] loop7: p213 start 16777216 is beyond EOD, truncated [ 1566.454323][ T2980] loop7: p214 start 16777216 is beyond EOD, truncated [ 1566.464578][T27749] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 1566.476546][ T2980] loop7: p215 start 16777216 is beyond EOD, truncated [ 1566.487173][ T2980] loop7: p216 start 16777216 is beyond EOD, truncated [ 1566.510214][T27749] bond1: entered promiscuous mode [ 1566.515331][ T2980] loop7: p217 start 16777216 is beyond EOD, truncated [ 1566.524137][T27749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1566.530890][ T2980] loop7: p218 start 16777216 is beyond EOD, truncated [ 1566.542936][ T2980] loop7: p219 start 16777216 is beyond EOD, truncated [ 1566.601561][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5902'. [ 1566.617692][ T2980] loop7: p220 start 16777216 is beyond EOD, truncated [ 1566.636393][ T2980] loop7: p221 start 16777216 is beyond EOD, truncated [ 1566.661788][ T2980] loop7: p222 start 16777216 is beyond EOD, truncated [ 1566.704586][ T2980] loop7: p223 start 16777216 is beyond EOD, truncated [ 1566.714209][ T2980] loop7: p224 start 16777216 is beyond EOD, truncated [ 1566.722464][ T2980] loop7: p225 start 16777216 is beyond EOD, truncated [ 1566.729712][ T2980] loop7: p226 start 16777216 is beyond EOD, truncated [ 1566.736675][ T2980] loop7: p227 start 16777216 is beyond EOD, truncated [ 1566.744086][ T2980] loop7: p228 start 16777216 is beyond EOD, truncated [ 1566.751510][ T2980] loop7: p229 start 16777216 is beyond EOD, truncated [ 1566.758618][ T2980] loop7: p230 start 16777216 is beyond EOD, truncated [ 1566.767325][T27757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27757 comm=syz.2.5904 [ 1566.782226][ T2980] loop7: p231 start 16777216 is beyond EOD, truncated [ 1566.789683][ T2980] loop7: p232 start 16777216 is beyond EOD, truncated [ 1566.796915][ T2980] loop7: p233 start 16777216 is beyond EOD, truncated [ 1566.807353][ T2980] loop7: p234 start 16777216 is beyond EOD, truncated [ 1566.814639][ T2980] loop7: p235 start 16777216 is beyond EOD, truncated [ 1566.821887][ T2980] loop7: p236 start 16777216 is beyond EOD, truncated [ 1566.841135][ T2980] loop7: p237 start 16777216 is beyond EOD, truncated [ 1566.848436][ T2980] loop7: p238 start 16777216 is beyond EOD, truncated [ 1566.855497][ T2980] loop7: p239 start 16777216 is beyond EOD, truncated [ 1566.863606][ T2980] loop7: p240 start 16777216 is beyond EOD, truncated [ 1566.870834][ T2980] loop7: p241 start 16777216 is beyond EOD, truncated [ 1566.878116][ T2980] loop7: p242 start 16777216 is beyond EOD, truncated [ 1566.885006][ T2980] loop7: p243 start 16777216 is beyond EOD, truncated [ 1566.892338][ T2980] loop7: p244 start 16777216 is beyond EOD, truncated [ 1566.899422][ T2980] loop7: p245 start 16777216 is beyond EOD, truncated [ 1566.906498][ T2980] loop7: p246 start 16777216 is beyond EOD, truncated [ 1566.916915][ T2980] loop7: p247 start 16777216 is beyond EOD, truncated [ 1566.923983][ T2980] loop7: p248 start 16777216 is beyond EOD, truncated [ 1566.931316][ T2980] loop7: p249 start 16777216 is beyond EOD, truncated [ 1566.939472][ T2980] loop7: p250 start 16777216 is beyond EOD, truncated [ 1566.946719][ T2980] loop7: p251 start 16777216 is beyond EOD, truncated [ 1566.954153][ T2980] loop7: p252 start 16777216 is beyond EOD, truncated [ 1566.961099][ T2980] loop7: p253 start 16777216 is beyond EOD, truncated [ 1566.967901][ T2980] loop7: p254 start 16777216 is beyond EOD, truncated [ 1566.974936][ T2980] loop7: p255 start 16777216 is beyond EOD, truncated [ 1567.038019][T27752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1567.045372][T27752] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1567.055469][T27752] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1567.066844][T27752] bond1: (slave gre1): making interface the new active one [ 1567.074092][T27752] gre1: entered promiscuous mode [ 1567.081332][T27752] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1567.096801][T27749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1567.117565][T20202] udevd[20202]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1567.173121][T20202] udevd[20202]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1567.201086][T27762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=27762 comm=syz.8.5905 [ 1568.801233][T27796] ================================================================== [ 1568.809385][T27796] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 1568.816910][T27796] [ 1568.819270][T27796] write to 0xffff88810483cf00 of 8 bytes by task 27792 on cpu 1: [ 1568.827007][T27796] mas_wmb_replace+0x22e/0x1770 [ 1568.831894][T27796] mas_wr_store_entry+0x54a7/0x5a90 [ 1568.837125][T27796] mas_store_prealloc+0x421/0x670 [ 1568.842177][T27796] vma_complete+0x3c7/0x850 [ 1568.846708][T27796] __split_vma+0x592/0x640 [ 1568.851169][T27796] vma_modify+0xb29/0xc80 [ 1568.855527][T27796] vma_modify_flags+0x182/0x210 [ 1568.860407][T27796] mprotect_fixup+0x3a2/0x680 [ 1568.865126][T27796] do_mprotect_pkey+0x69e/0x950 [ 1568.870012][T27796] __x64_sys_mprotect+0x48/0x60 [ 1568.874906][T27796] x64_sys_call+0x2768/0x3020 [ 1568.879620][T27796] do_syscall_64+0x136/0x3c0 [ 1568.884228][T27796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.890142][T27796] [ 1568.892479][T27796] read to 0xffff88810483cf00 of 8 bytes by task 27796 on cpu 0: [ 1568.900161][T27796] mtree_range_walk+0x35a/0x480 [ 1568.905042][T27796] mas_walk+0x1ac/0x340 [ 1568.909218][T27796] lock_vma_under_rcu+0xc9/0x210 [ 1568.914177][T27796] do_user_addr_fault+0x237/0x1060 [ 1568.919318][T27796] exc_page_fault+0x62/0xa0 [ 1568.923866][T27796] asm_exc_page_fault+0x26/0x30 [ 1568.928747][T27796] [ 1568.931102][T27796] value changed: 0xffff88811bb43f41 -> 0xffff88810483cf00 [ 1568.938218][T27796] [ 1568.940553][T27796] Reported by Kernel Concurrency Sanitizer on: [ 1568.946712][T27796] CPU: 0 UID: 0 PID: 27796 Comm: syz.5.5912 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1568.957681][T27796] Tainted: [W]=WARN [ 1568.961492][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1568.971560][T27796] ================================================================== [ 1569.412105][T20630] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1569.427620][T20630] CPU: 1 UID: 0 PID: 20630 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1569.427654][T20630] Tainted: [W]=WARN [ 1569.427661][T20630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1569.427677][T20630] Call Trace: [ 1569.427687][T20630] [ 1569.427698][T20630] __dump_stack+0x1d/0x30 [ 1569.427740][T20630] dump_stack_lvl+0x95/0xd0 [ 1569.427761][T20630] dump_stack+0x15/0x1b [ 1569.427780][T20630] dump_header+0x80/0x240 [ 1569.427805][T20630] oom_kill_process+0x295/0x350 [ 1569.427908][T20630] out_of_memory+0x981/0xbc0 [ 1569.428060][T20630] try_charge_memcg+0x621/0xa00 [ 1569.428112][T20630] charge_memcg+0x6d/0x120 [ 1569.428171][T20630] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1569.428232][T20630] swap_cache_alloc_folio+0x47b/0x5e0 [ 1569.428271][T20630] swap_cluster_readahead+0x3d2/0x460 [ 1569.428439][T20630] swapin_readahead+0xd8/0x8a0 [ 1569.428477][T20630] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1569.428505][T20630] ? hrtimer_start_range_ns+0x108/0x120 [ 1569.428553][T20630] ? __rcu_read_unlock+0x4e/0x70 [ 1569.428579][T20630] ? swap_cache_get_folio+0x1f7/0x200 [ 1569.428617][T20630] do_swap_page+0x2a2/0x1ec0 [ 1569.428654][T20630] ? __schedule+0x799/0xd10 [ 1569.428690][T20630] ? __rcu_read_lock+0x36/0x50 [ 1569.428737][T20630] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1569.428812][T20630] handle_mm_fault+0xb3c/0x2da0 [ 1569.428856][T20630] do_user_addr_fault+0x634/0x1060 [ 1569.428895][T20630] ? trace_page_fault_user+0x1f/0xa0 [ 1569.429000][T20630] exc_page_fault+0x62/0xa0 [ 1569.429039][T20630] asm_exc_page_fault+0x26/0x30 [ 1569.429072][T20630] RIP: 0033:0x7f0b54a87fd7 [ 1569.429088][T20630] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1569.429112][T20630] RSP: 002b:00007ffe21e12300 EFLAGS: 00010202 [ 1569.429172][T20630] RAX: 0000000000000000 RBX: 000055556c2b0500 RCX: 00007f0b54a87fd7 [ 1569.429218][T20630] RDX: 00007ffe21e12340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1569.429234][T20630] RBP: 00007ffe21e123ac R08: 0000000000000000 R09: 0000000000000000 [ 1569.429248][T20630] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1569.429262][T20630] R13: 00000000000927c0 R14: 000000000017f228 R15: 00007ffe21e12400 [ 1569.429288][T20630] [ 1569.686455][T20630] memory: usage 183424kB, limit 307200kB, failcnt 2988 [ 1569.704687][T20630] memory+swap: usage 150692kB, limit 9007199254740988kB, failcnt 0 [ 1569.715611][T20630] kmem: usage 130756kB, limit 9007199254740988kB, failcnt 0 [ 1569.725968][T20630] Memory cgroup stats for /syz7: [ 1569.726259][T20630] cache 491520 [ 1569.758001][T20630] rss 0 [ 1569.760859][T20630] shmem 0 [ 1569.763838][T20630] mapped_file 0 [ 1569.767330][T20630] dirty 217088 [ 1569.770852][T20630] writeback 0 [ 1569.774816][T20630] workingset_refault_anon 1741 [ 1569.779740][T20630] workingset_refault_file 120 [ 1569.788140][T20630] swap 45056 [ 1569.792782][T20630] swapcached 36573184 [ 1569.805599][T20630] pgpgin 304712 [ 1569.809255][T20630] pgpgout 304586 [ 1569.812886][T20630] pgfault 367350 [ 1569.816549][T20630] pgmajfault 573 [ 1569.820421][T20630] inactive_anon 0 [ 1569.824180][T20630] active_anon 4096 [ 1569.828143][T20630] inactive_file 0 [ 1569.831841][T20630] active_file 491520 [ 1569.835940][T20630] unevictable 0 [ 1569.839724][T20630] hierarchical_memory_limit 314572800 [ 1569.845212][T20630] hierarchical_memsw_limit 9223372036854771712 [ 1569.851729][T20630] total_cache 491520 [ 1569.855695][T20630] total_rss 0 [ 1569.859313][T20630] total_shmem 0 [ 1569.862871][T20630] total_mapped_file 0 [ 1569.866890][T20630] total_dirty 217088 [ 1569.871166][T20630] total_writeback 0 [ 1569.875052][T20630] total_workingset_refault_anon 1741 [ 1569.883634][T20630] total_workingset_refault_file 120 [ 1569.889419][T20630] total_swap 45056 [ 1569.893250][T20630] total_swapcached 36573184 [ 1569.897806][T20630] total_pgpgin 304712 [ 1569.902184][T20630] total_pgpgout 304586 [ 1569.906391][T20630] total_pgfault 367350 [ 1569.910653][T20630] total_pgmajfault 573 [ 1569.914912][T20630] total_inactive_anon 0 [ 1569.919335][T20630] total_active_anon 4096 [ 1569.923637][T20630] total_inactive_file 0 [ 1569.928116][T20630] total_active_file 491520 [ 1569.932656][T20630] total_unevictable 0 [ 1569.936718][T20630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.5911,pid=27782,uid=0 [ 1569.951931][T20630] Memory cgroup out of memory: OOM victim 27782 (syz.7.5911) is already exiting. Skip killing the task [ 1575.468879][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1575.468975][ T28] audit: type=1400 audit(1782166796.342:5012): avc: denied { write } for pid=27808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1575.507361][ T28] audit: type=1400 audit(1782166796.372:5013): avc: denied { write } for pid=27819 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1575.772159][ T28] audit: type=1400 audit(1782166796.642:5014): avc: denied { write } for pid=27822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1575.806222][ T28] audit: type=1400 audit(1782166796.672:5015): avc: denied { write } for pid=27833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.742189][ T28] audit: type=1400 audit(1782166797.612:5016): avc: denied { write } for pid=27836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.775415][ T28] audit: type=1400 audit(1782166797.642:5017): avc: denied { write } for pid=27847 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.868627][ T28] audit: type=1400 audit(1782166797.742:5018): avc: denied { write } for pid=27850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.902775][ T28] audit: type=1400 audit(1782166797.772:5019): avc: denied { write } for pid=27861 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1576.995862][ T28] audit: type=1400 audit(1782166797.862:5020): avc: denied { write } for pid=27864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1577.029487][ T28] audit: type=1400 audit(1782166797.902:5021): avc: denied { write } for pid=27875 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1